{"id":"https://openalex.org/W2220697891","doi":"https://doi.org/10.1145/2818000.2818038","title":"Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning","display_name":"Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning","publication_year":2015,"publication_date":"2015-12-07","ids":{"openalex":"https://openalex.org/W2220697891","doi":"https://doi.org/10.1145/2818000.2818038","mag":"2220697891"},"language":"en","primary_location":{"id":"doi:10.1145/2818000.2818038","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818038","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818038&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=2818038&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103390066","display_name":"Sankardas Roy","orcid":null},"institutions":[{"id":"https://openalex.org/I157417397","display_name":"Bowling Green State University","ror":"https://ror.org/00ay7va13","country_code":"US","type":"education","lineage":["https://openalex.org/I157417397"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sankardas Roy","raw_affiliation_strings":["Computer Science Department, Bowling Green State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, Bowling Green State University","institution_ids":["https://openalex.org/I157417397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085711960","display_name":"Jordan DeLoach","orcid":null},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jordan DeLoach","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100360818","display_name":"Yuping Li","orcid":"https://orcid.org/0000-0002-5833-931X"},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuping Li","raw_affiliation_strings":["Department of Computer Science and Engineering, University of South Florida"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of South Florida","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059305373","display_name":"Nic Herndon","orcid":"https://orcid.org/0000-0001-9712-148X"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nic Herndon","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067341711","display_name":"Doina Caragea","orcid":"https://orcid.org/0000-0002-6440-0914"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Doina Caragea","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113810433","display_name":"Xinming Ou","orcid":"https://orcid.org/0009-0007-2501-7991"},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinming Ou","raw_affiliation_strings":["Department of Computer Science and Engineering, University of South Florida"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of South Florida","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006459848","display_name":"Venkatesh-Prasad Ranganath","orcid":"https://orcid.org/0000-0001-7684-6086"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Venkatesh Prasad Ranganath","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100700815","display_name":"Hongmin Li","orcid":"https://orcid.org/0000-0003-4928-3534"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongmin Li","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109256965","display_name":"Nicolais L. Guevara","orcid":null},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicolais Guevara","raw_affiliation_strings":["Department of Computing and Information Sciences, Kansas State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Information Sciences, Kansas State University","institution_ids":["https://openalex.org/I189590672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.2788,"has_fulltext":true,"cited_by_count":80,"citation_normalized_percentile":{"value":0.98447294,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"81","last_page":"90"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.8407436609268188},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.833172619342804},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8060956001281738},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7840370535850525},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5694694519042969},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45142877101898193},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.44888463616371155},{"id":"https://openalex.org/keywords/android-app","display_name":"Android app","score":0.4398622512817383},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.43767938017845154},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3528892397880554},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3317040205001831},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1421346366405487}],"concepts":[{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.8407436609268188},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.833172619342804},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8060956001281738},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7840370535850525},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5694694519042969},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45142877101898193},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.44888463616371155},{"id":"https://openalex.org/C2988045736","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android app","level":3,"score":0.4398622512817383},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.43767938017845154},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3528892397880554},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3317040205001831},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1421346366405487},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2818000.2818038","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818038","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818038&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2818000.2818038","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2818000.2818038","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2818038&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3204117301","display_name":"CC-IIE Networking Infrastructure: KGEN: Next-generation networking environments for biological and agricultural data-driven research at Kansas State University","funder_award_id":"1440548","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3914563166","display_name":"MRI: Acquisition of an Adaptive Data Cluster for Data-intensive Applications in Science and Engineering","funder_award_id":"1429316","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3918982465","display_name":null,"funder_award_id":"0954138,1314925","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5216177361","display_name":null,"funder_award_id":"1314925","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5797373100","display_name":"CC-NIE Network Infrastructure: KGAP: Bridging th Gap in Network Flexibility and Performance for Genomics and Data-Intensive Research at Kansas State University","funder_award_id":"1341026","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G65109895","display_name":"CAREER: Reasoning under Uncertainty in Cybersecurity","funder_award_id":"0954138","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7139148718","display_name":"MRI: Acquisition of a Hybrid GPU Computing Cluster High-End Applications in Science and Engineering","funder_award_id":"1126709","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2220697891.pdf","grobid_xml":"https://content.openalex.org/works/W2220697891.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W1943233084","https://openalex.org/W1976526581","https://openalex.org/W1982773740","https://openalex.org/W1985987493","https://openalex.org/W2038296020","https://openalex.org/W2071536101","https://openalex.org/W2091540464","https://openalex.org/W2105472238","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2133990480","https://openalex.org/W2141554582","https://openalex.org/W2151298633","https://openalex.org/W2156204309","https://openalex.org/W2168103835","https://openalex.org/W2399891510","https://openalex.org/W2403072371"],"related_works":["https://openalex.org/W4285507391","https://openalex.org/W2610659201","https://openalex.org/W77168003","https://openalex.org/W3107556205","https://openalex.org/W65788704","https://openalex.org/W2183925834","https://openalex.org/W3200508744","https://openalex.org/W2995172056","https://openalex.org/W2805262980","https://openalex.org/W2765174411"],"abstract_inverted_index":{"Although":[0],"Machine":[1],"Learning":[2],"(ML)":[3],"based":[4],"approaches":[5,152],"have":[6],"shown":[7],"promise":[8],"for":[9,153],"Android":[10,79,127,154],"malware":[11,80,155],"detection,":[12],"a":[13,57,142],"set":[14,58],"of":[15,21,30,42,53,59,102,140,149],"critical":[16],"challenges":[17,23,55,104],"remain":[18],"unaddressed.":[19],"Some":[20],"those":[22],"arise":[24],"in":[25,120],"relation":[26],"to":[27,38,91,136],"proper":[28],"evaluation":[29,144],"the":[31,39,43,51,86,93,100,121,125,138],"detection":[32,81],"approach":[33],"while":[34,76],"others":[35],"are":[36,88],"related":[37],"design":[40,65],"decisions":[41],"same.":[44],"In":[45],"this":[46,134],"paper,":[47],"we":[48,70,97,118],"systematically":[49],"study":[50,135],"impact":[52,101],"these":[54],"as":[56],"research":[60,94],"questions":[61],"(i.e.,":[62],"hypotheses).":[63],"We":[64,132],"an":[66],"experimentation":[67],"framework":[68],"where":[69],"can":[71],"reliably":[72],"vary":[73],"several":[74],"parameters":[75],"evaluating":[77],"ML-based":[78,108,151],"approaches.":[82,109],"The":[83,110],"results":[84],"from":[85],"experiments":[87,123],"then":[89],"used":[90],"answer":[92],"questions.":[95],"Meanwhile,":[96],"also":[98],"demonstrate":[99],"some":[103,106],"on":[105],"existing":[107],"large":[111],"(market-scale)":[112],"dataset":[113],"(benign":[114],"and":[115,146],"malicious":[116],"apps)":[117],"use":[119],"above":[122],"represents":[124],"real-world":[126],"app":[128],"security":[129],"analysis":[130],"scale.":[131],"envision":[133],"encourage":[137],"practice":[139],"employing":[141],"better":[143,147],"strategy":[145],"designs":[148],"future":[150],"detection.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":16},{"year":2016,"cited_by_count":7}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}