{"id":"https://openalex.org/W2901033482","doi":"https://doi.org/10.1109/tmc.2018.2880731","title":"Android Malware Detection via Graphlet Sampling","display_name":"Android Malware Detection via Graphlet Sampling","publication_year":2018,"publication_date":"2018-11-12","ids":{"openalex":"https://openalex.org/W2901033482","doi":"https://doi.org/10.1109/tmc.2018.2880731","mag":"2901033482"},"language":"en","primary_location":{"id":"doi:10.1109/tmc.2018.2880731","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2018.2880731","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044120229","display_name":"Tianchong Gao","orcid":"https://orcid.org/0000-0001-6620-7707"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tianchong Gao","raw_affiliation_strings":["School of Engineering and Technology, Indiana University - Purdue University Indianapolis, Indianapolis, USA"],"raw_orcid":"https://orcid.org/0000-0001-6620-7707","affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, Indiana University - Purdue University Indianapolis, Indianapolis, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109604612","display_name":"Wei Peng","orcid":"https://orcid.org/0009-0001-1028-257X"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Peng","raw_affiliation_strings":["Intel Corporation, Folsom, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Corporation, Folsom, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085277268","display_name":"Devkishen Sisodia","orcid":"https://orcid.org/0000-0002-2018-1406"},"institutions":[{"id":"https://openalex.org/I103163165","display_name":"Florida State University","ror":"https://ror.org/05g3dte14","country_code":"US","type":"education","lineage":["https://openalex.org/I103163165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Devkishen Sisodia","raw_affiliation_strings":["College of Arts and Sciences, University of Oregon, Eugene, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Arts and Sciences, University of Oregon, Eugene, USA","institution_ids":["https://openalex.org/I103163165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091759842","display_name":"Tanay Kumar Saha","orcid":"https://orcid.org/0000-0002-7478-9222"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tanay Kumar Saha","raw_affiliation_strings":["School of Science, Indiana University - Purdue University Indianapolis, Indianapolis, USA"],"raw_orcid":"https://orcid.org/0000-0002-7478-9222","affiliations":[{"raw_affiliation_string":"School of Science, Indiana University - Purdue University Indianapolis, Indianapolis, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100448828","display_name":"Feng Li","orcid":"https://orcid.org/0000-0001-7633-7863"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feng Li","raw_affiliation_strings":["School of Engineering and Technology, Indiana University - Purdue University Indianapolis, Indianapolis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, Indiana University - Purdue University Indianapolis, Indianapolis, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044451399","display_name":"Mohammad Al Hasan","orcid":"https://orcid.org/0000-0002-8279-1023"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Al Hasan","raw_affiliation_strings":["School of Science, Indiana University - Purdue University Indianapolis, Indianapolis, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Science, Indiana University - Purdue University Indianapolis, Indianapolis, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.1323,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":{"value":0.88530201,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"18","issue":"12","first_page":"2754","last_page":"2767"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8059797286987305},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8053152561187744},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7999447584152222},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5720388293266296},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.4292253851890564},{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.42432183027267456},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3120824694633484},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.22746381163597107}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8059797286987305},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8053152561187744},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7999447584152222},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5720388293266296},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.4292253851890564},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.42432183027267456},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3120824694633484},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.22746381163597107}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tmc.2018.2880731","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2018.2880731","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},{"id":"pmh:oai:scholarworks.indianapolis.iu.edu:1805/19762","is_oa":false,"landing_page_url":"https://hdl.handle.net/1805/19762","pdf_url":null,"source":{"id":"https://openalex.org/S4306400987","display_name":"IUScholarWorks (Indiana University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I592451","host_organization_name":"Indiana University","host_organization_lineage":["https://openalex.org/I592451"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Author","raw_type":"Article"},{"id":"pmh:oai:scholarworks.iupui.edu:1805/19762","is_oa":false,"landing_page_url":"http://hdl.handle.net/1805/19762","pdf_url":null,"source":{"id":"https://openalex.org/S4306400987","display_name":"IUScholarWorks (Indiana University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I592451","host_organization_name":"Indiana University","host_organization_lineage":["https://openalex.org/I592451"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Author","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.5899999737739563}],"awards":[{"id":"https://openalex.org/G5422767414","display_name":null,"funder_award_id":"CNS-1560020","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G5774341080","display_name":null,"funder_award_id":"DUE-1431330","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"}],"funders":[{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W74953171","https://openalex.org/W1846544701","https://openalex.org/W1943233084","https://openalex.org/W1971497680","https://openalex.org/W1992114977","https://openalex.org/W2017546343","https://openalex.org/W2024588961","https://openalex.org/W2028727337","https://openalex.org/W2036265926","https://openalex.org/W2056760934","https://openalex.org/W2080157505","https://openalex.org/W2092942461","https://openalex.org/W2096196901","https://openalex.org/W2119821739","https://openalex.org/W2120753619","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2125254014","https://openalex.org/W2127405101","https://openalex.org/W2136593687","https://openalex.org/W2141554582","https://openalex.org/W2147717514","https://openalex.org/W2148762636","https://openalex.org/W2152149943","https://openalex.org/W2153635508","https://openalex.org/W2168103835","https://openalex.org/W2170726034","https://openalex.org/W2186567438","https://openalex.org/W2334842536","https://openalex.org/W2538057479","https://openalex.org/W2963210785","https://openalex.org/W2964136807","https://openalex.org/W4239510810","https://openalex.org/W4285719527","https://openalex.org/W6603067368","https://openalex.org/W6638949026","https://openalex.org/W6670677551","https://openalex.org/W6685146747","https://openalex.org/W6686471415"],"related_works":["https://openalex.org/W4249118297","https://openalex.org/W2717179875","https://openalex.org/W2311926078","https://openalex.org/W3199551743","https://openalex.org/W4281384336","https://openalex.org/W3195586271","https://openalex.org/W2782775281","https://openalex.org/W4312234627","https://openalex.org/W2781346976","https://openalex.org/W2899262475"],"abstract_inverted_index":{"Android":[0,15,47,59],"systems":[1],"are":[2,159],"widely":[3],"used":[4],"in":[5,82,175],"mobile":[6,21],"&":[7],"wireless":[8],"distributed":[9,22],"systems.":[10],"In":[11,37],"the":[12,20,26,32,51,71,76,88,127],"near":[13],"future,":[14],"is":[16,165],"believed":[17],"to":[18,161],"dominate":[19],"environment.":[23],"However,":[24],"with":[25,129],"popularity":[27],"of":[28,34,46],"Android-based":[29,35],"smartphones/tablets":[30],"comes":[31],"rampancy":[33],"malware.":[36],"this":[38],"paper,":[39],"we":[40,98,122],"propose":[41],"a":[42,147,172],"novel":[43],"topological":[44,139],"signature":[45,105],"apps":[48],"based":[49],"on":[50,68],"function":[52],"call":[53],"graphs":[54],"(FCGs)":[55],"extracted":[56],"from":[57],"their":[58],"App":[60,103],"PacKages":[61],"(APKs).":[62],"Specifically,":[63],"by":[64,142],"leveraging":[65],"recent":[66],"advances":[67],"graphlet":[69],"mining,":[70],"proposed":[72],"method":[73],"fully":[74],"captures":[75],"invocator-invocatee":[77],"relationship":[78],"at":[79],"local":[80,138],"neighborhoods":[81],"an":[83],"FCG":[84,128],"without":[85,125],"exponentially":[86],"inflating":[87],"state":[89],"space.":[90],"Using":[91],"real":[92],"benign":[93],"app":[94],"and":[95,113,118],"malware":[96,112,115,149,176],"samples,":[97],"demonstrate":[99,123],"that":[100,167],"our":[101],"method,":[102],"topologiCal":[104],"through":[106],"graphleT":[107],"Sampling":[108],"(ACTS),":[109],"can":[110,145],"detect":[111],"identify":[114],"families":[116],"robustly":[117],"efficiently.":[119],"More":[120],"importantly,":[121],"that,":[124],"augmenting":[126],"any":[130],"semantic":[131,162,182],"features":[132],"such":[133],"as":[134],"bytecode-based":[135],"vertex":[136],"typing,":[137],"information":[140],"captured":[141],"ACTS":[143,153],"alone":[144],"achieve":[146],"high":[148],"detection":[150,177],"accuracy.":[151],"Since":[152],"only":[154],"uses":[155],"structural":[156],"features,":[157,163],"which":[158],"orthogonal":[160],"it":[164],"expected":[166],"combining":[168,180],"them":[169],"would":[170],"give":[171],"greater":[173],"improvement":[174],"accuracy":[178],"than":[179],"non-orthogonal":[181],"features.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}