{"id":"https://openalex.org/W2199478250","doi":"https://doi.org/10.1145/2818000.2818036","title":"BareDroid","display_name":"BareDroid","publication_year":2015,"publication_date":"2015-12-07","ids":{"openalex":"https://openalex.org/W2199478250","doi":"https://doi.org/10.1145/2818000.2818036","mag":"2199478250"},"language":"en","primary_location":{"id":"doi:10.1145/2818000.2818036","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818036","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818036&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=2818036&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042894190","display_name":"Simone Mutti","orcid":null},"institutions":[{"id":"https://openalex.org/I11039511","display_name":"University of Bergamo","ror":"https://ror.org/02mbd5571","country_code":"IT","type":"education","lineage":["https://openalex.org/I11039511"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Simone Mutti","raw_affiliation_strings":["Universit\u00e1 degli Studi di Bergamo, Bergamo, Italy"],"affiliations":[{"raw_affiliation_string":"Universit\u00e1 degli Studi di Bergamo, Bergamo, Italy","institution_ids":["https://openalex.org/I11039511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002695158","display_name":"Yanick Fratantonio","orcid":"https://orcid.org/0009-0008-3676-9117"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yanick Fratantonio","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028194244","display_name":"Antonio Bianchi","orcid":"https://orcid.org/0000-0002-2862-5286"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Antonio Bianchi","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064912041","display_name":"Luca Invernizzi","orcid":"https://orcid.org/0000-0001-8420-0760"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luca Invernizzi","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079915223","display_name":"Jacopo Corbetta","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jacopo Corbetta","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078172448","display_name":"Dhilung Kirat","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dhilung Kirat","raw_affiliation_strings":["IBM Research T.J. Watson, Yorktown Heights, NY"],"affiliations":[{"raw_affiliation_string":"IBM Research T.J. Watson, Yorktown Heights, NY","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["UC Santa Barbara Santa, Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara Santa, Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["UC Santa Barbara Santa, Barbara, CA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara Santa, Barbara, CA","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5042894190"],"corresponding_institution_ids":["https://openalex.org/I11039511"],"apc_list":null,"apc_paid":null,"fwci":9.5538,"has_fulltext":true,"cited_by_count":56,"citation_normalized_percentile":{"value":0.9853034,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"71","last_page":"80"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8643773794174194},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8325967788696289},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7265470623970032},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.6070918440818787},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.5312718152999878},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5238007307052612},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.5200161933898926},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4190669655799866},{"id":"https://openalex.org/keywords/ranging","display_name":"Ranging","score":0.4168151915073395},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4009387791156769},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3506550192832947},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.19526615738868713},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.19426003098487854}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8643773794174194},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8325967788696289},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7265470623970032},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.6070918440818787},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.5312718152999878},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5238007307052612},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5200161933898926},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4190669655799866},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.4168151915073395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4009387791156769},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3506550192832947},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.19526615738868713},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.19426003098487854},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2818000.2818036","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818036","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818036&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2818000.2818036","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818036","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818036&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5299999713897705,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G1773651856","display_name":null,"funder_award_id":"W911NF0910553","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G1956724514","display_name":null,"funder_award_id":"FA8750-15-2-008","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G3530937710","display_name":null,"funder_award_id":"SeSQLite: Security Enhanced SQLite","funder_id":"https://openalex.org/F4320309327","funder_display_name":"Google"},{"id":"https://openalex.org/G4638008297","display_name":null,"funder_award_id":"CNS-1408632","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4713059963","display_name":null,"funder_award_id":"FA8750","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G508048576","display_name":null,"funder_award_id":"FA8750-15-2-0084","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G5524522455","display_name":null,"funder_award_id":"DARPA","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G5921281487","display_name":null,"funder_award_id":"number","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6045381192","display_name":"TWC: TTP Option: Medium: Collaborative: Identifying and Mitigating Trust Violations in the Smartphone Ecosystem","funder_award_id":"1408632","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7146038114","display_name":null,"funder_award_id":"N000140911042","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8356533370","display_name":null,"funder_award_id":"2010RTFWBH GenData 2020","funder_id":"https://openalex.org/F4320321873","funder_display_name":"Ministero dell\u2019Istruzione, dell\u2019Universit\u00e0 e della Ricerca"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8998121839","display_name":null,"funder_award_id":"911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309327","display_name":"Google","ror":"https://ror.org/00njsd438"},{"id":"https://openalex.org/F4320321873","display_name":"Ministero dell\u2019Istruzione, dell\u2019Universit\u00e0 e della Ricerca","ror":"https://ror.org/0166hxq48"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2199478250.pdf","grobid_xml":"https://content.openalex.org/works/W2199478250.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W7103708","https://openalex.org/W1684730140","https://openalex.org/W1829003931","https://openalex.org/W1991685971","https://openalex.org/W1992181084","https://openalex.org/W2015790908","https://openalex.org/W2070386561","https://openalex.org/W2075338504","https://openalex.org/W2090534521","https://openalex.org/W2104839588","https://openalex.org/W2112731379","https://openalex.org/W2115175195","https://openalex.org/W2120297918","https://openalex.org/W2126169116","https://openalex.org/W2140807364","https://openalex.org/W2145688371","https://openalex.org/W2158874007","https://openalex.org/W2163292449","https://openalex.org/W2176830056","https://openalex.org/W2405120356","https://openalex.org/W2615082125"],"related_works":["https://openalex.org/W4384112194","https://openalex.org/W2783354812","https://openalex.org/W2103009189","https://openalex.org/W4312958259","https://openalex.org/W4390813131","https://openalex.org/W2349383066","https://openalex.org/W1969901537","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W4312334973"],"abstract_inverted_index":{"To":[0],"protect":[1],"Android":[2],"users,":[3],"researchers":[4],"have":[5],"been":[6,127],"analyzing":[7,118],"unknown,":[8],"potentially-malicious":[9],"applications":[10],"by":[11],"using":[12],"systems":[13],"based":[14],"on":[15,121,157,162],"emulators,":[16],"such":[17],"as":[18],"the":[19,26,91,132,145],"Google's":[20],"Bouncer":[21],"and":[22,40,62,85],"Andrubis.":[23],"Emulators":[24],"are":[25,56,105],"go-to":[27],"choice":[28],"because":[29,131],"of":[30,52,94,97,100,153],"their":[31],"convenience:":[32],"they":[33],"can":[34,41,149],"scale":[35,125],"horizontally":[36],"over":[37],"multiple":[38],"hosts,":[39],"be":[42],"reverted":[43],"to":[44,71,75,89,107,112,134,138],"a":[45,50,136,139,158],"known,":[46],"clean":[47,140],"state":[48],"in":[49],"matter":[51],"seconds.":[53],"Emulators,":[54],"however,":[55],"fundamentally":[57],"different":[58],"from":[59,81],"real":[60],"devices,":[61],"previous":[63],"research":[64],"has":[65,126],"shown":[66],"how":[67],"it":[68],"is":[69,142],"possible":[70],"automatically":[72],"develop":[73],"heuristics":[74],"identify":[76],"an":[77,151,163],"emulated":[78],"environment,":[79],"ranging":[80],"simple":[82],"flag":[83],"checks":[84],"unrealistic":[86],"sensor":[87],"input,":[88],"fingerprinting":[90],"hypervisor's":[92],"handling":[93],"basic":[95],"blocks":[96],"instructions.":[98],"Aware":[99],"this":[101,109],"aspect,":[102],"malware":[103],"authors":[104],"starting":[106],"exploit":[108],"fundamental":[110],"weakness":[111],"evade":[113],"current":[114],"detection":[115],"systems.":[116],"Unfortunately,":[117],"apps":[119,156],"directly":[120],"bare":[122],"metal":[123],"at":[124],"so":[128],"far":[129],"unfeasible,":[130],"time":[133],"restore":[135],"device":[137,160],"snapshot":[141],"prohibitive:":[143],"with":[144],"same":[146],"budget,":[147],"one":[148],"analyze":[150],"order":[152],"magnitude":[154],"less":[155],"physical":[159],"than":[161],"emulator.":[164]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":16},{"year":2016,"cited_by_count":5},{"year":2012,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2016-06-24T00:00:00"}