{"id":"https://openalex.org/W3115449059","doi":"https://doi.org/10.1109/tpds.2020.3046092","title":"Systematically Landing Machine Learning onto Market-Scale Mobile Malware Detection","display_name":"Systematically Landing Machine Learning onto Market-Scale Mobile Malware Detection","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3115449059","doi":"https://doi.org/10.1109/tpds.2020.3046092","mag":"3115449059"},"language":"en","primary_location":{"id":"doi:10.1109/tpds.2020.3046092","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpds.2020.3046092","pdf_url":null,"source":{"id":"https://openalex.org/S97130795","display_name":"IEEE Transactions on Parallel and Distributed Systems","issn_l":"1045-9219","issn":["1045-9219","1558-2183","2161-9883"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Parallel and Distributed Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076665590","display_name":"Liangyi Gong","orcid":"https://orcid.org/0000-0002-9067-8733"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Liangyi Gong","raw_affiliation_strings":["School of Software and BNRist, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software and BNRist, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076484228","display_name":"Hao Lin","orcid":"https://orcid.org/0000-0002-9990-5090"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Lin","raw_affiliation_strings":["School of Software and BNRist, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software and BNRist, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100357922","display_name":"Zhenhua Li","orcid":"https://orcid.org/0000-0001-7286-122X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenhua Li","raw_affiliation_strings":["School of Software and BNRist, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software and BNRist, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029813358","display_name":"Feng Qian","orcid":"https://orcid.org/0000-0002-9437-3021"},"institutions":[{"id":"https://openalex.org/I130238516","display_name":"University of Minnesota","ror":"https://ror.org/017zqws13","country_code":"US","type":"education","lineage":["https://openalex.org/I130238516"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feng Qian","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Minnesota, Minneapolis, MN, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Minnesota, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I130238516"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115602293","display_name":"Yang Li","orcid":"https://orcid.org/0000-0003-4616-4230"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Li","raw_affiliation_strings":["School of Software and BNRist, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software and BNRist, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003951925","display_name":"Xiaobo Ma","orcid":"https://orcid.org/0000-0002-0934-5035"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaobo Ma","raw_affiliation_strings":["MOE Key Lab for Intelligent Networks and Network Security, School of Electronic and Information Engineering, Xi\u2019an Jiaotong University, Xi\u2019an, China","MOE Key Lab for Intelligent Networks and Network Security, School of Electronic and Information Engineering, Xi'an Jiaotong University, Xi'an, China"],"affiliations":[{"raw_affiliation_string":"MOE Key Lab for Intelligent Networks and Network Security, School of Electronic and Information Engineering, Xi\u2019an Jiaotong University, Xi\u2019an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"MOE Key Lab for Intelligent Networks and Network Security, School of Electronic and Information Engineering, Xi'an Jiaotong University, Xi'an, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101877971","display_name":"Yunhao Liu","orcid":"https://orcid.org/0000-0002-6262-3313"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunhao Liu","raw_affiliation_strings":["Global Innovation Exchange, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Global Innovation Exchange, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5076665590"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":1.6669,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.84983542,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9757000207901001,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8033368587493896},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7814658284187317},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.5449771285057068},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.44824182987213135},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.389001727104187},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35203972458839417},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24744558334350586}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8033368587493896},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7814658284187317},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5449771285057068},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.44824182987213135},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.389001727104187},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35203972458839417},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24744558334350586},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tpds.2020.3046092","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpds.2020.3046092","pdf_url":null,"source":{"id":"https://openalex.org/S97130795","display_name":"IEEE Transactions on Parallel and Distributed Systems","issn_l":"1045-9219","issn":["1045-9219","1558-2183","2161-9883"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Parallel and Distributed Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1448634523","display_name":null,"funder_award_id":"61822205","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2586125334","display_name":null,"funder_award_id":"61972313","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3084395662","display_name":null,"funder_award_id":"61632020","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5461702903","display_name":null,"funder_award_id":"61902211","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7288596857","display_name":null,"funder_award_id":"61632013","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W6736853","https://openalex.org/W658020064","https://openalex.org/W1614298861","https://openalex.org/W1912565424","https://openalex.org/W1943233084","https://openalex.org/W1963971515","https://openalex.org/W1971739358","https://openalex.org/W1991372594","https://openalex.org/W2007857904","https://openalex.org/W2016216904","https://openalex.org/W2024071684","https://openalex.org/W2041276426","https://openalex.org/W2050604187","https://openalex.org/W2055184282","https://openalex.org/W2056690037","https://openalex.org/W2060692877","https://openalex.org/W2092712591","https://openalex.org/W2101800210","https://openalex.org/W2110889728","https://openalex.org/W2114275288","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2131744502","https://openalex.org/W2151182669","https://openalex.org/W2158874007","https://openalex.org/W2163643194","https://openalex.org/W2166743230","https://openalex.org/W2177710037","https://openalex.org/W2295598076","https://openalex.org/W2324658361","https://openalex.org/W2399891510","https://openalex.org/W2461373307","https://openalex.org/W2529940039","https://openalex.org/W2571682498","https://openalex.org/W2604020447","https://openalex.org/W2618621776","https://openalex.org/W2734647941","https://openalex.org/W2736287575","https://openalex.org/W2781346976","https://openalex.org/W2900275727","https://openalex.org/W2904287723","https://openalex.org/W2951384144","https://openalex.org/W2951413859","https://openalex.org/W2966009283","https://openalex.org/W2982705228","https://openalex.org/W3008621121","https://openalex.org/W3021426193","https://openalex.org/W3098602644","https://openalex.org/W3102476541","https://openalex.org/W4232332215","https://openalex.org/W4256462051","https://openalex.org/W6621906925","https://openalex.org/W6636510571","https://openalex.org/W6640059210","https://openalex.org/W6679775712","https://openalex.org/W6683921424","https://openalex.org/W6712192629"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W2249809453","https://openalex.org/W3152891574","https://openalex.org/W4316881845"],"abstract_inverted_index":{"Despite":[0],"being":[1],"crucial":[2],"to":[3,23,90,130,169],"today's":[4],"mobile":[5],"ecosystem,":[6],"app":[7,76,106],"markets":[8],"have":[9,35,48],"meanwhile":[10],"become":[11],"a":[12,68,73,152,165],"natural,":[13],"convenient":[14],"malware":[15,42,53,155],"delivery":[16],"channel":[17],"as":[18,115,117],"they":[19],"actually":[20],"\u201clend":[21],"credibility\u201d":[22],"malicious":[24],"apps.":[25],"In":[26],"the":[27,63,88,125,131,136],"past":[28],"few":[29],"years,":[30],"machine":[31],"learning":[32],"(ML)":[33],"techniques":[34],"been":[36,160],"widely":[37],"explored":[38],"for":[39],"automated,":[40],"robust":[41],"detection,":[43],"but":[44],"till":[45],"now":[46],"we":[47,66],"not":[49],"seen":[50],"an":[51,178,190],"ML-based":[52],"detection":[54,156],"solution":[55],"applied":[56],"at":[57,162],"market":[58,77],"scales.":[59],"To":[60],"systematically":[61],"understand":[62],"real-world":[64],"challenges,":[65],"conduct":[67],"collaborative":[69],"study":[70,85],"with":[71,189],"T-Market,":[72,163],"popular":[74],"Android":[75],"that":[78,87],"offers":[79],"us":[80],"large-scale":[81],"ground-truth":[82],"data.":[83],"Our":[84],"illustrates":[86],"key":[89],"successfully":[91],"developing":[92],"such":[93],"systems":[94],"is":[95],"multifold,":[96],"including":[97],"feature":[98,102],"selection":[99],"and":[100,104,109,112,146,175,184],"encoding,":[101],"engineering":[103],"exposure,":[105],"analysis":[107],"speed":[108],"efficacy,":[110],"developer":[111],"user":[113],"engagement,":[114],"well":[116],"ML":[118],"model":[119],"evolution.":[120],"Failure":[121],"in":[122,150],"any":[123],"of":[124,135,181,186,195],"above":[126],"aspects":[127],"could":[128],"lead":[129],"\u201cwooden":[132],"barrel":[133],"effect\u201d":[134],"whole":[137],"system.":[138,157],"This":[139],"article":[140],"presents":[141],"our":[142],"judicious":[143],"design":[144],"choices":[145],"first-hand":[147],"deployment":[148],"experiences":[149],"building":[151],"practical":[153],"ML-powered":[154],"It":[158],"has":[159,176],"operational":[161],"using":[164],"single":[166],"commodity":[167],"server":[168],"check":[170],"~12K":[171],"apps":[172],"every":[173],"day,":[174],"achieved":[177],"overall":[179],"precision":[180],"98.9":[182],"percent":[183,188],"recall":[185],"98.1":[187],"average":[191],"per-app":[192],"scan":[193],"time":[194],"0.9":[196],"minutes.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}