{"id":"https://openalex.org/W3185024416","doi":"https://doi.org/10.1145/3465361","title":"Maat","display_name":"Maat","publication_year":2021,"publication_date":"2021-07-19","ids":{"openalex":"https://openalex.org/W3185024416","doi":"https://doi.org/10.1145/3465361","mag":"3185024416"},"language":"en","primary_location":{"id":"doi:10.1145/3465361","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465361","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057398076","display_name":"Aleieldin Salem","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Aleieldin Salem","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010742852","display_name":"Sebastian B\u0103nescu","orcid":"https://orcid.org/0000-0003-0771-4826"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sebastian Banescu","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002011805","display_name":"Alexander Pretschner","orcid":"https://orcid.org/0000-0002-5573-1201"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Pretschner","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I62916508"],"apc_list":null,"apc_paid":null,"fwci":4.7846,"has_fulltext":false,"cited_by_count":44,"citation_normalized_percentile":{"value":0.95883534,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"24","issue":"4","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9840999841690063,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.742415189743042},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.591956615447998},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5638667941093445},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5486775040626526},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4925409257411957},{"id":"https://openalex.org/keywords/standardization","display_name":"Standardization","score":0.4201037287712097},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32812437415122986},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12849000096321106},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08862251043319702}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.742415189743042},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.591956615447998},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5638667941093445},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5486775040626526},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4925409257411957},{"id":"https://openalex.org/C188087704","wikidata":"https://www.wikidata.org/wiki/Q369577","display_name":"Standardization","level":2,"score":0.4201037287712097},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32812437415122986},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12849000096321106},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08862251043319702}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3465361","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465361","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"display_name":"Responsible consumption and production","id":"https://metadata.un.org/sdg/12"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W79549259","https://openalex.org/W85077918","https://openalex.org/W94487276","https://openalex.org/W2007857904","https://openalex.org/W2016433328","https://openalex.org/W2041575831","https://openalex.org/W2048009404","https://openalex.org/W2064038877","https://openalex.org/W2080157505","https://openalex.org/W2121746769","https://openalex.org/W2125011234","https://openalex.org/W2291014553","https://openalex.org/W2407313496","https://openalex.org/W2464629196","https://openalex.org/W2471986960","https://openalex.org/W2514847810","https://openalex.org/W2572070369","https://openalex.org/W2575599800","https://openalex.org/W2603160474","https://openalex.org/W2620844046","https://openalex.org/W2625739732","https://openalex.org/W2888144934","https://openalex.org/W2897615540","https://openalex.org/W2900501704","https://openalex.org/W2980720901","https://openalex.org/W2999309192"],"related_works":["https://openalex.org/W2378767206","https://openalex.org/W1540871478","https://openalex.org/W328308450","https://openalex.org/W282641168","https://openalex.org/W2376963063","https://openalex.org/W2066396794","https://openalex.org/W2366734808","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W4312334973"],"abstract_inverted_index":{"The":[0],"malware":[1],"analysis":[2],"and":[3,91,116,178,188],"detection":[4,195],"research":[5],"community":[6],"relies":[7],"on":[8,18,32,183],"the":[9,19,37,46,70,79,84,89,94,135,149],"online":[10],"platform":[11],"VirusTotal":[12,87,136,185],"to":[13,34,45,76,191],"label":[14,180],"Android":[15,141],"apps":[16,142,181,204],"based":[17,182],"scan":[20,38,137,186],"results":[21,39],"of":[22,48,69,82,93,114,139,151],"around":[23],"60":[24],"antiviral":[25],"scanners.":[26],"Unfortunately,":[27],"there":[28],"are":[29,198],"no":[30],"standards":[31],"how":[33],"best":[35],"interpret":[36],"acquired":[40],"from":[41],"VirusTotal,":[42],"which":[43,129],"leads":[44],"utilization":[47],"different":[49],"threshold-based":[50,131,166,207],"labeling":[51,127,132,159],"strategies":[52,160,174],"(e.g.,":[53],"if":[54],"10":[55],"or":[56],"more":[57,199],"scanners":[58,95],"deem":[59],"an":[60],"app":[61],"malicious,":[62],"it":[63,96],"is":[64],"considered":[65],"malicious).":[66],"While":[67],"some":[68],"utilized":[71],"thresholds":[72,100],"may":[73],"be":[74],"able":[75],"accurately":[77,177],"approximate":[78],"ground":[80],"truths":[81],"apps,":[83],"fact":[85],"that":[86,110,143,170,197],"changes":[88],"set":[90],"versions":[92],"uses":[97],"makes":[98],"such":[99,171],"unsustainable":[101],"over":[102],"time.":[103],"We":[104,168],"implemented":[105],"a":[106,121],"method,":[107],"Maat":[108,152],",":[109],"tackles":[111],"these":[112],"issues":[113],"standardization":[115],"sustainability":[117],"by":[118,161],"automatically":[119],"generating":[120],"Machine":[122,154],"Learning":[123,155],"(":[124,156],"ML":[125,157,172,193],")-based":[126,158],"scheme,":[128],"outperforms":[130],"strategies.":[133,167],"Using":[134],"reports":[138],"53K":[140],"span":[144],"1":[145],"year,":[146],"we":[147],"evaluated":[148],"applicability":[150],"\u2019s":[153],"comparing":[162],"their":[163,184,206],"performance":[164],"against":[165],"found":[169],"-based":[173,194],"(a)":[175],"can":[176],"consistently":[179],"reports,":[187],"(b)":[189],"contribute":[190],"training":[192],"methods":[196],"effective":[200],"at":[201],"classifying":[202],"out-of-sample":[203],"than":[205],"counterparts.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2021-08-02T00:00:00"}