{"id":"https://openalex.org/W3021426193","doi":"https://doi.org/10.1145/3342195.3387530","title":"Experiences of landing machine learning onto market-scale mobile malware detection","display_name":"Experiences of landing machine learning onto market-scale mobile malware detection","publication_year":2020,"publication_date":"2020-04-15","ids":{"openalex":"https://openalex.org/W3021426193","doi":"https://doi.org/10.1145/3342195.3387530","mag":"3021426193"},"language":"en","primary_location":{"id":"doi:10.1145/3342195.3387530","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3342195.3387530","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifteenth European Conference on Computer Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076665590","display_name":"Liangyi Gong","orcid":"https://orcid.org/0000-0002-9067-8733"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liangyi Gong","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100357922","display_name":"Zhenhua Li","orcid":"https://orcid.org/0000-0001-7286-122X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenhua Li","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029813358","display_name":"Feng Qian","orcid":"https://orcid.org/0000-0002-9437-3021"},"institutions":[{"id":"https://openalex.org/I2800403580","display_name":"University of Minnesota System","ror":"https://ror.org/03grvy078","country_code":"US","type":"education","lineage":["https://openalex.org/I2800403580"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feng Qian","raw_affiliation_strings":["University of Minnesota"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Minnesota","institution_ids":["https://openalex.org/I2800403580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101963062","display_name":"Zifan Zhang","orcid":"https://orcid.org/0000-0003-2268-9876"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zifan Zhang","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063270515","display_name":"Qi Alfred Chen","orcid":"https://orcid.org/0000-0003-0316-9285"},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qi Alfred Chen","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022038961","display_name":"Zhiyun Qian","orcid":"https://orcid.org/0000-0003-1506-2522"},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiyun Qian","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076484228","display_name":"Hao Lin","orcid":"https://orcid.org/0000-0002-9990-5090"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Lin","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101877969","display_name":"Yunhao Liu","orcid":"https://orcid.org/0000-0002-0279-1307"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunhao Liu","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7196695804595947},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.718799889087677},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5887538194656372},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.5797324776649475},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5518895387649536},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4998493194580078},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4391830563545227},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.42685720324516296},{"id":"https://openalex.org/keywords/app-store","display_name":"App store","score":0.42397499084472656},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3961485028266907},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.355493426322937},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.22962430119514465},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1882503628730774}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7196695804595947},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.718799889087677},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5887538194656372},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.5797324776649475},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5518895387649536},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4998493194580078},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4391830563545227},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.42685720324516296},{"id":"https://openalex.org/C2779794324","wikidata":"https://www.wikidata.org/wiki/Q3814081","display_name":"App store","level":2,"score":0.42397499084472656},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3961485028266907},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.355493426322937},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.22962430119514465},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1882503628730774}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3342195.3387530","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3342195.3387530","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifteenth European Conference on Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W6736853","https://openalex.org/W1555168845","https://openalex.org/W1594031697","https://openalex.org/W1912565424","https://openalex.org/W1943233084","https://openalex.org/W1991372594","https://openalex.org/W2002478203","https://openalex.org/W2007857904","https://openalex.org/W2024071684","https://openalex.org/W2025721496","https://openalex.org/W2041276426","https://openalex.org/W2056690037","https://openalex.org/W2060692877","https://openalex.org/W2069442545","https://openalex.org/W2070386561","https://openalex.org/W2092712591","https://openalex.org/W2110501007","https://openalex.org/W2110889728","https://openalex.org/W2114275288","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2163643194","https://openalex.org/W2166743230","https://openalex.org/W2177710037","https://openalex.org/W2291014553","https://openalex.org/W2399891510","https://openalex.org/W2413316079","https://openalex.org/W2529940039","https://openalex.org/W2571682498","https://openalex.org/W2614354826","https://openalex.org/W2618621776","https://openalex.org/W2700054830","https://openalex.org/W2734647941","https://openalex.org/W2781346976","https://openalex.org/W2900275727","https://openalex.org/W2904287723","https://openalex.org/W2951384144","https://openalex.org/W2951413859","https://openalex.org/W2964136807","https://openalex.org/W2966009283","https://openalex.org/W4256148631","https://openalex.org/W4256462051","https://openalex.org/W6843735874"],"related_works":["https://openalex.org/W2538622067","https://openalex.org/W4312334973","https://openalex.org/W2181494682","https://openalex.org/W3114159050","https://openalex.org/W2484248966","https://openalex.org/W4245250093","https://openalex.org/W2609233367","https://openalex.org/W2717179875","https://openalex.org/W4244354662","https://openalex.org/W4249118297"],"abstract_inverted_index":{"App":[0],"markets,":[1],"being":[2],"crucial":[3],"and":[4,103,149,185],"critical":[5],"for":[6,37,156],"today's":[7],"mobile":[8],"ecosystem,":[9],"have":[10,34,46],"also":[11],"become":[12],"a":[13,67,71,161],"natural":[14],"malware":[15,40,52,142],"delivery":[16],"channel":[17],"since":[18],"they":[19],"actually":[20],"\"lend":[21],"credibility\"":[22],"to":[23,43,48,88,115,165],"malicious":[24],"apps.":[25],"In":[26],"the":[27,62,86,110,116,121,154],"past":[28],"decade,":[29],"machine":[30],"learning":[31],"(ML)":[32],"techniques":[33],"been":[35],"explored":[36],"automated,":[38],"robust":[39],"detection.":[41],"Unfortunately,":[42],"date,":[44],"we":[45,65],"yet":[47],"see":[49],"an":[50,140,180,190],"ML-based":[51],"detection":[53,143],"solution":[54],"deployed":[55],"at":[56],"market":[57,75],"scales.":[58],"To":[59],"better":[60],"understand":[61],"real-world":[63],"challenges,":[64],"conduct":[66],"collaborative":[68],"study":[69,83],"with":[70,189],"major":[72],"Android":[73],"app":[74,98],"(T-Market)":[76],"offering":[77],"us":[78],"large-scale":[79],"ground-truth":[80],"data.":[81],"Our":[82],"shows":[84],"that":[85,176],"key":[87],"successfully":[89],"developing":[90],"such":[91,139],"systems":[92],"is":[93],"manifold,":[94],"including":[95],"feature":[96],"selection/engineering,":[97],"analysis":[99],"speed,":[100],"developer":[101],"engagement,":[102],"model":[104],"evolution.":[105],"Failure":[106],"in":[107,137,153],"any":[108],"of":[109,120,183,187,195],"above":[111],"aspects":[112],"would":[113],"lead":[114],"\"wooden":[117],"barrel":[118],"effect\"":[119],"entire":[122],"system.":[123,144],"We":[124,145],"discuss":[125],"our":[126,133,147],"careful":[127],"design":[128,148,178],"choices":[129],"as":[130,132],"well":[131],"first-hand":[134],"deployment":[135],"experiences":[136],"building":[138],"ML-powered":[141],"implement":[146],"examine":[150],"its":[151],"effectiveness":[152],"T-Market":[155],"over":[157],"one":[158],"year,":[159],"using":[160],"single":[162],"commodity":[163],"server":[164],"vet":[166],"~":[167],"10K":[168],"apps":[169],"every":[170],"day.":[171],"The":[172],"evaluation":[173],"results":[174],"show":[175],"this":[177],"achieves":[179],"overall":[181],"precision":[182],"98%":[184],"recall":[186],"96%":[188],"average":[191],"per-app":[192],"scan":[193],"time":[194],"1.3":[196],"minutes.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}