{"id":"https://openalex.org/W4320519560","doi":"https://doi.org/10.1145/3572864.3580338","title":"FA 3","display_name":"FA 3","publication_year":2023,"publication_date":"2023-02-13","ids":{"openalex":"https://openalex.org/W4320519560","doi":"https://doi.org/10.1145/3572864.3580338"},"language":"en","primary_location":{"id":"doi:10.1145/3572864.3580338","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3572864.3580338","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3572864.3580338","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Workshop on Mobile Computing Systems and Applications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3572864.3580338","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069605605","display_name":"Yan Lin","orcid":"https://orcid.org/0000-0003-4419-9050"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Lin","raw_affiliation_strings":["Jinan University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102678153","display_name":"Joshua Wong","orcid":null},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Joshua Wong","raw_affiliation_strings":["Singapore Management University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079108949","display_name":"Debin Gao","orcid":"https://orcid.org/0000-0001-9412-9961"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Debin Gao","raw_affiliation_strings":["Singapore Management University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4618,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.53905519,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"74","last_page":"80"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7946871519088745},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6788015961647034},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6430239677429199},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6282082796096802},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.6107348799705505},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5913096070289612},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.5838179588317871},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5668424963951111},{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.5599415302276611},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5319552421569824},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15698593854904175}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7946871519088745},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6788015961647034},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6430239677429199},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6282082796096802},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.6107348799705505},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5913096070289612},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.5838179588317871},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5668424963951111},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.5599415302276611},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5319552421569824},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15698593854904175}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3572864.3580338","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3572864.3580338","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3572864.3580338","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Workshop on Mobile Computing Systems and Applications","raw_type":"proceedings-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-8779","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/7776","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1145/3572864.3580338","raw_type":"Conference Proceeding Article"}],"best_oa_location":{"id":"doi:10.1145/3572864.3580338","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3572864.3580338","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3572864.3580338","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Workshop on Mobile Computing Systems and Applications","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320328656","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4320519560.pdf","grobid_xml":"https://content.openalex.org/works/W4320519560.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1496151516","https://openalex.org/W1849042743","https://openalex.org/W1865564993","https://openalex.org/W2046185165","https://openalex.org/W2060692877","https://openalex.org/W2070386561","https://openalex.org/W2071672346","https://openalex.org/W2090534521","https://openalex.org/W2101800210","https://openalex.org/W2106349977","https://openalex.org/W2156858199","https://openalex.org/W2264131323","https://openalex.org/W2293796484","https://openalex.org/W2401561631","https://openalex.org/W2505939533","https://openalex.org/W2514683958","https://openalex.org/W2533311740","https://openalex.org/W2563273224","https://openalex.org/W2577540292","https://openalex.org/W2617476279","https://openalex.org/W2752052041","https://openalex.org/W2890664869","https://openalex.org/W2914982603","https://openalex.org/W3005977564","https://openalex.org/W3153386443","https://openalex.org/W4200307116","https://openalex.org/W6631155369"],"related_works":["https://openalex.org/W2963856074","https://openalex.org/W2791844455","https://openalex.org/W4285507391","https://openalex.org/W3107556205","https://openalex.org/W2610659201","https://openalex.org/W2969365378","https://openalex.org/W2765174411","https://openalex.org/W2067547021","https://openalex.org/W2805262980","https://openalex.org/W4234891089"],"abstract_inverted_index":{"Understanding":[0],"Android":[1,57,75,105],"applications'":[2],"behavior":[3],"is":[4],"essential":[5],"to":[6,19,37,80,108],"many":[7,14],"security":[8],"applications,":[9],"e.g.,":[10],"malware":[11,147],"analysis.":[12],"Although":[13],"systems":[15],"have":[16],"been":[17],"proposed":[18],"perform":[20],"such":[21],"dynamic":[22],"analysis,":[23],"they":[24],"are":[25],"limited":[26],"by":[27,68],"their":[28,155],"applicable":[29,40,45],"analysis":[30,66],"environment":[31],"(on":[32],"device":[33],"vs.":[34,43],"emulator),":[35],"transparency":[36],"subject":[38],"apps,":[39],"runtime":[41],"(Dalvik":[42],"ART),":[44],"system":[46,106],"stack,":[47],"or":[48,119],"granularity.":[49],"In":[50],"this":[51],"paper,":[52],"we":[53],"propose":[54],"FA3":[55,95,135,143],"(Fine-Grained":[56],"Application":[58],"Analysis),":[59],"a":[60,151],"novel":[61],"on-device,":[62],"non-invasive,":[63],"and":[64,78,84,91,124,149],"fine-grained":[65,112],"platform":[67],"leveraging":[69],"existing":[70],"profiling":[71],"mechanisms":[72],"in":[73,100],"the":[74,104],"Runtime":[76],"(ART)":[77],"kernel":[79],"inspect":[81],"method":[82],"invocations":[83],"control-flow":[85],"transfers":[86],"for":[87],"both":[88],"Java":[89],"methods":[90],"third-party":[92],"native":[93],"libraries.":[94],"embeds":[96],"its":[97],"tracing":[98],"capability":[99],"multiple":[101],"layers":[102],"of":[103,122,154],"stack":[107],"not":[109],"only":[110],"capture":[111],"application":[113],"behaviors":[114],"but":[115],"ensure":[116],"even":[117],"non-conventional":[118],"malicious":[120],"tricks":[121],"loading":[123],"executing":[125],"OAT/ELF":[126],"binaries":[127],"cannot":[128],"escape":[129],"our":[130],"monitoring.":[131],"We":[132],"carefully":[133],"evaluated":[134],"using":[136],"real-world":[137],"malware.":[138],"Experimental":[139],"results":[140],"showed":[141],"that":[142],"successfully":[144],"analyzes":[145],"sophisticated":[146],"samples":[148],"provides":[150],"comprehensive":[152],"view":[153],"behavior.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-25T07:29:55.448023","created_date":"2025-10-10T00:00:00"}