{"id":"https://openalex.org/W4391558398","doi":"https://doi.org/10.1145/3597503.3623320","title":"A Comprehensive Study of Learning-based Android Malware Detectors under Challenging Environments","display_name":"A Comprehensive Study of Learning-based Android Malware Detectors under Challenging Environments","publication_year":2024,"publication_date":"2024-02-06","ids":{"openalex":"https://openalex.org/W4391558398","doi":"https://doi.org/10.1145/3597503.3623320"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3623320","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3623320","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008919430","display_name":"Cuiying Gao","orcid":"https://orcid.org/0000-0003-0709-3361"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cuiying Gao","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-0709-3361","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101721318","display_name":"G. Huang","orcid":"https://orcid.org/0000-0002-8090-6210"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaozhun Huang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-8090-6210","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027427522","display_name":"Heng Li","orcid":"https://orcid.org/0000-0001-8045-8983"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heng Li","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8045-8983","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101494795","display_name":"Bang Wu","orcid":"https://orcid.org/0009-0003-0575-037X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bang Wu","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0003-0575-037X","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056381213","display_name":"Yueming Wu","orcid":"https://orcid.org/0000-0002-1515-3558"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yueming Wu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-1515-3558","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101957538","display_name":"Wei Yuan","orcid":"https://orcid.org/0000-0002-5867-5364"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Yuan","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-5867-5364","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":13.3488,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.99274177,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7456066608428955},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.732391893863678},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.6792468428611755},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6350604295730591},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6256493926048279},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.6217560172080994},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6043439507484436},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5250014066696167},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49117347598075867},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4461822211742401},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4269043207168579},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35836338996887207},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.35097622871398926},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22161367535591125},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14994114637374878}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7456066608428955},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.732391893863678},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.6792468428611755},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6350604295730591},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6256493926048279},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.6217560172080994},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6043439507484436},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5250014066696167},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49117347598075867},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4461822211742401},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4269043207168579},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35836338996887207},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.35097622871398926},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22161367535591125},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14994114637374878},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597503.3623320","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3623320","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W2070386561","https://openalex.org/W2122672392","https://openalex.org/W2140095007","https://openalex.org/W2407313496","https://openalex.org/W2575599800","https://openalex.org/W2738226240","https://openalex.org/W2791541601","https://openalex.org/W2794652108","https://openalex.org/W2885160263","https://openalex.org/W2891828758","https://openalex.org/W2945645805","https://openalex.org/W2964136807","https://openalex.org/W2964159373","https://openalex.org/W2966342255","https://openalex.org/W2997690675","https://openalex.org/W2998906013","https://openalex.org/W3000239448","https://openalex.org/W3002912819","https://openalex.org/W3004280948","https://openalex.org/W3015481738","https://openalex.org/W3089392154","https://openalex.org/W3095781263","https://openalex.org/W3097192014","https://openalex.org/W3097730806","https://openalex.org/W3112311055","https://openalex.org/W3122252170","https://openalex.org/W3152624640","https://openalex.org/W3161331107","https://openalex.org/W3163939464","https://openalex.org/W3165327389","https://openalex.org/W3177605005","https://openalex.org/W3193105927","https://openalex.org/W3194586437","https://openalex.org/W3208507830","https://openalex.org/W3210231570","https://openalex.org/W3212677680","https://openalex.org/W4220884761","https://openalex.org/W4225471071","https://openalex.org/W4239799938","https://openalex.org/W4255375128","https://openalex.org/W4284678688","https://openalex.org/W4285604261","https://openalex.org/W4307454796","https://openalex.org/W4312707592","https://openalex.org/W4313036228","https://openalex.org/W4385627058"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4360993664","https://openalex.org/W2465235098"],"abstract_inverted_index":{"Recent":[0],"years":[1],"have":[2,26],"witnessed":[3],"the":[4,32,45,83,113,130,140,159,165,177,180,203,217],"proliferation":[5],"of":[6,24,78,87,107,129,142,145,162,167,182,205,219],"learning-based":[7],"Android":[8],"malware":[9,60],"detectors.":[10],"These":[11],"detectors":[12,38,88,103,132,146,181,218],"can":[13,133,214],"be":[14],"categorized":[15],"into":[16],"three":[17,105],"types,":[18,221],"String-based,":[19],"Image-based":[20],"and":[21,58,63,109,121,139,171,195,207,222,229],"Graph-based.":[22],"Most":[23],"them":[25,111],"achieved":[27],"good":[28],"detection":[29,137],"performance":[30,141,160,187,228],"under":[31,89,149],"ideal":[33],"setting.":[34],"In":[35,93],"reality,":[36],"however,":[37],"often":[39],"face":[40],"out-of-distribution":[41],"samples":[42],"due":[43],"to":[44,95,158],"factors":[46,156],"such":[47],"as":[48],"code":[49,117,191],"obfuscation,":[50,118,192],"concept":[51,119,193],"drift":[52,120,194],"(e.g.,":[53],"software":[54],"development":[55],"technique":[56],"evolution":[57],"new":[59],"category":[61],"emergence),":[62],"adversarial":[64],"examples":[65],"(AEs).":[66],"This":[67],"problem":[68],"has":[69],"attracted":[70],"increasing":[71],"attention,":[72],"but":[73],"there":[74],"is":[75],"a":[76],"lack":[77],"comparative":[79],"studies":[80],"that":[81,127],"evaluate":[82,110],"existing":[84],"various":[85,150],"types":[86,106,144,184],"these":[90],"challenging":[91,114,151],"environments.":[92,152],"order":[94],"fill":[96],"this":[97],"gap,":[98],"we":[99,198],"select":[100],"12":[101],"representative":[102],"from":[104,202],"detectors,":[108,163],"in":[112],"scenarios":[115],"involving":[116],"AEs,":[122],"respectively.":[123,209],"Experimental":[124],"results":[125],"reveal":[126],"none":[128],"evaluated":[131],"maintain":[134],"their":[135,227],"ideal-setting":[136],"performance,":[138],"different":[143,183,220],"varies":[147],"significantly":[148],"We":[153,174,210],"identify":[154],"several":[155],"contributing":[157],"deterioration":[161],"including":[164],"limitations":[166],"feature":[168],"extraction":[169],"methods":[170],"learning":[172],"models.":[173],"also":[175],"analyze":[176],"reasons":[178],"why":[179],"show":[185],"significant":[186],"differences":[188],"when":[189],"facing":[190],"AEs.":[196],"Finally,":[197],"provide":[199,223],"practical":[200],"suggestions":[201],"perspectives":[204],"users":[206],"researchers,":[208],"hope":[211],"our":[212],"work":[213],"help":[215],"understand":[216],"guidance":[224],"for":[225],"enhancing":[226],"robustness.":[230]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":23},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}