{"id":"https://openalex.org/W2904470035","doi":"https://doi.org/10.1109/ssic.2018.8556755","title":"A Novel Android Malware Detection Approach Using Operand Sequences","display_name":"A Novel Android Malware Detection Approach Using Operand Sequences","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2904470035","doi":"https://doi.org/10.1109/ssic.2018.8556755","mag":"2904470035"},"language":"en","primary_location":{"id":"doi:10.1109/ssic.2018.8556755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssic.2018.8556755","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 Third International Conference on Security of Smart Cities, Industrial Control System and Communications (SSIC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100364264","display_name":"Peng Zhang","orcid":"https://orcid.org/0009-0000-6945-6450"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Zhang","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085001934","display_name":"Shaoyin Cheng","orcid":"https://orcid.org/0000-0002-3992-9509"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaoyin Cheng","raw_affiliation_strings":["Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei, P. R., China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei, P. R., China","institution_ids":["https://openalex.org/I4210160629","https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067996220","display_name":"Songhao Lou","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songhao Lou","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100688754","display_name":"Fan Jiang","orcid":"https://orcid.org/0000-0002-1641-5804"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Jiang","raw_affiliation_strings":["Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei, P. R., China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei, P. R., China","institution_ids":["https://openalex.org/I4210160629","https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9872000217437744,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/opcode","display_name":"Opcode","score":0.9786738157272339},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8962759971618652},{"id":"https://openalex.org/keywords/operand","display_name":"Operand","score":0.8429936170578003},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.8207041025161743},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8191879987716675},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7776345014572144},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.41119813919067383},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.40788882970809937}],"concepts":[{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.9786738157272339},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8962759971618652},{"id":"https://openalex.org/C55526617","wikidata":"https://www.wikidata.org/wiki/Q719375","display_name":"Operand","level":2,"score":0.8429936170578003},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.8207041025161743},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8191879987716675},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7776345014572144},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.41119813919067383},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.40788882970809937}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ssic.2018.8556755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssic.2018.8556755","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 Third International Conference on Security of Smart Cities, Industrial Control System and Communications (SSIC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1865564993","https://openalex.org/W1947535385","https://openalex.org/W1987375341","https://openalex.org/W1990649188","https://openalex.org/W2024071684","https://openalex.org/W2060692877","https://openalex.org/W2079215333","https://openalex.org/W2122672392","https://openalex.org/W2141198770","https://openalex.org/W2294381999","https://openalex.org/W2487124337","https://openalex.org/W2576498804","https://openalex.org/W2744097819","https://openalex.org/W2761574137","https://openalex.org/W2792663539","https://openalex.org/W2964136807"],"related_works":["https://openalex.org/W2105427843","https://openalex.org/W4253086129","https://openalex.org/W36091977","https://openalex.org/W4382794599","https://openalex.org/W2800331776","https://openalex.org/W2003791967","https://openalex.org/W4385749679","https://openalex.org/W4386500498","https://openalex.org/W4312234627","https://openalex.org/W2236938640"],"abstract_inverted_index":{"Android":[0,17,24,35,52,102,135,144,168],"malware":[1,53,136,149,158],"detection":[2],"has":[3],"become":[4],"increasingly":[5],"important":[6],"over":[7],"the":[8,14,20,34,40,44,58,71,75,84,92,117,124,177,183],"past":[9],"few":[10],"years,":[11],"due":[12],"to":[13,32,87,94,97,107,109,132,154],"popularity":[15],"of":[16,23,147,179],"devices":[18],"and":[19,82,165],"explosive":[21],"growth":[22],"applications.":[25],"This":[26],"asks":[27],"for":[28],"more":[29],"effective":[30],"techniques":[31],"detect":[33],"malware.":[36],"Some":[37],"works":[38],"in":[39,61,79,100,186],"literature":[41],"show":[42,175],"that":[43,176],"opcode":[45,72,184],"sequences":[46,73],"have":[47],"a":[48,134],"remarkable":[49],"effect":[50],"on":[51,116,142],"detection.":[54],"However,":[55],"they":[56],"omitted":[57],"information":[59,127],"contained":[60],"operand":[62,80],"sequences.":[63],"In":[64,105,120],"this":[65],"paper,":[66],"we":[67,113,122],"do":[68],"not":[69],"analyse":[70],"but":[74],"API":[76,85,98,103,130],"calls":[77,86,131],"used":[78],"sequences,":[81],"abstract":[83],"their":[88],"package":[89,125],"names":[90],"with":[91],"aim":[93],"be":[95,110],"resilient":[96],"changes":[99],"different":[101],"levels.":[104],"order":[106],"avoid":[108],"computationally":[111],"expensive,":[112],"only":[114],"capitalize":[115],"n-grams":[118,185],"analysis.":[119],"addition,":[121],"apply":[123],"level":[126],"extracted":[128],"from":[129,161,171],"build":[133],"prediction":[137],"model.":[138],"We":[139],"perform":[140],"experiments":[141],"malicious":[143],"applications,":[145],"composed":[146],"5560":[148],"samples":[150,159],"which":[151],"are":[152],"belong":[153],"Drebin":[155],"dataset,":[156],"361":[157],"collected":[160],"Contagio":[162],"Mobile":[163],"Malware":[164],"5900":[166],"benign":[167],"applications":[169],"retrieved":[170],"Google":[172],"Play.":[173],"Results":[174],"accuracy":[178],"our":[180],"approach":[181],"exceeds":[182],"some":[187],"ways.":[188]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}