{"id":"https://openalex.org/W2531970759","doi":"https://doi.org/10.1145/2996758.2996760","title":"Causality-based Sensemaking of Network Traffic for Android Application Security","display_name":"Causality-based Sensemaking of Network Traffic for Android Application Security","publication_year":2016,"publication_date":"2016-10-27","ids":{"openalex":"https://openalex.org/W2531970759","doi":"https://doi.org/10.1145/2996758.2996760","mag":"2531970759"},"language":"en","primary_location":{"id":"doi:10.1145/2996758.2996760","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2996758.2996760","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2996760&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=2996760&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100397061","display_name":"Hao Zhang","orcid":"https://orcid.org/0000-0003-3877-7512"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Hao Zhang","raw_affiliation_strings":["Virginia Tech, Blacksburg, VA, USA"],"affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034366344","display_name":"Danfeng Yao","orcid":"https://orcid.org/0000-0001-8969-2792"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danfeng (Daphne) Yao","raw_affiliation_strings":["Virginia Tech, Blacksburg, VA, USA"],"affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035052603","display_name":"Naren Ramakrishnan","orcid":"https://orcid.org/0000-0002-1821-9743"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Naren Ramakrishnan","raw_affiliation_strings":["Virginia Tech, Blacksburg, VA, USA"],"affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100397061"],"corresponding_institution_ids":["https://openalex.org/I859038795"],"apc_list":null,"apc_paid":null,"fwci":2.2912,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.89297835,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"47","last_page":"58"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8145822882652283},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7999135851860046},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.7256324887275696},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5839470624923706},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5210239887237549},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.45377662777900696},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21219900250434875}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8145822882652283},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7999135851860046},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.7256324887275696},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5839470624923706},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5210239887237549},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.45377662777900696},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21219900250434875}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2996758.2996760","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2996758.2996760","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2996760&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2996758.2996760","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2996758.2996760","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2996760&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7799999713897705}],"awards":[{"id":"https://openalex.org/G1159112573","display_name":null,"funder_award_id":"CNS-0953638","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3424441068","display_name":null,"funder_award_id":"W911NF-14-1","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G5814776016","display_name":"CAREER: Human-Behavior Driven Malware Detection","funder_award_id":"0953638","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6567607703","display_name":null,"funder_award_id":"ARO YIP W911NF-14-1-0535","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6671297155","display_name":null,"funder_award_id":"CAREER","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G723062459","display_name":null,"funder_award_id":"CAREER CNS-0953638","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7767459810","display_name":null,"funder_award_id":"YIP W911NF-14-1-0535","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8998121839","display_name":null,"funder_award_id":"911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2531970759.pdf","grobid_xml":"https://content.openalex.org/works/W2531970759.grobid-xml"},"referenced_works_count":50,"referenced_works":["https://openalex.org/W81879861","https://openalex.org/W121173099","https://openalex.org/W197026479","https://openalex.org/W1433255219","https://openalex.org/W1454815643","https://openalex.org/W1493883477","https://openalex.org/W1496436819","https://openalex.org/W1541722909","https://openalex.org/W1633185320","https://openalex.org/W1865564993","https://openalex.org/W1943233084","https://openalex.org/W1954903228","https://openalex.org/W1973548319","https://openalex.org/W1982773740","https://openalex.org/W1988036170","https://openalex.org/W1990649188","https://openalex.org/W1993503217","https://openalex.org/W1995412393","https://openalex.org/W2007857904","https://openalex.org/W2017102965","https://openalex.org/W2049917012","https://openalex.org/W2051088039","https://openalex.org/W2060692877","https://openalex.org/W2061221009","https://openalex.org/W2068583268","https://openalex.org/W2076438261","https://openalex.org/W2085577046","https://openalex.org/W2089067454","https://openalex.org/W2090061444","https://openalex.org/W2092942461","https://openalex.org/W2107881300","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2129141174","https://openalex.org/W2132073183","https://openalex.org/W2135942078","https://openalex.org/W2136433906","https://openalex.org/W2145969515","https://openalex.org/W2146729596","https://openalex.org/W2149668059","https://openalex.org/W2152660559","https://openalex.org/W2162693768","https://openalex.org/W2168924027","https://openalex.org/W2182421051","https://openalex.org/W2276979642","https://openalex.org/W2295731716","https://openalex.org/W2773722012","https://openalex.org/W2798643531","https://openalex.org/W3136699861","https://openalex.org/W6749900284"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"Malicious":[0,87],"Android":[1,18,45,115],"applications":[2],"pose":[3],"serious":[4],"threats":[5],"to":[6,51,82,92],"mobile":[7],"security.":[8],"They":[9],"threaten":[10],"the":[11,53,60,71,93],"data":[12,108],"confidentiality":[13],"and":[14,109],"system":[15,110],"integrity":[16],"on":[17,44,104],"devices.":[19,46],"Monitoring":[20],"runtime":[21],"activities":[22],"serves":[23],"as":[24],"an":[25,114],"important":[26],"technique":[27],"for":[28,39,69],"analyzing":[29,41],"dynamic":[30],"app":[31],"behaviors.":[32],"We":[33,62],"design":[34],"a":[35,64,124],"triggering":[36],"relation":[37],"model":[38,48],"dynamically":[40],"network":[42,57,74,106],"traffic":[43,107],"Our":[47,100],"enables":[49],"one":[50],"infer":[52],"dependency":[54,72,96],"of":[55,73,95],"outbound":[56],"requests":[58,88,131],"from":[59,113,133],"device.":[61],"describe":[63],"new":[65,134],"machine":[66],"learning":[67],"approach":[68],"discovering":[70],"requests.":[75],"These":[76],"request-level":[77],"dependence":[78],"relations":[79],"are":[80,89],"used":[81],"detect":[83],"stealthy":[84],"malware":[85],"activities.":[86],"identified":[90],"due":[91],"lack":[94],"with":[97],"legitimate":[98],"triggers.":[99],"prototype":[101],"is":[102],"evaluated":[103],"14GB":[105],"logs":[111],"collected":[112],"tablet.":[116],"Experimental":[117],"results":[118],"show":[119],"that":[120],"our":[121],"solution":[122],"achieves":[123],"high":[125],"accuracy":[126],"(99.1%)":[127],"in":[128],"detecting":[129],"malicious":[130,135],"sent":[132],"apps.":[136]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}