{"id":"https://openalex.org/W4394769542","doi":"https://doi.org/10.1145/3597503.3639122","title":"MalCertain: Enhancing Deep Neural Network Based Android Malware Detection by Tackling Prediction Uncertainty","display_name":"MalCertain: Enhancing Deep Neural Network Based Android Malware Detection by Tackling Prediction Uncertainty","publication_year":2024,"publication_date":"2024-04-12","ids":{"openalex":"https://openalex.org/W4394769542","doi":"https://doi.org/10.1145/3597503.3639122"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3639122","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3639122","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061919694","display_name":"Haodong Li","orcid":"https://orcid.org/0009-0004-1649-7549"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haodong Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-1649-7549","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091767796","display_name":"Guosheng Xu","orcid":"https://orcid.org/0000-0002-3310-926X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guosheng Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-3310-926X","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091066922","display_name":"Liu Wang","orcid":"https://orcid.org/0000-0002-3982-4993"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liu Wang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3982-4993","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012621594","display_name":"Xusheng Xiao","orcid":"https://orcid.org/0000-0003-4797-4294"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xusheng Xiao","raw_affiliation_strings":["Arizona State University, Tempe, Arizona, USA"],"raw_orcid":"https://orcid.org/0000-0003-4797-4294","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, Arizona, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400376","display_name":"Xiapu Luo","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiapu Luo","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-9082-3208","affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102002679","display_name":"Guoai Xu","orcid":"https://orcid.org/0000-0002-9582-0698"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoai Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-9582-0698","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I4210157617","display_name":"Huazhong University of Science and Technology Hospital","ror":"https://ror.org/05f9vfg11","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210157617"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Hubei, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Hubei, China","institution_ids":["https://openalex.org/I4210157617"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.856631875038147},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7690401077270508},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.7413381934165955},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.681585431098938},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6677608489990234},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6121423244476318},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5768823027610779},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5593339800834656},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.49779796600341797},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4744899272918701},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3342099189758301},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21123692393302917}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.856631875038147},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7690401077270508},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.7413381934165955},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.681585431098938},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6677608489990234},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6121423244476318},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5768823027610779},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5593339800834656},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.49779796600341797},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4744899272918701},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3342099189758301},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21123692393302917},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597503.3639122","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3639122","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W71499226","https://openalex.org/W1677182931","https://openalex.org/W1964110400","https://openalex.org/W1977792424","https://openalex.org/W2041276426","https://openalex.org/W2047229728","https://openalex.org/W2054888947","https://openalex.org/W2112796928","https://openalex.org/W2122672392","https://openalex.org/W2127723417","https://openalex.org/W2168103835","https://openalex.org/W2184344276","https://openalex.org/W2288383743","https://openalex.org/W2407313496","https://openalex.org/W2599823825","https://openalex.org/W2733922298","https://openalex.org/W2744095836","https://openalex.org/W2755632345","https://openalex.org/W2885070483","https://openalex.org/W2886064601","https://openalex.org/W2897619937","https://openalex.org/W2903941123","https://openalex.org/W2931858311","https://openalex.org/W2953461273","https://openalex.org/W2963401022","https://openalex.org/W2963855133","https://openalex.org/W2968104655","https://openalex.org/W2979774094","https://openalex.org/W2984951742","https://openalex.org/W3015248254","https://openalex.org/W3036847733","https://openalex.org/W3038549562","https://openalex.org/W3091388282","https://openalex.org/W3104141960","https://openalex.org/W3198941561","https://openalex.org/W4309617586","https://openalex.org/W4394769542","https://openalex.org/W6602928593","https://openalex.org/W6686165911"],"related_works":["https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W2311926078","https://openalex.org/W3199551743","https://openalex.org/W4281384336","https://openalex.org/W3195586271","https://openalex.org/W2782775281","https://openalex.org/W2781346976","https://openalex.org/W4312234627","https://openalex.org/W2899262475"],"abstract_inverted_index":{"The":[0],"long-lasting":[1],"Android":[2,39,57,144,222,236],"malware":[3,11,17,40,58,136,145,223,237],"threat":[4],"has":[5],"attracted":[6],"significant":[7,45],"research":[8,244],"efforts":[9],"in":[10,94,103,115,135],"detection.":[12],"In":[13,119],"particular,":[14],"by":[15,178,189,225,239],"modeling":[16],"detection":[18,41,49,137,146,224,232],"as":[19,52,56,91],"a":[20,151,165,171],"classification":[21],"problem,":[22],"machine":[23],"learning":[24],"based":[25,32],"approaches,":[26,33],"especially":[27],"deep":[28],"neural":[29],"network":[30],"(DNN)":[31],"are":[34],"increasingly":[35],"being":[36],"used":[37,79],"for":[38,221],"and":[42,61,100,138,228],"have":[43],"achieved":[44],"improvements":[46],"over":[47],"other":[48],"approaches":[50],"such":[51],"signature-based":[53],"approaches.":[54],"However,":[55],"evolve":[59],"rapidly":[60],"the":[62,92,95,101,104,116,124,129,179,185,190,195,199,202,214,217,231,248],"presence":[63],"of":[64,132,201,216,234],"adversarial":[65,235],"samples,":[66],"DNN":[67,133,152,180,203,219],"models":[68,134,220],"trained":[69],"on":[70,247],"early":[71],"constructed":[72],"samples":[73,238],"often":[74],"yield":[75],"poor":[76],"decisions":[77],"when":[78],"to":[80,127,142,154,163,193,241,255],"detect":[81],"newly":[82],"emerging":[83],"samples.":[84],"Fundamentally,":[85],"this":[86,120],"phenomenon":[87],"can":[88],"be":[89],"summarized":[90],"uncertainly":[93],"data":[96],"(noise":[97],"or":[98,175],"randomness)":[99],"weakness":[102],"training":[105,108,150],"process":[106],"(insufficient":[107],"data).":[109],"Overlooking":[110],"these":[111,140],"uncertainties":[112],"poses":[113],"risks":[114],"model":[117,153],"predictions.":[118],"paper,":[121],"we":[122,157],"take":[123],"first":[125],"step":[126],"estimate":[128],"prediction":[130,196,253],"uncertainty":[131,160,187,254],"leverage":[139,184],"estimates":[141],"enhance":[143],"techniques.":[147],"Specifically,":[148],"besides":[149],"predict":[155],"malware,":[156],"employ":[158],"several":[159],"estimation":[161],"methods":[162],"train":[164],"Correction":[166,191],"Model":[167,192],"that":[168,208,251],"determines":[169],"whether":[170],"sample":[172],"is":[173],"correctly":[174],"incorrectly":[176],"predicted":[177],"model.":[181,204],"We":[182],"then":[183],"estimated":[186],"output":[188],"correct":[194],"results,":[197],"improving":[198],"accuracy":[200,215],"Experimental":[205],"results":[206],"show":[207],"our":[209],"proposed":[210],"MalCertain":[211],"effectively":[212],"improves":[213,230],"underlying":[218],"around":[226],"21%":[227],"significantly":[229],"effectiveness":[233],"up":[240],"94.38%.":[242],"Our":[243],"sheds":[245],"light":[246],"promising":[249],"direction":[250],"leverages":[252],"improve":[256],"prediction-based":[257],"software":[258],"engineering":[259],"tasks.":[260]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}