{"id":"https://openalex.org/W2752485287","doi":"https://doi.org/10.1109/tdsc.2017.2745575","title":"Detection of Repackaged Android Malware with Code-Heterogeneity Features","display_name":"Detection of Repackaged Android Malware with Code-Heterogeneity Features","publication_year":2017,"publication_date":"2017-08-28","ids":{"openalex":"https://openalex.org/W2752485287","doi":"https://doi.org/10.1109/tdsc.2017.2745575","mag":"2752485287"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2017.2745575","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2745575","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047718767","display_name":"Ke Tian","orcid":"https://orcid.org/0000-0002-6784-5820"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ke Tian","raw_affiliation_strings":["Department of Computer Science, Virginia Tech, Blacksburg"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Virginia Tech, Blacksburg","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034366344","display_name":"Danfeng Yao","orcid":"https://orcid.org/0000-0001-8969-2792"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danfeng Yao","raw_affiliation_strings":["Department of Computer Science, Virginia Tech, Blacksburg"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Virginia Tech, Blacksburg","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030733431","display_name":"Barbara G. Ryder","orcid":"https://orcid.org/0000-0002-4755-6941"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Barbara G. Ryder","raw_affiliation_strings":["Department of Computer Science, Virginia Tech, Blacksburg"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Virginia Tech, Blacksburg","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["Department of Computer Science and Engineering, Penn State University, University Park"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Penn State University, University Park","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076621366","display_name":"Guojun Peng","orcid":"https://orcid.org/0000-0001-5731-8958"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guojun Peng","raw_affiliation_strings":["Wuhan University, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5047718767"],"corresponding_institution_ids":["https://openalex.org/I859038795"],"apc_list":null,"apc_paid":null,"fwci":6.8422,"has_fulltext":false,"cited_by_count":97,"citation_normalized_percentile":{"value":0.97688539,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"17","issue":"1","first_page":"64","last_page":"77"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8733384609222412},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8340135812759399},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.789922833442688},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7360655665397644},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5408627986907959},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5388372540473938},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.5324726104736328},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.4495019018650055},{"id":"https://openalex.org/keywords/partition","display_name":"Partition (number theory)","score":0.4443874657154083},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.413099080324173},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3067646920681},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.26447930932044983},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2629353404045105},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14674720168113708},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0844389796257019}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8733384609222412},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8340135812759399},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.789922833442688},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7360655665397644},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5408627986907959},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5388372540473938},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.5324726104736328},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.4495019018650055},{"id":"https://openalex.org/C42812","wikidata":"https://www.wikidata.org/wiki/Q1082910","display_name":"Partition (number theory)","level":2,"score":0.4443874657154083},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.413099080324173},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3067646920681},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.26447930932044983},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2629353404045105},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14674720168113708},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0844389796257019},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2017.2745575","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2745575","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309070","display_name":"Brown University","ror":"https://ror.org/05gq02987"},{"id":"https://openalex.org/F4320325599","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W60817130","https://openalex.org/W84941226","https://openalex.org/W101604734","https://openalex.org/W121173099","https://openalex.org/W124941384","https://openalex.org/W183494281","https://openalex.org/W199976391","https://openalex.org/W1445387515","https://openalex.org/W1479871422","https://openalex.org/W1578479379","https://openalex.org/W1943233084","https://openalex.org/W1966023382","https://openalex.org/W1971497680","https://openalex.org/W1982773740","https://openalex.org/W1985752637","https://openalex.org/W1988036170","https://openalex.org/W1990649188","https://openalex.org/W1994588724","https://openalex.org/W2002083372","https://openalex.org/W2018102253","https://openalex.org/W2018956134","https://openalex.org/W2048715902","https://openalex.org/W2058180826","https://openalex.org/W2064038877","https://openalex.org/W2068025885","https://openalex.org/W2070386561","https://openalex.org/W2071672346","https://openalex.org/W2084957670","https://openalex.org/W2085700758","https://openalex.org/W2092942461","https://openalex.org/W2111525908","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2140095007","https://openalex.org/W2166743230","https://openalex.org/W2178906754","https://openalex.org/W2264131323","https://openalex.org/W2276979642","https://openalex.org/W2296128045","https://openalex.org/W2470899015","https://openalex.org/W2489796857","https://openalex.org/W2527840540","https://openalex.org/W2600871181","https://openalex.org/W2780289003","https://openalex.org/W4242210993","https://openalex.org/W4244726870"],"related_works":["https://openalex.org/W2067547021","https://openalex.org/W2899515883","https://openalex.org/W2587046957","https://openalex.org/W4316077018","https://openalex.org/W2899262475","https://openalex.org/W2754271406","https://openalex.org/W2563758005","https://openalex.org/W2041976134","https://openalex.org/W2286416179","https://openalex.org/W2752485287"],"abstract_inverted_index":{"During":[0],"repackaging,":[1],"malware":[2,17,48],"writers":[3],"statically":[4],"inject":[5],"malcode":[6],"and":[7,89,99,103,153],"modify":[8],"the":[9,37,60,72,86,97,139],"control":[10],"flow":[11],"to":[12,20,32,138],"ensure":[13],"its":[14,80],"execution.":[15],"Repackaged":[16],"is":[18,76],"difficult":[19],"detect":[21],"by":[22,134],"existing":[23],"classification":[24],"techniques,":[25],"partly":[26],"because":[27],"of":[28,63,71,150,158],"their":[29],"behavioral":[30,81],"similarities":[31],"benign":[33],"apps.":[34,121],"By":[35],"exploring":[36],"app's":[38],"internal":[39],"different":[40],"behaviors,":[41],"we":[42],"propose":[43],"a":[44,105,146,154],"new":[45],"Android":[46,120],"repackaged":[47,123],"detection":[49,127],"technique":[50],"based":[51,107],"on":[52,79,108],"code":[53,61,94],"heterogeneity":[54],"analysis.":[55],"Our":[56],"solution":[57,106],"strategically":[58],"partitions":[59],"structure":[62],"an":[64],"app":[65],"into":[66],"multiple":[67,109],"dependence-based":[68],"regions":[69],"(subsets":[70],"code).":[73],"Each":[74],"region":[75],"independently":[77],"classified":[78],"features.":[82],"We":[83,112],"point":[84],"out":[85],"security":[87],"challenges":[88],"design":[90],"choices":[91],"for":[92],"partitioning":[93],"structures":[95],"at":[96],"class":[98],"method":[100],"level":[101],"graphs,":[102],"present":[104],"dependence":[110],"relations.":[111],"have":[113],"performed":[114],"experimental":[115],"evaluation":[116],"with":[117],"over":[118],"7,542":[119],"For":[122],"malware,":[124],"our":[125,143],"partition-based":[126],"reduces":[128],"false":[129,147,155],"negatives":[130],"(i.e.,":[131],"missed":[132],"detection)":[133],"30-fold,":[135],"when":[136],"compared":[137],"non-partition-based":[140],"approach.":[141],"Overall,":[142],"approach":[144],"achieves":[145],"negative":[148],"rate":[149,157],"0.35":[151],"percent":[152],"positive":[156],"2.97":[159],"percent.":[160]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":18},{"year":2020,"cited_by_count":15},{"year":2019,"cited_by_count":11},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}