{"id":"https://openalex.org/W4211182611","doi":"https://doi.org/10.1109/cns53000.2021.9705047","title":"Automatic Detection of Android Steganography Apps via Symbolic Execution and Tree Matching","display_name":"Automatic Detection of Android Steganography Apps via Symbolic Execution and Tree Matching","publication_year":2021,"publication_date":"2021-10-04","ids":{"openalex":"https://openalex.org/W4211182611","doi":"https://doi.org/10.1109/cns53000.2021.9705047"},"language":"en","primary_location":{"id":"doi:10.1109/cns53000.2021.9705047","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns53000.2021.9705047","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100457355","display_name":"Wenhao Chen","orcid":"https://orcid.org/0000-0002-4887-9865"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenhao Chen","raw_affiliation_strings":["Iowa State University, Ames, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Iowa State University, Ames, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101843401","display_name":"Lin Li","orcid":"https://orcid.org/0000-0002-5184-7258"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li Lin","raw_affiliation_strings":["Iowa State University, Ames, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Iowa State University, Ames, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000369926","display_name":"Jennifer Newman","orcid":"https://orcid.org/0000-0001-7220-0915"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jennifer Newman","raw_affiliation_strings":["Iowa State University, Ames, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Iowa State University, Ames, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100719924","display_name":"Yong Guan","orcid":"https://orcid.org/0000-0003-0445-1848"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yong Guan","raw_affiliation_strings":["Iowa State University, Ames, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Iowa State University, Ames, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I173911158"],"apc_list":null,"apc_paid":null,"fwci":0.463,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.64096386,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"254","last_page":"262"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9729999899864197,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/steganography","display_name":"Steganography","score":0.8189919590950012},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8135862350463867},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6787356734275818},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.53521728515625},{"id":"https://openalex.org/keywords/steganalysis","display_name":"Steganalysis","score":0.4892590045928955},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47045791149139404},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4340302050113678},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41501206159591675},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09187713265419006}],"concepts":[{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.8189919590950012},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8135862350463867},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6787356734275818},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.53521728515625},{"id":"https://openalex.org/C107368093","wikidata":"https://www.wikidata.org/wiki/Q448176","display_name":"Steganalysis","level":4,"score":0.4892590045928955},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47045791149139404},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4340302050113678},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41501206159591675},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09187713265419006}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns53000.2021.9705047","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns53000.2021.9705047","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320308590","display_name":"University of California","ror":"https://ror.org/00pjdza24"},{"id":"https://openalex.org/F4320309133","display_name":"Duke University","ror":"https://ror.org/00py81415"},{"id":"https://openalex.org/F4320309370","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10"},{"id":"https://openalex.org/F4320310207","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33"},{"id":"https://openalex.org/F4320310536","display_name":"University of Virginia","ror":"https://ror.org/0153tk833"},{"id":"https://openalex.org/F4320311090","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78"},{"id":"https://openalex.org/F4320311274","display_name":"West Virginia University","ror":"https://ror.org/011vxgd24"},{"id":"https://openalex.org/F4320313676","display_name":"Swarthmore College","ror":"https://ror.org/012dg8a96"},{"id":"https://openalex.org/F4320337820","display_name":"Center for Statistics and Applications in Forensic Evidence","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1519220202","https://openalex.org/W1760530029","https://openalex.org/W1943233084","https://openalex.org/W1992114977","https://openalex.org/W2007857904","https://openalex.org/W2028197392","https://openalex.org/W2040060046","https://openalex.org/W2058180826","https://openalex.org/W2122672392","https://openalex.org/W2141198770","https://openalex.org/W2168103835","https://openalex.org/W2294381999","https://openalex.org/W2349613318","https://openalex.org/W2501678966","https://openalex.org/W2599823825","https://openalex.org/W2725069636","https://openalex.org/W2885997731","https://openalex.org/W2889171067","https://openalex.org/W2955308964","https://openalex.org/W2962909855","https://openalex.org/W2975621618","https://openalex.org/W2978600004","https://openalex.org/W4246264663"],"related_works":["https://openalex.org/W2148973528","https://openalex.org/W2939392096","https://openalex.org/W4243922849","https://openalex.org/W2106726851","https://openalex.org/W4309385482","https://openalex.org/W3154843532","https://openalex.org/W2068740952","https://openalex.org/W2182496537","https://openalex.org/W2792878404","https://openalex.org/W1965039524"],"abstract_inverted_index":{"The":[0],"recent":[1],"focus":[2],"of":[3,9,18,48,103,157,205],"cyber":[4],"security":[5],"on":[6,43],"automated":[7,122],"detection":[8,47],"malware":[10],"for":[11,22,35,69,79],"Android":[12,126,188],"apps":[13,20,31,190],"has":[14,62,215],"omitted":[15],"the":[16,46,60,81,120,145,154,172,181,216],"study":[17],"some":[19],"used":[21,34],"“legitimate”":[23],"purposes,":[24],"such":[25],"as":[26,87],"steganography":[27,30,95,116,127,159],"apps.":[28,128],"Mobile":[29],"can":[32,91,97,184],"be":[33,92,98,219],"delivering":[36],"harmful":[37],"messages,":[38],"and":[39,54,105,143,196],"while":[40],"current":[41],"research":[42],"steganalysis":[44],"targets":[45],"stego":[49,89,189],"images":[50],"using":[51],"academic":[52],"algorithms":[53,96,111,200],"well-built":[55],"benchmarking":[56],"image":[57,109,137],"data":[58],"sets,":[59],"community":[61],"overlooked":[63],"uncovering":[64],"a":[65,84,88,101,158,164,202,211],"mobile":[66],"app":[67,86,90],"itself":[68],"its":[70],"ability":[71],"to":[72,115,124,133,170,218,221],"perform":[73],"steganographic":[74],"embedding.":[75],"Developing":[76],"automatic":[77],"tools":[78],"identifying":[80],"code":[82],"in":[83,100],"suspect":[85],"very":[93],"challenging:":[94],"represented":[99],"variety":[102],"ways,":[104],"there":[106],"exists":[107],"many":[108],"editing":[110],"which":[112],"appear":[113],"similar":[114,223],"algorithms.This":[117],"paper":[118],"proposes":[119],"first":[121],"approach":[123,183],"detect":[125,185],"We":[129,162],"use":[130,163],"symbolic":[131],"execution":[132],"summarize":[134],"an":[135],"app’s":[136],"operation":[138],"behavior":[139,156],"into":[140],"expression":[141,147,175],"trees,":[142],"match":[144],"extracted":[146],"trees":[148,151],"with":[149,201],"reference":[150],"that":[152,191,214],"represents":[153],"expected":[155],"embedding":[160,199],"process.":[161],"structural":[165],"feature":[166],"based":[167],"similarity":[168,173],"measure":[169],"calculate":[171],"between":[174],"trees.":[176],"Our":[177],"experiments":[178],"show":[179],"that,":[180],"propose":[182],"real":[186],"world":[187],"implement":[192],"common":[193],"spatial":[194],"domain":[195,198],"frequency":[197],"high":[203],"degree":[204],"accuracy.":[206],"Furthermore,":[207],"our":[208],"procedure":[209],"describes":[210],"general":[212],"framework":[213],"potential":[217],"applied":[220],"other":[222],"questions":[224],"when":[225],"studying":[226],"program":[227],"behaviors.":[228]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}