{"id":"https://openalex.org/W4401361439","doi":"https://doi.org/10.1145/3675741.3675745","title":"COMEX: Deeply Observing Application Behavior on Real Android Devices","display_name":"COMEX: Deeply Observing Application Behavior on Real Android Devices","publication_year":2024,"publication_date":"2024-08-06","ids":{"openalex":"https://openalex.org/W4401361439","doi":"https://doi.org/10.1145/3675741.3675745"},"language":"en","primary_location":{"id":"doi:10.1145/3675741.3675745","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3675741.3675745","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th Cyber Security Experimentation and Test Workshop","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092963955","display_name":"Zeya Umayya","orcid":"https://orcid.org/0009-0001-4863-6636"},"institutions":[{"id":"https://openalex.org/I119939252","display_name":"Indraprastha Institute of Information Technology Delhi","ror":"https://ror.org/03vfp4g33","country_code":"IN","type":"education","lineage":["https://openalex.org/I119939252"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Zeya Umayya","raw_affiliation_strings":["IIITD, India"],"raw_orcid":"https://orcid.org/0009-0001-4863-6636","affiliations":[{"raw_affiliation_string":"IIITD, India","institution_ids":["https://openalex.org/I119939252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037025553","display_name":"D. S. Malik","orcid":"https://orcid.org/0009-0001-9541-2184"},"institutions":[{"id":"https://openalex.org/I119939252","display_name":"Indraprastha Institute of Information Technology Delhi","ror":"https://ror.org/03vfp4g33","country_code":"IN","type":"education","lineage":["https://openalex.org/I119939252"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Dhruv Malik","raw_affiliation_strings":["IIITD, India"],"raw_orcid":"https://orcid.org/0009-0001-9541-2184","affiliations":[{"raw_affiliation_string":"IIITD, India","institution_ids":["https://openalex.org/I119939252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113322681","display_name":"Arpit Nandi","orcid":null},"institutions":[{"id":"https://openalex.org/I119939252","display_name":"Indraprastha Institute of Information Technology Delhi","ror":"https://ror.org/03vfp4g33","country_code":"IN","type":"education","lineage":["https://openalex.org/I119939252"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Arpit Nandi","raw_affiliation_strings":["IIITD, India"],"raw_orcid":"https://orcid.org/0009-0006-8873-3648","affiliations":[{"raw_affiliation_string":"IIITD, India","institution_ids":["https://openalex.org/I119939252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101059249","display_name":"Akshat Kumar","orcid":"https://orcid.org/0009-0003-9157-2505"},"institutions":[{"id":"https://openalex.org/I119939252","display_name":"Indraprastha Institute of Information Technology Delhi","ror":"https://ror.org/03vfp4g33","country_code":"IN","type":"education","lineage":["https://openalex.org/I119939252"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Akshat Kumar","raw_affiliation_strings":["IIITD, India"],"raw_orcid":"https://orcid.org/0009-0003-9157-2505","affiliations":[{"raw_affiliation_string":"IIITD, India","institution_ids":["https://openalex.org/I119939252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005095928","display_name":"Sareena Karapoola","orcid":"https://orcid.org/0000-0003-0756-678X"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sareena Karapoola","raw_affiliation_strings":["IIT Madras, India"],"raw_orcid":"https://orcid.org/0000-0003-0756-678X","affiliations":[{"raw_affiliation_string":"IIT Madras, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079016401","display_name":"Sambuddho Chakravarty","orcid":"https://orcid.org/0009-0005-0955-3378"},"institutions":[{"id":"https://openalex.org/I119939252","display_name":"Indraprastha Institute of Information Technology Delhi","ror":"https://ror.org/03vfp4g33","country_code":"IN","type":"education","lineage":["https://openalex.org/I119939252"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sambuddho Chakravarty","raw_affiliation_strings":["IIITD, India"],"raw_orcid":"https://orcid.org/0009-0005-0955-3378","affiliations":[{"raw_affiliation_string":"IIITD, India","institution_ids":["https://openalex.org/I119939252"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12443691,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"100","last_page":"109"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7184290885925293},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6602829694747925},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3582087755203247},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3335511386394501},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30341827869415283}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7184290885925293},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6602829694747925},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3582087755203247},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3335511386394501},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30341827869415283}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3675741.3675745","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3675741.3675745","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th Cyber Security Experimentation and Test Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1775772884","https://openalex.org/W1964241047","https://openalex.org/W2114996745","https://openalex.org/W2407313496","https://openalex.org/W2487124337","https://openalex.org/W2603160474","https://openalex.org/W2913857451","https://openalex.org/W3006711782","https://openalex.org/W3007246675","https://openalex.org/W3044866801","https://openalex.org/W3091890513","https://openalex.org/W3111533025","https://openalex.org/W3120069848","https://openalex.org/W3120672518","https://openalex.org/W3137832402","https://openalex.org/W3161799213","https://openalex.org/W3187102702","https://openalex.org/W3200506265","https://openalex.org/W4225299277","https://openalex.org/W4293637555","https://openalex.org/W4304693595","https://openalex.org/W4306406229","https://openalex.org/W4306406279","https://openalex.org/W4323240401","https://openalex.org/W4385267221","https://openalex.org/W4389077372"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W1565885216"],"abstract_inverted_index":{"Apart":[0],"from":[1],"becoming":[2],"an":[3,79,114],"essential":[4],"part":[5],"of":[6,54,68,113,134,170],"our":[7],"daily":[8],"lives,":[9],"mobile":[10,118],"applications":[11,24],"add":[12],"to":[13,37,92,107,147,214],"the":[14,48,69,84,208],"threat":[15],"landscape":[16],"drastically.":[17],"The":[18],"difference":[19],"between":[20],"benign":[21,171,180],"and":[22,72,101,139,155,172,181,193,199,211],"malicious":[23],"keeps":[25],"blurring.":[26],"Analyzing":[27],"APKs":[28,44,135,166,174],"dynamically":[29],"becomes":[30],"critical":[31],"as":[32,152],"APK":[33,115],"developers":[34],"employ":[35],"techniques":[36],"evade":[38],"static":[39],"code":[40,210],"inspections.":[41],"However,":[42],"these":[43],"can":[45,64],"often":[46],"bypass":[47,73],"test":[49,70,85],"environment":[50,71,86],"e.g.,":[51],"in":[52,90,136,157],"case":[53],"emulators.":[55],"Also,":[56],"there":[57],"are":[58],"several":[59],"ways":[60],"with":[61,88],"which":[62,175],"they":[63],"even":[65],"detect":[66],"instrumentation":[67],"them.":[74],"Thus,":[75],"we":[76,206],"present":[77],"COMEX,":[78],"Android":[80],"testbed":[81],"that":[82],"modifies":[83],"minimally":[87],"checks":[89],"place":[91],"prevent":[93],"evasion.":[94],"It":[95],"has":[96],"two":[97],"parts":[98],"\u2013":[99],"AXMod":[100,103],"DCoP.":[102],"module":[104],"is":[105],"designed":[106],"perform":[108],"a":[109,121,131,137,158,164],"detailed":[110],"dynamic":[111,127],"analysis":[112,128,212],"on":[116],"real":[117],"devices.":[119],"DCoP,":[120],"data":[122,129,145],"collection":[123],"pipeline,":[124],"generates":[125],"raw":[126,144],"for":[130],"given":[132],"set":[133],"balanced":[138],"efficient":[140],"manner.":[141],"COMEX":[142],"provides":[143],"related":[146],"all":[148],"possible":[149],"categories,":[150],"such":[151],"system,":[153],"network,":[154],"hardware":[156],"time-stamped":[159],"format.":[160],"We":[161],"analyzed":[162],"approximately":[163],"thousand":[165],"including":[167],"equal":[168],"number":[169],"malware":[173,184],"gives":[176],"us":[177],"\u2248":[178,182,187,194,200],"72M":[179],"70M":[183],"system":[185],"calls,":[186],"180k":[188],"packets":[189],"exchanged":[190],"over":[191],"network":[192],"545k":[195],"times":[196],"files":[197],"accessed":[198],"30M":[201],"total":[202],"binder":[203],"transactions.":[204],"Finally,":[205],"publish":[207],"source":[209],"scripts":[213],"aid":[215],"further":[216],"studies.":[217]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}