{"id":"https://openalex.org/W4411449783","doi":"https://doi.org/10.1145/3715769","title":"Mitigating Emergent Malware Label Noise in DNN-Based Android Malware Detection","display_name":"Mitigating Emergent Malware Label Noise in DNN-Based Android Malware Detection","publication_year":2025,"publication_date":"2025-06-19","ids":{"openalex":"https://openalex.org/W4411449783","doi":"https://doi.org/10.1145/3715769"},"language":"en","primary_location":{"id":"doi:10.1145/3715769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715769","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3715769","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061919694","display_name":"Haodong Li","orcid":"https://orcid.org/0009-0004-1649-7549"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haodong Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-1649-7549","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036194526","display_name":"Xiao Cheng","orcid":"https://orcid.org/0000-0001-5456-3827"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiao Cheng","raw_affiliation_strings":["University of New South Wales, Sydney, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5456-3827","affiliations":[{"raw_affiliation_string":"University of New South Wales, Sydney, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062783841","display_name":"Guohan Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guohan Zhang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-1355-2324","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091767796","display_name":"Guosheng Xu","orcid":"https://orcid.org/0000-0002-3310-926X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guosheng Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-3310-926X","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102002679","display_name":"Guoai Xu","orcid":"https://orcid.org/0000-0002-9582-0698"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoai Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-9582-0698","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8049,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.85011077,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"2","issue":"FSE","first_page":"1136","last_page":"1159"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8102712631225586},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7711094617843628},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6411733627319336},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5892564058303833},{"id":"https://openalex.org/keywords/noise-reduction","display_name":"Noise reduction","score":0.5801199674606323},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5703399777412415},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5621210932731628},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.4203302562236786},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3950236439704895},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39451757073402405},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16725370287895203}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8102712631225586},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7711094617843628},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6411733627319336},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5892564058303833},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.5801199674606323},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5703399777412415},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5621210932731628},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.4203302562236786},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3950236439704895},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39451757073402405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16725370287895203},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3715769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715769","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3715769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715769","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5799999833106995}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":75,"referenced_works":["https://openalex.org/W71499226","https://openalex.org/W1493009343","https://openalex.org/W1666942233","https://openalex.org/W1965555277","https://openalex.org/W2026973889","https://openalex.org/W2048679005","https://openalex.org/W2092942461","https://openalex.org/W2122646361","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2167460663","https://openalex.org/W2216498498","https://openalex.org/W2407313496","https://openalex.org/W2407929282","https://openalex.org/W2511641045","https://openalex.org/W2572070369","https://openalex.org/W2586845402","https://openalex.org/W2599823825","https://openalex.org/W2604348044","https://openalex.org/W2620844046","https://openalex.org/W2740924709","https://openalex.org/W2744095836","https://openalex.org/W2755632345","https://openalex.org/W2765653036","https://openalex.org/W2772660489","https://openalex.org/W2773798826","https://openalex.org/W2789983203","https://openalex.org/W2792393499","https://openalex.org/W2792736988","https://openalex.org/W2885070483","https://openalex.org/W2897615540","https://openalex.org/W2897812226","https://openalex.org/W2911233971","https://openalex.org/W2917878349","https://openalex.org/W2962909855","https://openalex.org/W2984666763","https://openalex.org/W2984708253","https://openalex.org/W3000239448","https://openalex.org/W3025671632","https://openalex.org/W3038549562","https://openalex.org/W3091388282","https://openalex.org/W3136841188","https://openalex.org/W3156669901","https://openalex.org/W3157916935","https://openalex.org/W3163525243","https://openalex.org/W3183048323","https://openalex.org/W3198941561","https://openalex.org/W3210231570","https://openalex.org/W4212764525","https://openalex.org/W4212816054","https://openalex.org/W4233976623","https://openalex.org/W4234713688","https://openalex.org/W4236965008","https://openalex.org/W4239598062","https://openalex.org/W4242113544","https://openalex.org/W4242722344","https://openalex.org/W4253813365","https://openalex.org/W4280577524","https://openalex.org/W4281638412","https://openalex.org/W4283800429","https://openalex.org/W4283819154","https://openalex.org/W4287644588","https://openalex.org/W4289619803","https://openalex.org/W4301802532","https://openalex.org/W4302053477","https://openalex.org/W4311165758","https://openalex.org/W4313563606","https://openalex.org/W4384155563","https://openalex.org/W4384155620","https://openalex.org/W4384948606","https://openalex.org/W4385152093","https://openalex.org/W4394769542","https://openalex.org/W6602601291","https://openalex.org/W6602928593","https://openalex.org/W6632604870"],"related_works":["https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W4281384336","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"Learning-based":[0],"Android":[1,76],"malware":[2,68,77,203,220],"detection":[3,90,94,158,204],"has":[4,28],"earned":[5],"significant":[6,140,210],"recognition":[7],"across":[8],"industry":[9],"and":[10,96],"academia,":[11],"yet":[12],"its":[13,128],"effectiveness":[14],"hinges":[15],"on":[16],"the":[17,30,186,200,215],"accuracy":[18],"of":[19,32,153,163,172,188,202],"labeled":[20],"training":[21],"data.":[22],"Manual":[23],"labeling,":[24],"being":[25],"prohibitively":[26],"expensive,":[27],"prompted":[29],"use":[31],"automated":[33,222],"methods,":[34],"such":[35],"as":[36,91,124],"leveraging":[37],"anti-virus":[38],"engines":[39],"like":[40],"VirusTotal,":[41],"which":[42],"unfortunately":[43],"introduces":[44],"mislabeling,":[45],"aka":[46],"\"label":[47],"noise\".":[48],"The":[49],"state-of-the-art":[50],"label":[51,60,70,88,109,133,144,156,181,196],"noise":[52,61,71,89,145,157,161],"reduction":[53,141],"approach,":[54],"MalWhiteout,":[55],"can":[56],"effectively":[57],"reduce":[58],"random":[59],"but":[62],"underperforms":[63],"in":[64,142,174,213,221],"mitigating":[65,179],"real-world":[66],"emergent":[67,219],"(EM)":[69],"stemming":[72],"from":[73],"newly":[74],"emerging":[75],"variants":[78],"overlooked":[79],"by":[80,146,218],"VirusTotal.":[81],"To":[82],"tackle":[83],"this,":[84],"we":[85],"conceptualize":[86],"EM":[87,108,132,143,180],"an":[92,150,170],"anomaly":[93,117],"problem":[95],"introduce":[97],"a":[98,139,160,209],"novel":[99],"tool,":[100],"MalCleanse,":[101],"that":[102],"surpasses":[103],"MalWhiteout's":[104],"ability":[105],"to":[106,130,194],"address":[107],"noise.":[110,134,182],"MalCleanse":[111,166],"combines":[112],"uncertainty":[113,123,193],"estimation":[114],"with":[115,121,169],"unsupervised":[116],"detection,":[118],"identifying":[119],"samples":[120],"high":[122],"mislabeled,":[125],"thereby":[126,198],"enhancing":[127,199],"capability":[129],"remove":[131],"Our":[135,206],"experimental":[136],"results":[137],"demonstrate":[138],"approximately":[147],"25.25%,":[148],"achieving":[149],"F1":[151,176],"Score":[152],"80.32%":[154],"for":[155,178],"at":[159],"ratio":[162],"40.61%.":[164],"Notably,":[165],"outperforms":[167],"MalWhiteout":[168],"increase":[171],"40.9%":[173],"overall":[175],"score":[177],"This":[183],"paper":[184],"pioneers":[185],"integration":[187],"deep":[189],"neural":[190],"network":[191],"model":[192],"refine":[195],"accuracy,":[197],"reliability":[201],"systems.":[205,224],"approach":[207],"represents":[208],"step":[211],"forward":[212],"addressing":[214],"challenges":[216],"posed":[217],"labeling":[223]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}