{"id":"https://openalex.org/W3180545700","doi":"https://doi.org/10.1109/tdsc.2021.3094824","title":"Backdoor Attack on Machine Learning Based Android Malware Detectors","display_name":"Backdoor Attack on Machine Learning Based Android Malware Detectors","publication_year":2021,"publication_date":"2021-07-07","ids":{"openalex":"https://openalex.org/W3180545700","doi":"https://doi.org/10.1109/tdsc.2021.3094824","mag":"3180545700"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2021.3094824","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3094824","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006173142","display_name":"Chaoran Li","orcid":"https://orcid.org/0000-0001-9118-5386"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chaoran Li","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia","CSIRO Data 61, Marsfield, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9118-5386","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"CSIRO Data 61, Marsfield, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100373723","display_name":"Xiao Chen","orcid":"https://orcid.org/0000-0002-4224-6450"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiao Chen","raw_affiliation_strings":["Department of Software Systems and Cybersecurity, Faculty of IT, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4224-6450","affiliations":[{"raw_affiliation_string":"Department of Software Systems and Cybersecurity, Faculty of IT, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081805488","display_name":"Derui Wang","orcid":"https://orcid.org/0000-0003-1388-7715"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Derui Wang","raw_affiliation_strings":["CSIRO Data61, Marsfield, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1388-7715","affiliations":[{"raw_affiliation_string":"CSIRO Data61, Marsfield, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0655-666X","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042828824","display_name":"Muhammad Ejaz Ahmed","orcid":"https://orcid.org/0000-0001-8033-0998"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muhammad Ejaz Ahmed","raw_affiliation_strings":["CSIRO Data61, Marsfield, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO Data61, Marsfield, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084022157","display_name":"Seyit Camtepe","orcid":"https://orcid.org/0000-0001-6353-8359"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Seyit Camtepe","raw_affiliation_strings":["CSIRO Data61, Marsfield, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6353-8359","affiliations":[{"raw_affiliation_string":"CSIRO Data61, Marsfield, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.0259,"has_fulltext":false,"cited_by_count":53,"citation_normalized_percentile":{"value":0.96242149,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"19","issue":"5","first_page":"3357","last_page":"3370"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9908286333084106},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8592547178268433},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7722041606903076},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.6809239983558655},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6603497266769409},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5935956835746765},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5884549617767334},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4845232367515564},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4828098714351654},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2849043011665344}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9908286333084106},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8592547178268433},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7722041606903076},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.6809239983558655},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6603497266769409},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5935956835746765},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5884549617767334},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4845232367515564},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4828098714351654},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2849043011665344},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2021.3094824","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3094824","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5799999833106995,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1943233084","https://openalex.org/W2047094503","https://openalex.org/W2060537671","https://openalex.org/W2095470000","https://openalex.org/W2119821739","https://openalex.org/W2122672392","https://openalex.org/W2125908420","https://openalex.org/W2167003418","https://openalex.org/W2180612164","https://openalex.org/W2283648232","https://openalex.org/W2291014553","https://openalex.org/W2406556600","https://openalex.org/W2575599800","https://openalex.org/W2744095836","https://openalex.org/W2753783305","https://openalex.org/W2767783754","https://openalex.org/W2772683029","https://openalex.org/W2774253509","https://openalex.org/W2774423163","https://openalex.org/W2775261393","https://openalex.org/W2897865027","https://openalex.org/W2900275727","https://openalex.org/W2916360674","https://openalex.org/W2934843808","https://openalex.org/W2962700793","https://openalex.org/W2963204406","https://openalex.org/W2963461515","https://openalex.org/W2963777745","https://openalex.org/W2966342255","https://openalex.org/W2985913519","https://openalex.org/W2996800219","https://openalex.org/W2999585024","https://openalex.org/W3007346474","https://openalex.org/W3041454767","https://openalex.org/W3125728023","https://openalex.org/W3210353517","https://openalex.org/W4234400701","https://openalex.org/W6695482934","https://openalex.org/W6746897123","https://openalex.org/W6750462152","https://openalex.org/W6753153400","https://openalex.org/W6759622168"],"related_works":["https://openalex.org/W4387298227","https://openalex.org/W2782775281","https://openalex.org/W2526398307","https://openalex.org/W2470029541","https://openalex.org/W4312334973","https://openalex.org/W2560361988","https://openalex.org/W1963923654","https://openalex.org/W4382940931","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"Machine":[0],"learning":[1,54],"(ML)":[2],"has":[3,112],"been":[4,184],"widely":[5,185],"used":[6],"for":[7,60],"malware":[8,62,80,128,144,180,206],"detection":[9,23,129],"on":[10,35,177],"different":[11],"operating":[12],"systems,":[13],"including":[14],"Android.":[15],"To":[16,64],"keep":[17],"up":[18,198],"with":[19,167],"malware's":[20],"evolution,":[21],"the":[22,36,40,53,90,107,110,116,139,153,159,168,174,193,209],"models":[24],"usually":[25],"need":[26],"to":[27,45,102,137,158,199],"be":[28,100],"retrained":[29],"periodically":[30],"(e.g.,":[31],"every":[32],"month)":[33],"based":[34],"data":[37,118,161,228],"collected":[38],"in":[39,78,89,126,187],"wild.":[41],"However,":[42],"this":[43,75,104,132],"leads":[44],"poisoning":[46,229],"attacks,":[47,50],"specifically":[48],"backdoor":[49,140,147,195],"which":[51],"subvert":[52],"process":[55,122],"and":[56,150,162,224],"create":[57],"evasion":[58,202],"\u2018tunnels\u2019":[59],"manipulated":[61],"samples.":[63,207],"date,":[65],"we":[66,134],"have":[67,183],"not":[68,124],"found":[69],"any":[70],"prior":[71],"research":[72],"that":[73,109,182,192],"explored":[74],"critical":[76],"problem":[77],"Android":[79,143],"detectors.":[81,145],"Although":[82],"there":[83],"are":[84,135],"already":[85],"some":[86],"similar":[87,97],"works":[88],"image":[91],"classification":[92],"field,":[93],"most":[94],"of":[95,115,219],"those":[96],"ideas":[98],"cannot":[99],"borrowed":[101],"solve":[103],"problem,":[105],"because":[106],"assumption":[108],"attacker":[111],"full":[113],"control":[114],"training":[117,160],"collection":[119],"or":[120],"labelling":[121],"is":[123,148,170,213],"realistic":[125],"real-world":[127],"scenarios.":[130],"In":[131],"article,":[133],"motivated":[136],"study":[138],"attack":[141,176,196,212],"against":[142],"The":[146],"created":[149],"injected":[151],"into":[152],"model":[154],"stealthily":[155],"without":[156],"access":[157],"activated":[163],"when":[164],"an":[165],"app":[166],"trigger":[169],"presented.":[171],"We":[172],"demonstrate":[173],"proposed":[175,194],"four":[178,222],"typical":[179],"detectors":[181],"discussed":[186],"academia.":[188],"Our":[189],"evaluation":[190],"shows":[191],"achieves":[197],"99":[200],"percent":[201],"rate":[203,230],"over":[204],"750":[205],"Moreover,":[208],"above":[210],"successful":[211],"realised":[214],"by":[215],"a":[216,225],"small":[217],"size":[218],"triggers":[220],"(only":[221],"features)":[223],"very":[226],"low":[227],"(0.3":[231],"percent).":[232]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-02T14:50:37.381335","created_date":"2025-10-10T00:00:00"}