{"id":"https://openalex.org/W2751961913","doi":"https://doi.org/10.1109/nas.2017.8026853","title":"Detecting Information Theft Based on Mobile Network Flows for Android Users","display_name":"Detecting Information Theft Based on Mobile Network Flows for Android Users","publication_year":2017,"publication_date":"2017-08-01","ids":{"openalex":"https://openalex.org/W2751961913","doi":"https://doi.org/10.1109/nas.2017.8026853","mag":"2751961913"},"language":"en","primary_location":{"id":"doi:10.1109/nas.2017.8026853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nas.2017.8026853","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 International Conference on Networking, Architecture, and Storage (NAS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005892660","display_name":"Zhenyu Cheng","orcid":"https://orcid.org/0000-0003-3292-7428"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Cheng","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062771971","display_name":"Xunxun Chen","orcid":"https://orcid.org/0000-0002-9481-4819"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210087772","display_name":"National Computer Network Emergency Response Technical Team/Coordination Center of Chinar","ror":"https://ror.org/00247dh76","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210087772"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xunxun Chen","raw_affiliation_strings":["Chinese Academy of Sciences, Institute of Information Engineering, Beijing, China","National Computer Network Emergency Response Technical Team/Coordination Center of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences, Institute of Information Engineering, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"National Computer Network Emergency Response Technical Team/Coordination Center of China, Beijing, China","institution_ids":["https://openalex.org/I4210087772"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100715816","display_name":"Yongzheng Zhang","orcid":"https://orcid.org/0009-0000-1077-3849"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongzheng Zhang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100706213","display_name":"Shuhao Li","orcid":"https://orcid.org/0000-0001-5709-1159"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuhao Li","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080574543","display_name":"Yafei Sang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yafei Sang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8675,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.87177562,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8312066197395325},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6878583431243896},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.550508975982666},{"id":"https://openalex.org/keywords/android-application","display_name":"Android application","score":0.42028170824050903},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3848719596862793},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15494340658187866}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8312066197395325},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6878583431243896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.550508975982666},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.42028170824050903},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3848719596862793},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15494340658187866}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/nas.2017.8026853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nas.2017.8026853","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 International Conference on Networking, Architecture, and Storage (NAS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6200000047683716}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W32581813","https://openalex.org/W170732776","https://openalex.org/W1866884617","https://openalex.org/W1983750266","https://openalex.org/W2041276426","https://openalex.org/W2046843253","https://openalex.org/W2053008565","https://openalex.org/W2077673877","https://openalex.org/W2129141174","https://openalex.org/W2135088779","https://openalex.org/W2136433906","https://openalex.org/W2152660559","https://openalex.org/W2166743230","https://openalex.org/W2289508129","https://openalex.org/W2295321789","https://openalex.org/W2911964244","https://openalex.org/W3136699861","https://openalex.org/W4244726870","https://openalex.org/W6639092898"],"related_works":["https://openalex.org/W327645657","https://openalex.org/W4229710179","https://openalex.org/W4298063370","https://openalex.org/W2482892055","https://openalex.org/W2965382761","https://openalex.org/W4299620683","https://openalex.org/W2464350861","https://openalex.org/W3092209205","https://openalex.org/W4253505977","https://openalex.org/W2235122986"],"abstract_inverted_index":{"With":[0],"the":[1,28,38,46,53,79,82,99,115,123,133,136,149,159,163,183,211],"widespread":[2],"use":[3],"of":[4,34,40,81,101,135,162,214],"smartphones,":[5,35],"more":[6,8],"and":[7,36,78,85,106,174,187,197],"malicious":[9,86,184],"attacks":[10],"happen":[11],"with":[12],"information":[13,48,54,215],"leakage":[14],"from":[15],"apps":[16,69,177],"installed":[17],"on":[18,98],"users'":[19,50],"devices.":[20],"The":[21],"adversary":[22],"always":[23],"uses":[24],"a":[25,94],"malware":[26],"as":[27],"client":[29],"to":[30,43,56,121,144,165,178,181],"take":[31],"remote":[32],"control":[33],"leverages":[37],"vulnerability":[39],"operation":[41],"systems":[42],"send":[44],"back":[45],"collected":[47],"without":[49,152],"permissions.":[51],"All":[52],"has":[55],"be":[57,89],"transferred":[58],"by":[59,75,113,147],"network":[60,73,107,124,185,212],"traffic.":[61],"In":[62],"this":[63,172],"paper,":[64],"we":[65,92,138,156,170],"consider":[66],"that":[67,190,204],"different":[68,72,76],"maybe":[70],"generate":[71,179],"flows":[74,84,125,213],"operations,":[77],"\"shapes\"":[80],"benign":[83,127,176],"ones":[87],"will":[88],"diverse.":[90],"Thus":[91],"propose":[93],"detection":[95,192],"model":[96,193,206],"based":[97],"analysis":[100],"relationships":[102],"between":[103],"behavior":[104,160],"patterns":[105],"flows,":[108,186],"which":[109,202],"achieves":[110],"our":[111,167,191,205],"goal":[112],"using":[114],"Random":[116],"Forest":[117],"machine":[118],"learning":[119],"algorithm":[120],"classify":[122],"into":[126],"or":[128],"malicious.":[129],"To":[130],"further":[131],"improve":[132],"controllability":[134],"experiment,":[137],"design":[139],"an":[140],"app":[141,164,173],"called":[142],"Moledroid":[143],"simulate":[145],"malwares":[146],"uploading":[148],"user's":[150],"privacy":[151],"authorization,":[153],"in":[154],"addition,":[155],"can":[157,194],"change":[158],"pattern":[161],"complete":[166],"evaluation.":[168],"Finally,":[169],"run":[171],"several":[175],"traffic":[180],"detect":[182],"it":[188],"shows":[189],"achieve":[195],"precision":[196],"accuracy":[198],"higher":[199],"than":[200],"95%,":[201],"demonstrates":[203],"is":[207],"suitable":[208],"for":[209],"detecting":[210],"theft.":[216]},"counts_by_year":[{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}