{"id":"https://openalex.org/W4417251792","doi":"https://doi.org/10.1109/tdsc.2025.3642903","title":"Why Not Diversify Triggers? APK-Specific Backdoor Attack Against Android Malware Detection","display_name":"Why Not Diversify Triggers? APK-Specific Backdoor Attack Against Android Malware Detection","publication_year":2025,"publication_date":"2025-12-11","ids":{"openalex":"https://openalex.org/W4417251792","doi":"https://doi.org/10.1109/tdsc.2025.3642903"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3642903","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3642903","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027427522","display_name":"Heng Li","orcid":"https://orcid.org/0000-0001-8045-8983"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heng Li","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China","Huazhong University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0001-8045-8983","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101494795","display_name":"Bang Wu","orcid":"https://orcid.org/0009-0003-0575-037X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bang Wu","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China","Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067189569","display_name":"Zhiying Yao","orcid":"https://orcid.org/0009-0004-5351-1901"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiyuan Yao","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China","Huazhong University of Science and Technology"],"raw_orcid":"https://orcid.org/0009-0004-5351-1901","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008919430","display_name":"Cuiying Gao","orcid":"https://orcid.org/0000-0003-0709-3361"},"institutions":[{"id":"https://openalex.org/I4210103986","display_name":"Jingdong (China)","ror":"https://ror.org/01dkjkq64","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210103986"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cuiying Gao","raw_affiliation_strings":["JD.com, Beijing, China","Huazhong University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0003-0709-3361","affiliations":[{"raw_affiliation_string":"JD.com, Beijing, China","institution_ids":["https://openalex.org/I4210103986"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101957538","display_name":"Wei Yuan","orcid":"https://orcid.org/0000-0002-5867-5364"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Yuan","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China","Huazhong University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0002-5867-5364","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028632571","display_name":"Beihao Xia","orcid":"https://orcid.org/0000-0001-6156-6946"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Beihao Xia","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China","Huazhong University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0001-6156-6946","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100400376","display_name":"Xiapu Luo","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiapu Luo","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong","The Hong Kong Polytechnic University"],"raw_orcid":"https://orcid.org/0000-0002-9082-3208","affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]},{"raw_affiliation_string":"The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.42497433,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"4103","last_page":"4120"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9761000275611877},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8531000018119812},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5949000120162964},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.5586000084877014},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4255000054836273},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.4212000072002411},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.3991999924182892},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3619000017642975},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.357699990272522},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.35429999232292175}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9761000275611877},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8531000018119812},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8215000033378601},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6396999955177307},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5949000120162964},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.5586000084877014},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4255000054836273},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.4212000072002411},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.3991999924182892},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3619000017642975},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3479999899864197},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.34700000286102295},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.3467999994754791},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.32710000872612},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.30489999055862427},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.2957000136375427},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26170000433921814},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.26159998774528503},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.2612000107765198},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2581999897956848},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.25429999828338623},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.25220000743865967},{"id":"https://openalex.org/C190839683","wikidata":"https://www.wikidata.org/wiki/Q2448197","display_name":"Train","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3642903","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3642903","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1873348229","display_name":null,"funder_award_id":"62502173","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7313477576","display_name":null,"funder_award_id":"2024M751010","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321106","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W151347844","https://openalex.org/W183494281","https://openalex.org/W1963856035","https://openalex.org/W1964110400","https://openalex.org/W1971497680","https://openalex.org/W2002083372","https://openalex.org/W2070386561","https://openalex.org/W2086401659","https://openalex.org/W2088479623","https://openalex.org/W2122672392","https://openalex.org/W2407313496","https://openalex.org/W2566079294","https://openalex.org/W2572070369","https://openalex.org/W2625739732","https://openalex.org/W2791541601","https://openalex.org/W2934018981","https://openalex.org/W2934843808","https://openalex.org/W2945645805","https://openalex.org/W2962734576","https://openalex.org/W2963401022","https://openalex.org/W2963461515","https://openalex.org/W2963954089","https://openalex.org/W2964136807","https://openalex.org/W2971661634","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2997690675","https://openalex.org/W3015481738","https://openalex.org/W3089392154","https://openalex.org/W3097730806","https://openalex.org/W3107337211","https://openalex.org/W3147879240","https://openalex.org/W3152624640","https://openalex.org/W3161331107","https://openalex.org/W3180545700","https://openalex.org/W3201749075","https://openalex.org/W3210231570","https://openalex.org/W4214563788","https://openalex.org/W4283205753","https://openalex.org/W4320147968","https://openalex.org/W4384948718","https://openalex.org/W4385535562","https://openalex.org/W4388886680","https://openalex.org/W4393154589","https://openalex.org/W4403413427","https://openalex.org/W4411997068"],"related_works":[],"abstract_inverted_index":{"Machine":[0],"learning-based":[1],"Android":[2,25],"malware":[3,49,56,97,138,160],"detection":[4],"(AMD)":[5],"models":[6],"require":[7],"abundant":[8],"data":[9],"for":[10,136],"training":[11,42],"robust":[12],"app":[13,26],"classifiers,":[14],"creating":[15],"vulnerability":[16],"to":[17,29,68,79,131,143,154,191],"poisoning":[18,193],"attacks.":[19],"Attackers":[20],"inject":[21],"poisoned":[22],"samples":[23],"into":[24,35],"markets,":[27],"leading":[28],"the":[30,36,41,83,107,145,157],"insertion":[31],"of":[32,159],"a":[33,52,73,127,133,171],"backdoor":[34,53,61],"model":[37],"upon":[38],"adoption":[39],"in":[40,55,152],"process.":[43],"Subsequently,":[44],"attackers":[45],"can":[46],"generate":[47,132],"evasive":[48],"by":[50,87],"embedding":[51],"trigger":[54,75,84,100,135],"samples.":[57],"Currently,":[58],"research":[59],"on":[60,178],"attacks":[62,71],"towards":[63],"AMD":[64],"has":[65],"just":[66],"begun":[67],"emerge.":[69],"Existing":[70],"produce":[72],"fixed":[74],"and":[76,185,200],"apply":[77],"it":[78],"various":[80],"malware.":[81],"Once":[82],"is":[85],"discovered":[86],"static":[88],"analysis":[89],"methods":[90,184],"(e.g.,":[91],"software":[92],"similarity":[93],"analysis),":[94],"however,":[95],"multiple":[96],"carrying":[98],"this":[99],"will":[101],"be":[102],"simultaneously":[103],"exposed.":[104],"To":[105],"diversify":[106],"trigger,":[108],"we":[109],"propose":[110],"an":[111],"<bold":[112,117,120],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[113,115,118,121],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">A</b>PK-<bold":[114],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">S</b>pecific":[116],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">B</b>ackdoor":[119],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">A</b>ttack":[122],"algorithm":[123],"(ASBA),":[124],"which":[125],"trains":[126],"generative":[128],"adversarial":[129],"network":[130],"specific":[134],"every":[137],"sample.":[139],"Moreover,":[140],"ASBA":[141,169,196],"manages":[142],"make":[144],"generated":[146],"triggers":[147],"as":[148,150],"different":[149],"possible,":[151],"order":[153],"further":[155],"reduce":[156],"likelihood":[158],"being":[161],"collectively":[162],"captured.":[163],"Extensive":[164],"experiments":[165],"have":[166],"demonstrated":[167],"that":[168],"achieves":[170],"94.6%":[172],"average":[173],"attack":[174,194],"success":[175],"rate":[176],"(ASR)":[177],"three":[179,186],"datasets,":[180],"five":[181],"feature":[182],"extraction":[183],"classification":[187],"models.":[188],"Furthermore,":[189],"compared":[190],"state-of-the-art":[192],"algorithms,":[195],"produces":[197],"more":[198,201],"diverse":[199],"effective":[202],"triggers.":[203]},"counts_by_year":[],"updated_date":"2026-03-17T06:59:57.516163","created_date":"2025-12-11T00:00:00"}