{"id":"https://openalex.org/W2784030825","doi":"https://doi.org/10.1109/tbdata.2018.2790439","title":"A Large-Scale Study of Android Malware Development Phenomenon on Public Malware Submission and Scanning Platform","display_name":"A Large-Scale Study of Android Malware Development Phenomenon on Public Malware Submission and Scanning Platform","publication_year":2018,"publication_date":"2018-01-08","ids":{"openalex":"https://openalex.org/W2784030825","doi":"https://doi.org/10.1109/tbdata.2018.2790439","mag":"2784030825"},"language":"en","primary_location":{"id":"doi:10.1109/tbdata.2018.2790439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2018.2790439","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101650393","display_name":"Heqing Huang","orcid":"https://orcid.org/0000-0001-8113-3531"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]},{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Heqing Huang","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown Heights, NY, USA","Pennsylvania State University, State College, PA, USA"],"raw_orcid":"https://orcid.org/0000-0001-8113-3531","affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]},{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086241811","display_name":"Cong Zheng","orcid":"https://orcid.org/0000-0002-0195-4880"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cong Zheng","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069622674","display_name":"Junyuan Zeng","orcid":"https://orcid.org/0000-0002-2413-3065"},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Junyuan Zeng","raw_affiliation_strings":["University of Texas at Dallas, Richardson, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-2413-3065","affiliations":[{"raw_affiliation_string":"University of Texas at Dallas, Richardson, TX, USA","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100606053","display_name":"Wu Zhou","orcid":"https://orcid.org/0000-0002-5917-1723"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wu Zhou","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101952501","display_name":"Sencun Zhu","orcid":"https://orcid.org/0000-0002-1047-7967"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sencun Zhu","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA"],"raw_orcid":"https://orcid.org/0000-0002-5091-8464","affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040348286","display_name":"Ian Molloy","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ian Molloy","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048460582","display_name":"Suresh T. Chari","orcid":"https://orcid.org/0000-0002-3924-0971"},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suresh Chari","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100383731","display_name":"Ce Zhang","orcid":"https://orcid.org/0000-0002-8105-7505"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ce Zhang","raw_affiliation_strings":["ETH Zurich, Z\u00fcrich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084935157","display_name":"Quanlong Guan","orcid":"https://orcid.org/0000-0001-6911-3853"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanlong Guan","raw_affiliation_strings":["Jinan University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9841,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.75127517,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"7","issue":"2","first_page":"255","last_page":"270"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8932594060897827},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7536448240280151},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7462478876113892},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.6962924003601074},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5752406120300293},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.5607525706291199},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.47021129727363586},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.34390851855278015},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.33933401107788086},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3027189075946808}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8932594060897827},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7536448240280151},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7462478876113892},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.6962924003601074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5752406120300293},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5607525706291199},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.47021129727363586},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34390851855278015},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33933401107788086},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3027189075946808}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tbdata.2018.2790439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2018.2790439","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G169035714","display_name":null,"funder_award_id":"CNS-1618684","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2485040236","display_name":null,"funder_award_id":"21617408","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G4958794329","display_name":null,"funder_award_id":"CNS-1505664","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5441460892","display_name":null,"funder_award_id":"CNS-1422594","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7920987171","display_name":null,"funder_award_id":"61602210","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8813751538","display_name":null,"funder_award_id":"SBE-1422215","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320310419","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W110636400","https://openalex.org/W190551272","https://openalex.org/W1445387515","https://openalex.org/W1582716752","https://openalex.org/W1658739283","https://openalex.org/W1912123407","https://openalex.org/W1997322704","https://openalex.org/W2000159976","https://openalex.org/W2018102253","https://openalex.org/W2045057497","https://openalex.org/W2060692877","https://openalex.org/W2088673953","https://openalex.org/W2102197271","https://openalex.org/W2110143557","https://openalex.org/W2111525908","https://openalex.org/W2121398530","https://openalex.org/W2122595236","https://openalex.org/W2125011234","https://openalex.org/W2131523719","https://openalex.org/W2264131323","https://openalex.org/W2293923001","https://openalex.org/W2307188943","https://openalex.org/W2324464293","https://openalex.org/W2399891510","https://openalex.org/W2491928626","https://openalex.org/W2507568508","https://openalex.org/W2518350929","https://openalex.org/W2601621757","https://openalex.org/W4285719527","https://openalex.org/W6607702499","https://openalex.org/W6628532452","https://openalex.org/W6636829475","https://openalex.org/W6640114639","https://openalex.org/W6678079094","https://openalex.org/W6698142500","https://openalex.org/W6712192629"],"related_works":["https://openalex.org/W4256304280","https://openalex.org/W4249009605","https://openalex.org/W2900526031","https://openalex.org/W2395100307","https://openalex.org/W2114381667","https://openalex.org/W2909615516","https://openalex.org/W1966145327","https://openalex.org/W2717179875","https://openalex.org/W4387456547","https://openalex.org/W4249118297"],"abstract_inverted_index":{"With":[0],"the":[1,11,20,29,53,68,98,101,106,151,161,203,206,215,223,233,236,240],"steady":[2],"growth":[3],"of":[4,32,55,74,100,126,157,164,205,208,235],"Android":[5,16,39],"malware,":[6],"we":[7,37,47],"suspect":[8],"that,":[9],"during":[10],"malware":[12,17,34,40,147,224],"development":[13,41,162,225],"phase,":[14],"some":[15,188],"writers":[18],"use":[19],"popular":[21],"public":[22],"scanning":[23],"services":[24],"(e.g.,":[25],"VirusTotal)":[26],"for":[27,59,65,119],"testing":[28],"evasion":[30],"capability":[31],"their":[33,198],"samples,":[35],"which":[36,122,154],"name":[38],"cases":[42,163],"(AMDs).":[43],"In":[44],"this":[45],"work,":[46],"design":[48],"an":[49],"AMD":[50,69],"hunter":[51,70,110],"in":[52,114],"context":[54],"VirusTotal":[56,78],"to":[57,104,195,221],"hunt":[58],"AMDs":[60,133,189,238],"and":[61,80,94,130,178,190,218],"reveal":[62],"new":[63,158,169,172,176],"threats":[64],"Android.":[66],"First,":[67],"sifts":[71],"through":[72],"millions":[73],"file":[75],"submissions":[76,103,127],"on":[77,97,128,145,227],"efficiently":[79],"alert":[81],"more":[82,210],"suspicious":[83,102],"submission":[84],"traces.":[85],"Second,":[86],"it":[87],"performs":[88],"package":[89],"level":[90],"analysis,":[91],"static":[92],"code":[93],"dynamic":[95],"analyses":[96],"APKs":[99],"validate":[105],"AMDs.":[107],"The":[108],"implemented":[109],"has":[111],"been":[112],"used":[113],"a":[115],"leading":[116],"security":[117,193],"company":[118],"4":[120],"months,":[121],"processed":[123],"153":[124],"million":[125],"VirusTotal,":[129],"identified":[131,152,237],"1,623":[132],"with":[134,239],"13,855":[135],"samples":[136,148,234],"from":[137,150],"83":[138],"countries.":[139],"We":[140,182,229],"also":[141],"performed":[142],"case":[143],"studies":[144],"890":[146],"selected":[149],"AMDs,":[153,209],"revealed":[155],"lots":[156],"threats,":[159,175],"including":[160],"fake":[165],"system/banking":[166],"phishing":[167],"app,":[168],"rooting":[170],"exploits,":[171],"JavaScript":[173],"based":[174],"evasions":[177],"AV":[179],"probing":[180],"malware.":[181],"wrote":[183],"industry":[184],"research":[185,213,241],"articles":[186],"about":[187],"notified":[191],"other":[192],"vendors":[194],"help":[196],"patch":[197],"false":[199],"negatives.":[200],"Besides":[201],"raising":[202],"awareness":[204],"existence":[207],"importantly,":[211],"our":[212],"provides":[214],"first":[216],"systematic":[217],"efficient":[219],"way":[220],"study":[222],"phenomenon":[226],"VirusTotal.":[228],"will":[230],"share":[231],"all":[232],"community.":[242]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}