{"id":"https://openalex.org/W2621187857","doi":"https://doi.org/10.1109/tetci.2017.2699220","title":"Context-Aware, Adaptive, and Scalable Android Malware Detection Through Online Learning","display_name":"Context-Aware, Adaptive, and Scalable Android Malware Detection Through Online Learning","publication_year":2017,"publication_date":"2017-05-29","ids":{"openalex":"https://openalex.org/W2621187857","doi":"https://doi.org/10.1109/tetci.2017.2699220","mag":"2621187857"},"language":"en","primary_location":{"id":"doi:10.1109/tetci.2017.2699220","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2017.2699220","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044504418","display_name":"A. Sankara Narayanan","orcid":"https://orcid.org/0000-0001-8452-3703"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Annamalai Narayanan","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051219066","display_name":"Mahinthan Chandramohan","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Mahinthan Chandramohan","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100718988","display_name":"Lihui Chen","orcid":"https://orcid.org/0000-0001-7452-1675"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Lihui Chen","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":null,"apc_paid":null,"fwci":4.3842,"has_fulltext":false,"cited_by_count":86,"citation_normalized_percentile":{"value":0.95500459,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"1","issue":"3","first_page":"157","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8788497447967529},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7929667830467224},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7025772929191589},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6565501093864441},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6306822299957275},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6180235743522644},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5385658740997314},{"id":"https://openalex.org/keywords/population","display_name":"Population","score":0.5340273380279541},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.44808804988861084},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4154724180698395},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20909973978996277},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1528272032737732}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8788497447967529},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7929667830467224},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7025772929191589},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6565501093864441},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6306822299957275},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6180235743522644},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5385658740997314},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.5340273380279541},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.44808804988861084},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4154724180698395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20909973978996277},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1528272032737732},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C149923435","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tetci.2017.2699220","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2017.2699220","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":73,"referenced_works":["https://openalex.org/W121173099","https://openalex.org/W1445387515","https://openalex.org/W1480376833","https://openalex.org/W1485997076","https://openalex.org/W1525731446","https://openalex.org/W1630356589","https://openalex.org/W1647869403","https://openalex.org/W1816257748","https://openalex.org/W1943233084","https://openalex.org/W1990649188","https://openalex.org/W2002478203","https://openalex.org/W2008857988","https://openalex.org/W2040870580","https://openalex.org/W2054888947","https://openalex.org/W2056277442","https://openalex.org/W2077278164","https://openalex.org/W2087211161","https://openalex.org/W2091540464","https://openalex.org/W2091825929","https://openalex.org/W2092942461","https://openalex.org/W2099505562","https://openalex.org/W2105037940","https://openalex.org/W2115412287","https://openalex.org/W2115467367","https://openalex.org/W2121990650","https://openalex.org/W2122537498","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2125254014","https://openalex.org/W2137476097","https://openalex.org/W2140095007","https://openalex.org/W2142498761","https://openalex.org/W2147286743","https://openalex.org/W2159156271","https://openalex.org/W2160218441","https://openalex.org/W2166924764","https://openalex.org/W2168103835","https://openalex.org/W2168649891","https://openalex.org/W2169866700","https://openalex.org/W2216498498","https://openalex.org/W2220697891","https://openalex.org/W2282821441","https://openalex.org/W2324464293","https://openalex.org/W2407059953","https://openalex.org/W2407879741","https://openalex.org/W2468480579","https://openalex.org/W2487124337","https://openalex.org/W2488579949","https://openalex.org/W2534602447","https://openalex.org/W2590001836","https://openalex.org/W2603160474","https://openalex.org/W2745604838","https://openalex.org/W2911738047","https://openalex.org/W2963208797","https://openalex.org/W2963463723","https://openalex.org/W3009009611","https://openalex.org/W4239799938","https://openalex.org/W4242210993","https://openalex.org/W4245027182","https://openalex.org/W4251061013","https://openalex.org/W4251541794","https://openalex.org/W6628532452","https://openalex.org/W6631203707","https://openalex.org/W6640563219","https://openalex.org/W6680132778","https://openalex.org/W6681029592","https://openalex.org/W6683584131","https://openalex.org/W6719575533","https://openalex.org/W6734016670","https://openalex.org/W6742659696","https://openalex.org/W6758327135","https://openalex.org/W6999986095","https://openalex.org/W7065437122"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2439951656","https://openalex.org/W4312334973","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W1998188341","https://openalex.org/W1573526548","https://openalex.org/W4327939473","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"It":[0],"is":[1,111],"well":[2],"known":[3],"that":[4,41,97,138],"Android":[5],"malware":[6,18,37,47,64,129],"constantly":[7],"evolves":[8],"so":[9],"as":[10,144],"to":[11,20,24,75,89,125,140],"evade":[12],"detection.":[13],"This":[14],"causes":[15],"the":[16,29,42,45,61,126,135],"entire":[17],"population":[19,65],"be":[21],"nonstationary.":[22],"Contrary":[23],"this":[25,57],"fact,":[26],"most":[27],"of":[28,44,63],"prior":[30],"works":[31],"on":[32,159],"machine":[33],"learning":[34,72,191],"based":[35,73],"android":[36],"detection":[38],"have":[39],"assumed":[40],"distribution":[43],"observed":[46],"characteristics":[48],"(i.e.,":[49],"features)":[50],"does":[51],"not":[52],"change":[53],"over":[54,131],"time.":[55],"In":[56,87,149],"paper,":[58],"we":[59],"address":[60],"problem":[62],"drift":[66],"and":[67,82,116,193],"propose":[68],"a":[69,93,150,160],"novel":[70,94],"online":[71],"framework":[74],"detect":[76],"malware,":[77],"named":[78],"CASANDRA":[79,118,154,176],"(Context-aware,":[80],"Adaptive":[81],"Scalable":[83],"ANDRoid":[84],"mAlware":[85],"detector).":[86],"order":[88],"perform":[90],"accurate":[91,115],"detection,":[92],"graph":[95],"kernel":[96],"facilitates":[98],"capturing":[99],"apps":[100,142,173],"security-sensitive":[101],"behaviors":[102],"along":[103],"with":[104,168],"their":[105,188],"context":[106],"information":[107],"from":[108],"dependence":[109],"graphs":[110],"proposed.":[112],"Besides":[113],"being":[114,123,145],"scalable,":[117],"has":[119],"specific":[120],"advantages:":[121],"first,":[122],"adaptive":[124],"evolution":[127],"in":[128,187],"features":[130,137],"time;":[132],"second,":[133],"explaining":[134],"significant":[136],"led":[139],"an":[141],"classification":[143],"malicious":[146],"or":[147],"benign.":[148],"large-scale":[151],"comparative":[152],"analysis,":[153],"outperforms":[155],"two":[156],"state-of-the-art":[157],"techniques":[158,182],"benchmark":[161],"dataset":[162],"achieving":[163],"99.23%":[164],"F-measure.":[165],"When":[166],"evaluated":[167],"more":[169,184,194],"than":[170,185,195],"87":[171],"000":[172],"collected":[174],"in-the-wild,":[175],"achieves":[177],"89.92%":[178],"accuracy,":[179],"outperforming":[180],"existing":[181],"by":[183],"25%":[186],"typical":[189],"batch":[190],"setting":[192],"7%":[196],"when":[197],"they":[198],"are":[199],"continuously":[200],"retained,":[201],"while":[202],"maintaining":[203],"comparable":[204],"efficiency.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}