{"id":"https://openalex.org/W4309156333","doi":"https://doi.org/10.1109/wimob55322.2022.9941515","title":"A Surrogate-Based Technique for Android Malware Detectors' Explainability","display_name":"A Surrogate-Based Technique for Android Malware Detectors' Explainability","publication_year":2022,"publication_date":"2022-10-10","ids":{"openalex":"https://openalex.org/W4309156333","doi":"https://doi.org/10.1109/wimob55322.2022.9941515"},"language":"en","primary_location":{"id":"doi:10.1109/wimob55322.2022.9941515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wimob55322.2022.9941515","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 18th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007761416","display_name":"Martina Morcos","orcid":null},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Martina Morcos","raw_affiliation_strings":["Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016925365","display_name":"Hussam Al Hamadi","orcid":"https://orcid.org/0000-0002-1353-4138"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Hussam Al Hamadi","raw_affiliation_strings":["Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075830877","display_name":"Ernesto Damiani","orcid":"https://orcid.org/0000-0002-9557-6496"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ernesto Damiani","raw_affiliation_strings":["Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khalifa University,Center for Cyber-Physical Systems,EECS Dept.,Abu Dhabi,UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"EECS Dept., Center for Cyber-Physical Systems, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077277365","display_name":"Sivaprasad Nandyala","orcid":"https://orcid.org/0000-0002-0806-8064"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Sivaprasad Nandyala","raw_affiliation_strings":["Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII),Abu Dhabi,UAE","Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII), Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII),Abu Dhabi,UAE","institution_ids":["https://openalex.org/I4210087059"]},{"raw_affiliation_string":"Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII), Abu Dhabi, UAE","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036763044","display_name":"Brian McGillion","orcid":"https://orcid.org/0000-0003-2683-5295"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Brian McGillion","raw_affiliation_strings":["Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII),Abu Dhabi,UAE","Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII), Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII),Abu Dhabi,UAE","institution_ids":["https://openalex.org/I4210087059"]},{"raw_affiliation_string":"Secure Systems Research Centre (SSRC), Technology Innovation Institute (TII), Abu Dhabi, UAE","institution_ids":["https://openalex.org/I4210087059"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"112","last_page":"117"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8386144638061523},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8153904676437378},{"id":"https://openalex.org/keywords/trigram","display_name":"Trigram","score":0.779037594795227},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7729665637016296},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6809927821159363},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5889886021614075},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.5198350548744202},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.514905571937561},{"id":"https://openalex.org/keywords/porting","display_name":"Porting","score":0.4183543622493744},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.4181501567363739},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.40954363346099854},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38414159417152405},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22135761380195618}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8386144638061523},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8153904676437378},{"id":"https://openalex.org/C137546455","wikidata":"https://www.wikidata.org/wiki/Q3213474","display_name":"Trigram","level":2,"score":0.779037594795227},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7729665637016296},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6809927821159363},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5889886021614075},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.5198350548744202},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.514905571937561},{"id":"https://openalex.org/C106251023","wikidata":"https://www.wikidata.org/wiki/Q851989","display_name":"Porting","level":3,"score":0.4183543622493744},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.4181501567363739},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.40954363346099854},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38414159417152405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22135761380195618},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wimob55322.2022.9941515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wimob55322.2022.9941515","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 18th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1978762841","https://openalex.org/W1985987493","https://openalex.org/W2122672392","https://openalex.org/W2282821441","https://openalex.org/W2407059953","https://openalex.org/W2538940504","https://openalex.org/W2749572357","https://openalex.org/W2772683029","https://openalex.org/W2911964244","https://openalex.org/W2962862931","https://openalex.org/W2999422148","https://openalex.org/W3019109115","https://openalex.org/W3090855408","https://openalex.org/W3104158743","https://openalex.org/W3215357191","https://openalex.org/W4206967005","https://openalex.org/W4220901202","https://openalex.org/W4226336841","https://openalex.org/W4281778452","https://openalex.org/W4285059789","https://openalex.org/W4285234540","https://openalex.org/W4290755474","https://openalex.org/W4295313945","https://openalex.org/W4296105182","https://openalex.org/W4312290548","https://openalex.org/W6737947904","https://openalex.org/W6748281036"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W4327939473","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W3200508744","https://openalex.org/W2462192250","https://openalex.org/W4312234627","https://openalex.org/W3195312353"],"abstract_inverted_index":{"With":[0],"the":[1,27,58,66,92,115,119,124,129,137,145,153,159,175,181,185,193,216,220],"emergence":[2],"of":[3,60,65,77,106,114,126,192,207],"Android":[4],"malware":[5,24],"and":[6,19,41,45,75,82,85,112,180,205],"be-havioral":[7],"polymorphism,":[8],"it":[9],"has":[10],"been":[11],"increasingly":[12],"popular":[13],"to":[14,47,143,151,167],"use":[15],"advanced":[16],"machine":[17],"learning":[18,21],"deep":[20],"approaches":[22],"for":[23,43,80,103],"detection.":[25],"Despite":[26],"fact":[28],"that":[29,57,174,183],"such":[30],"classifiers":[31],"have":[32],"proven":[33],"accurate":[34],"in":[35,149,157,190,196,213,219],"real-life":[36],"settings,":[37],"they":[38,50],"remain":[39],"uninterpretable":[40],"difficult":[42],"analysts":[44],"users":[46],"comprehend":[48],"how":[49],"arrive":[51],"at":[52],"their":[53,165],"classification":[54,186],"decisions.":[55],"Considering":[56],"exfiltration":[59,194,209],"sensitive":[61],"information":[62],"is":[63],"one":[64],"most":[67,155],"significant":[68],"security":[69],"threats,":[70],"we":[71,98,135],"examined":[72],"both":[73],"monograms":[74],"trigrams":[76],"system":[78],"calls":[79],"normal":[81],"malicious":[83],"software":[84],"received":[86],"higher":[87],"detection":[88,210],"accuracy":[89],"by":[90],"using":[91],"trigram":[93],"dataset.":[94],"Based":[95],"on":[96,123],"this,":[97],"propose":[99],"an":[100],"auxiliary":[101,116],"architecture":[102],"model":[104,117,121,211],"explainability":[105],"complex":[107],"data":[108],"features":[109,154,182],"via":[110],"enhancement":[111],"aggregation":[113],"with":[118,163],"main":[120],"based":[122],"degree":[125],"disagreement":[127],"between":[128],"two":[130],"models.":[131],"In":[132,198],"this":[133],"study,":[134],"employ":[136],"SHAP":[138],"(Shapley":[139],"Additive":[140],"Explanations)":[141],"framework":[142],"interpret":[144],"random":[146],"forest":[147],"models":[148,176],"order":[150],"identify":[152],"influential":[156],"predicting":[158],"model's":[160,221],"predictions,":[161],"along":[162],"quantifying":[164],"contributions":[166],"individual":[168],"predictions.":[169,222],"The":[170],"obtained":[171],"results":[172],"confirm":[173],"are":[177,188],"not":[178],"biased":[179],"influence":[184],"prediction":[187],"intuitive":[189],"terms":[191],"problem":[195],"question.":[197],"addition,":[199],"our":[200,208],"proposed":[201],"methodology":[202],"increases":[203],"transparency":[204],"interpretability":[206],"running":[212],"production,":[214],"increasing":[215],"users'":[217],"trust":[218]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}