{"id":"https://openalex.org/W2790911692","doi":"https://doi.org/10.1109/infocom.2018.8486327","title":"AppDNA: App Behavior Profiling via Graph-based Deep Learning","display_name":"AppDNA: App Behavior Profiling via Graph-based Deep Learning","publication_year":2018,"publication_date":"2018-04-01","ids":{"openalex":"https://openalex.org/W2790911692","doi":"https://doi.org/10.1109/infocom.2018.8486327","mag":"2790911692"},"language":"en","primary_location":{"id":"doi:10.1109/infocom.2018.8486327","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom.2018.8486327","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2018 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108654030","display_name":"Shuangshuang Xue","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shuangshuang Xue","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100322329","display_name":"Lan Zhang","orcid":"https://orcid.org/0000-0003-3964-8034"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan Zhang","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000173131","display_name":"Anran Li","orcid":"https://orcid.org/0000-0002-3592-4153"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anran Li","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100341802","display_name":"Xiang\u2010Yang Li","orcid":"https://orcid.org/0000-0002-6070-6625"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang-Yang Li","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075133929","display_name":"Chaoyi Ruan","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoyi Ruan","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015170609","display_name":"Wenchao Huang","orcid":"https://orcid.org/0000-0002-2043-2439"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenchao Huang","raw_affiliation_strings":["University of Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5108654030"],"corresponding_institution_ids":["https://openalex.org/I126520041"],"apc_list":null,"apc_paid":null,"fwci":1.8166,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.85831731,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1475","last_page":"1483"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8284474611282349},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7969881892204285},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.7283903360366821},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5560914278030396},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5487521290779114},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4685780704021454},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.45427757501602173},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36523932218551636},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2202986776828766},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1468411684036255},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.11919459700584412}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8284474611282349},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7969881892204285},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.7283903360366821},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5560914278030396},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5487521290779114},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4685780704021454},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.45427757501602173},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36523932218551636},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2202986776828766},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1468411684036255},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.11919459700584412},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom.2018.8486327","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom.2018.8486327","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2018 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1545528966","https://openalex.org/W1982773740","https://openalex.org/W1984971831","https://openalex.org/W1988036170","https://openalex.org/W2047421912","https://openalex.org/W2060692877","https://openalex.org/W2085577046","https://openalex.org/W2092942461","https://openalex.org/W2100495367","https://openalex.org/W2110889728","https://openalex.org/W2113137917","https://openalex.org/W2122672392","https://openalex.org/W2131177460","https://openalex.org/W2152660559","https://openalex.org/W2154851992","https://openalex.org/W2166743230","https://openalex.org/W2168103835","https://openalex.org/W2487925454","https://openalex.org/W2495127032","https://openalex.org/W2518060702","https://openalex.org/W2535386169","https://openalex.org/W2752566459","https://openalex.org/W2790857402","https://openalex.org/W2962756421","https://openalex.org/W2964145825","https://openalex.org/W3104097132","https://openalex.org/W4242210993","https://openalex.org/W4244726870","https://openalex.org/W4256462051","https://openalex.org/W6646093935","https://openalex.org/W6713582119","https://openalex.org/W6749178241"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W3152891574","https://openalex.org/W4316881845","https://openalex.org/W2975527072"],"abstract_inverted_index":{"Better":[0],"understanding":[1,92],"of":[2,76,93,200,205],"mobile":[3],"applications'":[4],"behaviors":[5],"would":[6],"lead":[7],"to":[8,26,35,99,111,118,123,152],"better":[9,13],"malware":[10,79,146],"detection/classification":[11],"and":[12,68,90,135,149,203],"app":[14,34,81,103,126,143,150],"recommendation":[15],"for":[16,32,65,72,197,208],"users.":[17],"In":[18],"this":[19],"work,":[20],"we":[21,97],"design":[22,107],"a":[23,29,56,73,88,101,108,113,119,153,198],"framework":[24],"AppDNA":[25],"automatically":[27],"generate":[28],"compact":[30],"representation":[31,60],"each":[33,66],"comprehensively":[36],"profile":[37],"its":[38],"behaviors.":[39],"The":[40],"behavior":[41],"difference":[42],"between":[43,52],"two":[44],"apps":[45,137,165],"can":[46,61],"be":[47,62,70],"measured":[48],"by":[49],"the":[50,58],"distance":[51],"their":[53],"representations.":[54],"As":[55],"result,":[57],"versatile":[59],"generated":[63],"once":[64],"app,":[67],"then":[69],"used":[71],"wide":[74],"variety":[75],"objectives,":[77],"including":[78],"detection,":[80,84,147],"categorizing,":[82],"plagiarism":[83],"etc.":[85],"Based":[86],"on":[87,132],"systematic":[89],"deep":[91],"an":[94],"app's":[95],"behavior,":[96],"propose":[98],"perform":[100],"function-call-graph-based":[102],"profiling.":[104,127],"We":[105],"carefully":[106],"graph-encoding":[109],"method":[110],"convert":[112],"typically":[114],"extremely":[115,157],"large":[116],"call-graph":[117],"64-dimension":[120],"fix-size":[121],"vector":[122],"achieve":[124],"robust":[125],"Our":[128],"extensive":[129],"evaluations":[130],"based":[131],"86,332":[133],"benign":[134],"malicious":[136],"demonstrate":[138],"that":[139],"our":[140],"system":[141],"performs":[142],"profiling":[144],"(thus":[145],"classification,":[148],"recommendation)":[151],"high":[154],"accuracy":[155,171,187,195,204],"with":[156,170,186,194],"low":[158],"computation":[159],"cost:":[160],"it":[161,174,189],"classifies":[162,175,190],"4024":[163],"(benign/malware)":[164],"using":[166,182],"around":[167,183],"5.06":[168],"second":[169,185],"about":[172],"93.07%;":[173],"570":[176],"malware's":[177],"family":[178],"(total":[179],"21":[180],"families)":[181],"0.83":[184],"82.3%;":[188],"9,730":[191],"apps'":[192],"functionality":[193],"33.3%":[196],"total":[199],"7":[201],"categories":[202],"88.1":[206],"%":[207],"2":[209],"categories.":[210]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}