{"id":"https://openalex.org/W4415971173","doi":"https://doi.org/10.1109/tdsc.2025.3629678","title":"PIEDChecker: Uncover Permissions-Independent Emulation-Detection Methods in Android System","display_name":"PIEDChecker: Uncover Permissions-Independent Emulation-Detection Methods in Android System","publication_year":2025,"publication_date":"2025-11-06","ids":{"openalex":"https://openalex.org/W4415971173","doi":"https://doi.org/10.1109/tdsc.2025.3629678"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3629678","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3629678","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071122921","display_name":"Ran Yan","orcid":"https://orcid.org/0009-0004-0728-3741"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ran Yan","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China"],"raw_orcid":"https://orcid.org/0009-0004-0728-3741","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029715489","display_name":"Weina Niu","orcid":"https://orcid.org/0000-0002-3235-3463"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weina Niu","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China"],"raw_orcid":"https://orcid.org/0000-0002-3235-3463","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091516773","display_name":"Qinsheng Hou","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinsheng Hou","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","School of Computer Science, Shanghai Jiao Tong University, China"],"raw_orcid":"https://orcid.org/0000-0002-1119-4766","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100435042","display_name":"Xingyu Liu","orcid":"https://orcid.org/0000-0001-7016-7824"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingyu Liu","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100414046","display_name":"Lingyun Ying","orcid":"https://orcid.org/0000-0001-7445-9103"},"institutions":[{"id":"https://openalex.org/I4210117825","display_name":"Beijing Research Institute of Mechanical and Electrical Technology","ror":"https://ror.org/02bjnsn63","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210117825"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingyun Ying","raw_affiliation_strings":["QIANXIN Technology Research Institute, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7445-9103","affiliations":[{"raw_affiliation_string":"QIANXIN Technology Research Institute, Beijing, China","institution_ids":["https://openalex.org/I4210117825"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100780268","display_name":"Xiaosong Zhang","orcid":"https://orcid.org/0000-0001-9886-1412"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaosong Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China"],"raw_orcid":"https://orcid.org/0000-0001-9886-1412","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.36429459,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"2727","last_page":"2744"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8195000290870667},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7146000266075134},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.7121999859809875},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.6169999837875366},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5627999901771545},{"id":"https://openalex.org/keywords/cheating","display_name":"Cheating","score":0.41179999709129333},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.4034000039100647},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.36800000071525574},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.3587999939918518}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8241999745368958},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8195000290870667},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7146000266075134},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.7121999859809875},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.6169999837875366},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5627999901771545},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.550599992275238},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.48330000042915344},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45989999175071716},{"id":"https://openalex.org/C2778024590","wikidata":"https://www.wikidata.org/wiki/Q2357432","display_name":"Cheating","level":2,"score":0.41179999709129333},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.4034000039100647},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.36800000071525574},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3587999939918518},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.33799999952316284},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.33219999074935913},{"id":"https://openalex.org/C2985745059","wikidata":"https://www.wikidata.org/wiki/Q245","display_name":"Raspberry pi","level":3,"score":0.3255000114440918},{"id":"https://openalex.org/C60692881","wikidata":"https://www.wikidata.org/wiki/Q584529","display_name":"Humanoid robot","level":3,"score":0.321399986743927},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.3165000081062317},{"id":"https://openalex.org/C140006998","wikidata":"https://www.wikidata.org/wiki/Q2499307","display_name":"Dynamic program analysis","level":3,"score":0.30469998717308044},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.28139999508857727},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.2797999978065491},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.27459999918937683},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2563000023365021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3629678","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3629678","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6027530306","display_name":null,"funder_award_id":"62372086","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7879776620","display_name":null,"funder_award_id":"2025ZNSFSC0500","funder_id":"https://openalex.org/F4320329861","funder_display_name":"Natural Science Foundation of Sichuan Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320329861","display_name":"Natural Science Foundation of Sichuan Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W78162143","https://openalex.org/W191656338","https://openalex.org/W1976450888","https://openalex.org/W2015790908","https://openalex.org/W2016216904","https://openalex.org/W2066220442","https://openalex.org/W2090534521","https://openalex.org/W2120215974","https://openalex.org/W2136245903","https://openalex.org/W2158874007","https://openalex.org/W2199478250","https://openalex.org/W2465557945","https://openalex.org/W2517430515","https://openalex.org/W2577540292","https://openalex.org/W2712617220","https://openalex.org/W2755856027","https://openalex.org/W2771082954","https://openalex.org/W2771936560","https://openalex.org/W2804929458","https://openalex.org/W2809273473","https://openalex.org/W2885582087","https://openalex.org/W2889663978","https://openalex.org/W2911626912","https://openalex.org/W2917798975","https://openalex.org/W2988961468","https://openalex.org/W3008201587","https://openalex.org/W3105429705","https://openalex.org/W3181963574","https://openalex.org/W3210231570","https://openalex.org/W3215120663","https://openalex.org/W4205841428","https://openalex.org/W4220740836","https://openalex.org/W4226379276","https://openalex.org/W4226491378","https://openalex.org/W4300607852","https://openalex.org/W4321786606","https://openalex.org/W4396803152","https://openalex.org/W4396918129","https://openalex.org/W4398223826","https://openalex.org/W4404952934","https://openalex.org/W4405183947","https://openalex.org/W4408399697","https://openalex.org/W4408779550"],"related_works":[],"abstract_inverted_index":{"For":[0],"compatibility":[1],"checks":[2],"and":[3,36,82,104,122,147],"preventing":[4],"malicious":[5,29],"cheating":[6],"behaviors":[7,162],"in":[8,135],"Android":[9,51,54,143],"systems,":[10],"It":[11],"is":[12,114,152],"convenient":[13],"for":[14],"benign":[15],"app":[16,30],"developers":[17],"to":[18,43,71,91],"utilize":[19],"emulation-detection":[20,69,94,102,126,138,161,182],"technology.":[21],"However,":[22],"this":[23,76],"technique":[24],"has":[25,132],"been":[26],"abused":[27],"by":[28,116],"developers,":[31],"which":[32],"causes":[33],"detection":[34,85,177],"emulation":[35],"behavior":[37],"change,":[38],"known":[39],"as":[40],"anti-emulation":[41,60,108],"behavior,":[42],"evade":[44],"the":[45,50,141,164,170,176,180,188],"dynamic":[46,83],"analysis":[47,145],"performed":[48],"via":[49],"emulator.":[52],"The":[53],"permission":[55],"mechanism":[56],"can":[57,64,98],"limit":[58],"some":[59],"behaviors,":[61],"but":[62],"attackers":[63],"still":[65],"use":[66],"permission-independent":[67],"(PI)":[68],"technology":[70],"achieve":[72],"their":[73],"goals.":[74],"In":[75,174],"paper,":[77],"we":[78],"propose":[79],"a":[80],"static":[81],"combined":[84],"framework":[86,97],"named":[87],"<sc":[88,110,129],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[89,111,130],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">PIEDChecker</small>":[90,131],"detect":[92],"PI":[93,101,107,137,160,181],"apps.":[95],"This":[96],"statically":[99],"identify":[100],"code":[103],"dynamically":[105],"verify":[106],"behaviors.":[109],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">PIEDChecker</small>'s":[112],"performance":[113],"validated":[115],"382":[117],"manually":[118],"created":[119],"test":[120],"apps":[121,124,158,167],"344":[123],"with":[125,140],"labels.":[127],"Moreover,":[128,150],"higher":[133],"accuracy":[134],"detecting":[136],"compared":[139],"existing":[142],"malware":[144],"platforms":[146],"academic":[148],"methods.":[149],"it":[151],"found":[153],"that":[154],"there":[155],"are":[156,184],"13,377":[157],"having":[159],"within":[163],"tested":[165],"25,303":[166],"collected":[168],"over":[169],"past":[171],"five":[172],"years.":[173],"particular,":[175],"features":[178],"of":[179],"methods":[183],"summarized":[185],"based":[186],"on":[187],"evaluation":[189],"result.":[190]},"counts_by_year":[],"updated_date":"2026-03-17T06:59:57.516163","created_date":"2025-11-06T00:00:00"}