{"id":"https://openalex.org/W4205152863","doi":"https://doi.org/10.1109/tc.2022.3143439","title":"Lightweight, Effective Detection and Characterization of Mobile Malware Families","display_name":"Lightweight, Effective Detection and Characterization of Mobile Malware Families","publication_year":2022,"publication_date":"2022-01-14","ids":{"openalex":"https://openalex.org/W4205152863","doi":"https://doi.org/10.1109/tc.2022.3143439"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2022.3143439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3143439","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050045135","display_name":"Karim O. Elish","orcid":"https://orcid.org/0000-0001-6060-4090"},"institutions":[{"id":"https://openalex.org/I32480017","display_name":"Florida Polytechnic University","ror":"https://ror.org/01e5mdj42","country_code":"US","type":"education","lineage":["https://openalex.org/I32480017"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karim O. Elish","raw_affiliation_strings":["Department of Computer Science, Florida Polytechnic University, Lakeland, FL, USA"],"raw_orcid":"https://orcid.org/0000-0001-6060-4090","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Florida Polytechnic University, Lakeland, FL, USA","institution_ids":["https://openalex.org/I32480017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001298960","display_name":"Mahmoud O. Elish","orcid":"https://orcid.org/0000-0002-2767-0501"},"institutions":[{"id":"https://openalex.org/I179311214","display_name":"Gulf University for Science & Technology","ror":"https://ror.org/04d9rzd67","country_code":"KW","type":"education","lineage":["https://openalex.org/I179311214"]}],"countries":["KW"],"is_corresponding":false,"raw_author_name":"Mahmoud O. Elish","raw_affiliation_strings":["Computer Science Department, Gulf University for Science and Technology, Hawally, Kuwait"],"raw_orcid":"https://orcid.org/0000-0002-2767-0501","affiliations":[{"raw_affiliation_string":"Computer Science Department, Gulf University for Science and Technology, Hawally, Kuwait","institution_ids":["https://openalex.org/I179311214"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063912683","display_name":"Hussain M. J. Almohri","orcid":"https://orcid.org/0000-0002-7738-5864"},"institutions":[{"id":"https://openalex.org/I36721946","display_name":"Kuwait University","ror":"https://ror.org/021e5j056","country_code":"KW","type":"education","lineage":["https://openalex.org/I36721946"]}],"countries":["KW"],"is_corresponding":false,"raw_author_name":"Hussain M. J. Almohri","raw_affiliation_strings":["Department of Computer Science, Kuwait University, Safat, Kuwait"],"raw_orcid":"https://orcid.org/0000-0002-7738-5864","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kuwait University, Safat, Kuwait","institution_ids":["https://openalex.org/I36721946"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6834,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.90280226,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"71","issue":"11","first_page":"2982","last_page":"2995"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9557739496231079},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8306935429573059},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7999284267425537},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.631757378578186},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.6147053241729736},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5616436004638672},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4520173668861389},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4295620918273926},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.42486727237701416},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4057791233062744},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3811313807964325},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20136699080467224}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9557739496231079},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8306935429573059},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7999284267425537},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.631757378578186},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.6147053241729736},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5616436004638672},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4520173668861389},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4295620918273926},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.42486727237701416},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4057791233062744},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3811313807964325},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20136699080467224}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2022.3143439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3143439","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W121173099","https://openalex.org/W1491356120","https://openalex.org/W1943233084","https://openalex.org/W1964497219","https://openalex.org/W1964962870","https://openalex.org/W2003276999","https://openalex.org/W2007857904","https://openalex.org/W2041276426","https://openalex.org/W2048715902","https://openalex.org/W2058180826","https://openalex.org/W2060692877","https://openalex.org/W2085700758","https://openalex.org/W2122672392","https://openalex.org/W2123519624","https://openalex.org/W2127723417","https://openalex.org/W2133990480","https://openalex.org/W2158864412","https://openalex.org/W2168103835","https://openalex.org/W2264131323","https://openalex.org/W2290781924","https://openalex.org/W2296128045","https://openalex.org/W2344803892","https://openalex.org/W2470899015","https://openalex.org/W2487124337","https://openalex.org/W2603160474","https://openalex.org/W2620844046","https://openalex.org/W2741764761","https://openalex.org/W2743799202","https://openalex.org/W2749928722","https://openalex.org/W2783327762","https://openalex.org/W2791541601","https://openalex.org/W2896037892","https://openalex.org/W2900275727","https://openalex.org/W2904583559","https://openalex.org/W2906347220","https://openalex.org/W2963204406","https://openalex.org/W2989930814","https://openalex.org/W3001461005","https://openalex.org/W3145074154","https://openalex.org/W4242210993","https://openalex.org/W4243562335","https://openalex.org/W6639024520","https://openalex.org/W6712192629"],"related_works":["https://openalex.org/W3195312353","https://openalex.org/W4249118297","https://openalex.org/W2717179875","https://openalex.org/W2395100307","https://openalex.org/W3199551743","https://openalex.org/W3195586271","https://openalex.org/W2782775281","https://openalex.org/W4312234627","https://openalex.org/W1442860204","https://openalex.org/W4313325645"],"abstract_inverted_index":{"Android":[0,33,72,120],"malware":[1,41,55,62,73,121,131,142,160,201],"is":[2,94],"an":[3,192],"ongoing":[4],"threat":[5],"to":[6,16,26,53,83,97,115,154],"billions":[7],"of":[8,39,50,61,105,147,175],"smart":[9],"devices\u2019":[10],"security,":[11],"ranging":[12],"from":[13],"mobile":[14],"phones":[15],"car":[17],"infotainment":[18],"systems.":[19],"Despite":[20],"numerous":[21],"approaches":[22,189],"and":[23,31,47,76,102,117,140,149,151,156,164,190,199],"previous":[24],"studies":[25],"develop":[27],"solutions":[28],"for":[29,196],"detecting":[30,178,197],"preventing":[32],"malware,":[34],"the":[35,48,95,159,172],"rapid":[36],"continuous":[37],"development":[38,49],"new":[40],"variants":[42],"requires":[43],"a":[44,58,70,99,111],"careful":[45],"reconsideration":[46],"effective":[51],"methods":[52],"identify":[54],"families":[56,143,161,180,182],"given":[57],"meager":[59],"number":[60],"instances.":[63],"In":[64],"this":[65],"paper,":[66],"we":[67],"present":[68],"DroidMalVet,":[69],"novel":[71],"family":[74],"classification":[75],"detection":[77],"approach":[78],"that":[79,134],"does":[80],"not":[81],"require":[82],"perform":[84],"complex":[85],"program":[86],"analyses":[87],"or":[88],"utilize":[89],"large":[90,129,141],"feature":[91],"sets.":[92],"DroidMalVet":[93,135,176,186],"first":[96],"use":[98],"promising,":[100],"diverse,":[101],"small":[103,139,179],"set":[104],"software":[106],"metrics":[107],"as":[108],"features":[109],"in":[110,162,177],"supervised":[112],"learning":[113],"platform":[114],"classify":[116],"detect":[118],"various":[119],"families.":[122,202],"Our":[123],"extensive":[124],"empirical":[125],"evaluations":[126],"on":[127,158],"two":[128],"public":[130],"datasets":[132],"show":[133],"accurately":[136],"detects":[137],"both":[138],"with":[144,183],"F-Score":[145],"accuracy":[146],"94.4%":[148],"96%,":[150],"AUC":[152],"equal":[153],"99.5%":[155],"99.7%":[157],"Drebin":[163],"AMD":[165],"datasets,":[166],"respectively.":[167],"Moreover,":[168],"our":[169],"results":[170],"demonstrate":[171],"superior":[173],"performance":[174],"(i.e.,":[181],"few":[184],"samples).":[185],"complements":[187],"existing":[188],"presents":[191],"early":[193],"warning":[194],"tool":[195],"known":[198],"emerging":[200]},"counts_by_year":[{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6}],"updated_date":"2026-07-07T14:30:12.667765","created_date":"2025-10-10T00:00:00"}