{"id":"https://openalex.org/W4389708518","doi":"https://doi.org/10.1109/tdsc.2026.3691948","title":"MalPurifier: Enhancing Android Malware Detection With Adversarial Purification Against Evasion Attacks","display_name":"MalPurifier: Enhancing Android Malware Detection With Adversarial Purification Against Evasion Attacks","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W4389708518","doi":"https://doi.org/10.1109/tdsc.2026.3691948"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2026.3691948","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3691948","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2312.06423","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077862885","display_name":"Yuyang Zhou","orcid":"https://orcid.org/0000-0001-8626-0468"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuyang Zhou","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8626-0468","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043707940","display_name":"Guang Cheng","orcid":"https://orcid.org/0000-0001-8642-4362"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Cheng","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8642-4362","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103032123","display_name":"Zongyao Chen","orcid":"https://orcid.org/0000-0002-8589-8096"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zongyao Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-8589-8096","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.0029321,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"23","issue":"4","first_page":"9241","last_page":"9258"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9775000214576721,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.8737757802009583},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7837209105491638},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7554298639297485},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6697895526885986},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6084252595901489},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5899789333343506},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5797863602638245},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.543387234210968},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5193844437599182},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5037299990653992},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49442601203918457},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.45089980959892273},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09754812717437744}],"concepts":[{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.8737757802009583},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7837209105491638},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7554298639297485},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6697895526885986},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6084252595901489},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5899789333343506},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5797863602638245},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.543387234210968},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5193844437599182},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5037299990653992},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49442601203918457},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.45089980959892273},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09754812717437744},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tdsc.2026.3691948","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3691948","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2312.06423","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2312.06423","pdf_url":"https://arxiv.org/pdf/2312.06423","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2312.06423","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2312.06423","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2312.06423","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2312.06423","pdf_url":"https://arxiv.org/pdf/2312.06423","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1052238065","display_name":null,"funder_award_id":"2024T170143","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G1793682622","display_name":null,"funder_award_id":"62072100","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G498661955","display_name":null,"funder_award_id":"2022M710677","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G6188450572","display_name":null,"funder_award_id":"62202097","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4389708518.pdf","grobid_xml":"https://content.openalex.org/works/W4389708518.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2395100307","https://openalex.org/W3195312353","https://openalex.org/W2470029541","https://openalex.org/W4308353525","https://openalex.org/W4383468964","https://openalex.org/W3200508744","https://openalex.org/W4387065217","https://openalex.org/W2470502009","https://openalex.org/W3195586271"],"abstract_inverted_index":{"Machine":[0],"learning":[1],"(ML)":[2],"has":[3],"gained":[4],"significant":[5],"adoption":[6],"in":[7],"Android":[8,79,171],"malware":[9,22,80,172],"detection":[10,34],"to":[11,36,44,165],"address":[12,45],"the":[13,18,29,51,167],"escalating":[14],"threats":[15],"posed":[16],"by":[17],"rapid":[19],"proliferation":[20],"of":[21,32,50,140,169],"attacks.":[23,38],"However,":[24],"recent":[25],"studies":[26],"have":[27,41],"revealed":[28],"inherent":[30],"vulnerabilities":[31],"ML-based":[33,170],"systems":[35],"evasion":[37,143],"While":[39],"efforts":[40],"been":[42],"made":[43],"this":[46,66],"critical":[47],"issue,":[48],"many":[49],"existing":[52],"defensive":[53],"methods":[54],"encounter":[55],"challenges":[56],"such":[57],"as":[58],"lower":[59],"effectiveness":[60],"or":[61],"reduced":[62],"generalization":[63],"capabilities.":[64],"In":[65],"paper,":[67],"we":[68],"introduce":[69],"MalPurifier,":[70],"a":[71,88,97,107,112,137,152,160],"novel":[72],"adversarial":[73,90],"purification":[74,117],"framework":[75],"specifically":[76],"engineered":[77],"for":[78,93,102,115],"detection.":[81],"Specifically,":[82],"MalPurifier":[83,128,158],"integrates":[84],"three":[85],"key":[86],"innovations:":[87],"diversified":[89],"perturbation":[91],"mechanism":[92],"robustness":[94],"and":[95,106,118,155,162],"generalizability,":[96],"protective":[98],"noise":[99],"injection":[100],"strategy":[101],"benign":[103],"data":[104],"integrity,":[105],"Denoising":[108],"AutoEncoder":[109],"(DAE)":[110],"with":[111],"dual-objective":[113],"loss":[114],"accurate":[116],"classification.":[119],"Extensive":[120],"experiments":[121],"on":[122],"two":[123],"large-scale":[124],"datasets":[125],"demonstrate":[126],"that":[127],"significantly":[129],"outperforms":[130],"state-of-the-art":[131],"defenses.":[132],"It":[133],"robustly":[134],"defends":[135],"against":[136],"comprehensive":[138],"set":[139],"37":[141],"perturbation-based":[142],"attacks,":[144],"consistently":[145],"achieving":[146],"robust":[147],"accuracies":[148],"above":[149],"90.91%.":[150],"As":[151],"lightweight,":[153],"model-agnostic,":[154],"plug-and-play":[156],"module,":[157],"offers":[159],"practical":[161],"effective":[163],"solution":[164],"bolster":[166],"security":[168],"detectors.":[173]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}