{"id":"https://openalex.org/W4403520170","doi":"https://doi.org/10.1145/3691620.3695280","title":"Android Malware Family Labeling: Perspectives from the Industry","display_name":"Android Malware Family Labeling: Perspectives from the Industry","publication_year":2024,"publication_date":"2024-10-18","ids":{"openalex":"https://openalex.org/W4403520170","doi":"https://doi.org/10.1145/3691620.3695280"},"language":"en","primary_location":{"id":"doi:10.1145/3691620.3695280","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691620.3695280","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091066922","display_name":"Liu Wang","orcid":"https://orcid.org/0000-0002-3982-4993"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Liu Wang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3982-4993","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100375823","display_name":"Tao Zhang","orcid":"https://orcid.org/0000-0002-6272-4069"},"institutions":[{"id":"https://openalex.org/I111950717","display_name":"Macau University of Science and Technology","ror":"https://ror.org/03jqs2n27","country_code":"MO","type":"education","lineage":["https://openalex.org/I111950717","https://openalex.org/I4391767947"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Tao Zhang","raw_affiliation_strings":["Macau University of Science and Technology, Macau, China"],"raw_orcid":"https://orcid.org/0000-0002-6272-4069","affiliations":[{"raw_affiliation_string":"Macau University of Science and Technology, Macau, China","institution_ids":["https://openalex.org/I111950717"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055561370","display_name":"Haitao Xu","orcid":"https://orcid.org/0000-0002-0353-3879"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haitao Xu","raw_affiliation_strings":["Zhejiang University, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0002-0353-3879","affiliations":[{"raw_affiliation_string":"Zhejiang University, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017417068","display_name":"Guozhu Meng","orcid":"https://orcid.org/0000-0001-6388-2571"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guozhu Meng","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6388-2571","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001126748","display_name":"Peiming Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peiming Gao","raw_affiliation_strings":["Independent Researcher, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-8255-7926","affiliations":[{"raw_affiliation_string":"Independent Researcher, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chen Wei","orcid":"https://orcid.org/0009-0006-6312-8601"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen Wei","raw_affiliation_strings":["Independent Researcher, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0006-6312-8601","affiliations":[{"raw_affiliation_string":"Independent Researcher, Hangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100657842","display_name":"Yi Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Wang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1321-4035","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5091066922"],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":0.3288,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.55622117,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"2176","last_page":"2186"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9621999859809875,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.789539098739624},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7665072679519653},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6109277606010437},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.586555004119873},{"id":"https://openalex.org/keywords/android-application","display_name":"Android application","score":0.42127999663352966},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41594773530960083},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.36429354548454285}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.789539098739624},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7665072679519653},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6109277606010437},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.586555004119873},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.42127999663352966},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41594773530960083},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.36429354548454285}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3691620.3695280","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691620.3695280","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2000159976","https://openalex.org/W2122672392","https://openalex.org/W2123519624","https://openalex.org/W2125011234","https://openalex.org/W2168103835","https://openalex.org/W2407313496","https://openalex.org/W2487124337","https://openalex.org/W2514847810","https://openalex.org/W2560361988","https://openalex.org/W2603160474","https://openalex.org/W2625739732","https://openalex.org/W2794510434","https://openalex.org/W2907372969","https://openalex.org/W2922089394","https://openalex.org/W2958631251","https://openalex.org/W2980720901","https://openalex.org/W2981360604","https://openalex.org/W3014829096","https://openalex.org/W3089392154","https://openalex.org/W3097730806","https://openalex.org/W3111533025","https://openalex.org/W3129307068","https://openalex.org/W4210345192","https://openalex.org/W4284693098","https://openalex.org/W4309617586"],"related_works":["https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W1565885216","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"Labeling":[0],"and":[1,14,29,57,71,112,142,162,223],"classifying":[2],"Android":[3,129],"malware":[4,21,51,130,231],"is":[5],"important":[6],"for":[7,49,226],"identifying":[8],"new":[9],"threats,":[10],"triaging":[11],"security":[12,106],"incidents,":[13],"demystifying":[15],"evasion":[16],"techniques.":[17],"To":[18],"automate":[19],"the":[20,121,152,188,207],"classification":[22,52],"pipeline,":[23],"state-of-the-art":[24],"tools":[25,45],"such":[26,110,163],"as":[27],"AVClass":[28],"Euphony":[30],"unify":[31],"raw":[32],"labels":[33],"from":[34,134],"commercial":[35],"antivirus":[36],"vendors":[37],"(i.e.,":[38],"VirusTotal)":[39],"to":[40,88,213,236],"produce":[41],"family":[42,92,131,232],"labels.":[43],"These":[44],"are":[46],"widely":[47],"used":[48],"automatic":[50,128,230],"in":[53,65,91,180,199],"both":[54,221],"academic":[55],"research":[56],"industry":[58,208,224],"practice.":[59],"However,":[60],"they":[61],"face":[62],"significant":[63],"limitations":[64],"real-world":[66],"industrial":[67,78],"scenarios":[68],"with":[69,160],"numerous":[70],"dynamically":[72],"changing":[73],"samples.":[74],"For":[75],"example,":[76],"our":[77],"practices":[79],"revealed":[80],"that":[81,95,151],"VirusTotal's":[82],"results":[83,94,154],"change":[84],"over":[85],"time,":[86,161],"leading":[87],"temporal":[89],"inconsistencies":[90],"labeling":[93,132,153,181,202,233],"rely":[96],"on":[97,145,172],"label":[98,138],"unification,":[99],"which":[100,204],"can":[101,165],"severely":[102],"impact":[103],"a":[104,146,194],"company's":[105],"posture.":[107],"Despite":[108],"this,":[109],"issues":[111],"challenges":[113],"remain":[114],"understudied.":[115],"In":[116],"this":[117],"paper,":[118],"we":[119,149,192],"present":[120],"first":[122],"systematic":[123],"measurement":[124],"study":[125],"of":[126,155,229],"existing":[127],"systems":[133,157,185],"various":[135],"aspects,":[136],"including":[137],"dynamics,":[139],"consistency,":[140],"reliability,":[141],"etc.":[143],"Based":[144],"large-scale":[147],"dataset,":[148],"validate":[150],"these":[156,200,215],"do":[158],"evolve":[159],"evolution":[164],"introduce":[166],"bias":[167],"into":[168],"many":[169],"previous":[170],"studies":[171],"performance":[173],"assessments.":[174],"We":[175],"also":[176],"reveal":[177],"substantial":[178],"divergence":[179],"decisions":[182],"across":[183],"different":[184],"when":[186],"given":[187],"same":[189],"input.":[190],"Besides,":[191],"identify":[193],"disclosure":[195],"priority":[196],"among":[197],"families":[198],"systems'":[201],"processes,":[203],"could":[205,219],"threaten":[206],"by":[209],"allowing":[210],"malicious":[211],"actors":[212],"exploit":[214],"discrepancies.":[216],"Our":[217],"findings":[218],"benefit":[220],"researchers":[222],"practitioners":[225],"further":[227],"refinement":[228],"systems,":[234],"contributing":[235],"their":[237],"practical":[238],"applications.":[239]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}