{"id":"https://openalex.org/W3110643640","doi":"https://doi.org/10.1145/3372297.3423341","title":"VAHunt: Warding Off New Repackaged Android Malware in App-Virtualization's Clothing","display_name":"VAHunt: Warding Off New Repackaged Android Malware in App-Virtualization's Clothing","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3110643640","doi":"https://doi.org/10.1145/3372297.3423341","mag":"3110643640"},"language":"en","primary_location":{"id":"doi:10.1145/3372297.3423341","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3423341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011302335","display_name":"Luman Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Luman Shi","raw_affiliation_strings":["Wuhan University, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101420644","display_name":"Jiang Ming","orcid":"https://orcid.org/0000-0001-9682-0502"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiang Ming","raw_affiliation_strings":["University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074852104","display_name":"Jianming Fu","orcid":"https://orcid.org/0000-0002-4639-5824"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianming Fu","raw_affiliation_strings":["Wuhan University, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076621366","display_name":"Guojun Peng","orcid":"https://orcid.org/0000-0001-5731-8958"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guojun Peng","raw_affiliation_strings":["Wuhan University, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087023767","display_name":"Dongpeng Xu","orcid":"https://orcid.org/0000-0001-6596-9101"},"institutions":[{"id":"https://openalex.org/I161057412","display_name":"University of New Hampshire","ror":"https://ror.org/01rmh9n78","country_code":"US","type":"education","lineage":["https://openalex.org/I161057412"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongpeng Xu","raw_affiliation_strings":["University of New Hampshire, Durham, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Hampshire, Durham, NH, USA","institution_ids":["https://openalex.org/I161057412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012071388","display_name":"Kun Gao","orcid":"https://orcid.org/0000-0003-2284-2375"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kun Gao","raw_affiliation_strings":["Wuhan Antiy Information Technology, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan Antiy Information Technology, Wuhan, Hubei, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044086378","display_name":"Xuanchen Pan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xuanchen Pan","raw_affiliation_strings":["Wuhan Antiy Information Technology, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan Antiy Information Technology, Wuhan, Hubei, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"535","last_page":"549"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9785000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7582867741584778},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.7199267745018005},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.7174250483512878},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7016789317131042},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6941836476325989},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6043834090232849},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5487292408943176},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4422615170478821},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.44186490774154663},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.16995015740394592}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7582867741584778},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.7199267745018005},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7174250483512878},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7016789317131042},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6941836476325989},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6043834090232849},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5487292408943176},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4422615170478821},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.44186490774154663},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.16995015740394592},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3372297.3423341","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3423341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W119062149","https://openalex.org/W2032724464","https://openalex.org/W2088479623","https://openalex.org/W2166743230","https://openalex.org/W2264131323","https://openalex.org/W2572070369","https://openalex.org/W2751855490","https://openalex.org/W2792393499","https://openalex.org/W2803999141","https://openalex.org/W2903375180","https://openalex.org/W2939402564","https://openalex.org/W2959478119","https://openalex.org/W2963213304","https://openalex.org/W2969694848","https://openalex.org/W2984951742"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W2462192250","https://openalex.org/W4312234627","https://openalex.org/W3195312353"],"abstract_inverted_index":{"Repackaging":[0],"popular":[1],"benign":[2],"apps":[3],"with":[4],"malicious":[5,77,114],"payload":[6,115],"used":[7],"to":[8,14,28,51,89,106],"be":[9],"the":[10,56,94,104,112,122],"most":[11],"common":[12],"way":[13],"spread":[15],"Android":[16,29,35],"malware.":[17],"Nevertheless,":[18],"since":[19],"2016,":[20],"we":[21],"have":[22],"observed":[23],"an":[24,83],"alarming":[25],"new":[26,44,99],"trend":[27],"ecosystem:":[30],"a":[31,43,49,60],"growing":[32],"number":[33],"of":[34,55,65,67,96,101],"malware":[36],"samples":[37],"abuse":[38],"recent":[39],"app-virtualization":[40,84],"innovation":[41],"as":[42,80],"distribution":[45],"channel.":[46],"App-virtualization":[47],"enables":[48],"user":[50],"run":[52],"multiple":[53],"copies":[54],"same":[57],"app":[58,129],"on":[59],"single":[61],"device,":[62],"and":[63,118],"tens":[64],"millions":[66],"users":[68],"are":[69],"enjoying":[70],"this":[71],"convenience.":[72],"However,":[73],"cybercriminals":[74],"repackage":[75],"various":[76],"APK":[78],"files":[79],"plugins":[81,92],"into":[82],"platform,":[85],"which":[86],"is":[87],"flexible":[88],"launch":[90],"arbitrary":[91],"without":[93],"hassle":[95],"installation.":[97],"This":[98],"style":[100],"repackaging":[102],"gains":[103],"ability":[105],"bypass":[107],"anti-malware":[108],"scanners":[109],"by":[110,126],"hiding":[111],"grafted":[113],"in":[116],"plugins,":[117],"it":[119],"also":[120],"defies":[121],"basic":[123],"premise":[124],"embodied":[125],"existing":[127],"repackaged":[128],"detection":[130],"solutions.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}