{"id":"https://openalex.org/W4411523070","doi":"https://doi.org/10.1145/3728884","title":"Understanding Model Weaknesses: A Path to Strengthening DNN-Based Android Malware Detection","display_name":"Understanding Model Weaknesses: A Path to Strengthening DNN-Based Android Malware Detection","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4411523070","doi":"https://doi.org/10.1145/3728884"},"language":"en","primary_location":{"id":"doi:10.1145/3728884","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728884","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3728884","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061919694","display_name":"Haodong Li","orcid":"https://orcid.org/0009-0004-1649-7549"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haodong Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-1649-7549","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036194526","display_name":"Xiao Cheng","orcid":"https://orcid.org/0000-0001-5456-3827"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiao Cheng","raw_affiliation_strings":["UNSW, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5456-3827","affiliations":[{"raw_affiliation_string":"UNSW, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023970004","display_name":"Yanjie Zhao","orcid":"https://orcid.org/0000-0001-8793-5367"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjie Zhao","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8793-5367","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091767796","display_name":"Guosheng Xu","orcid":"https://orcid.org/0000-0002-3310-926X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guosheng Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-3310-926X","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102002679","display_name":"Guoai Xu","orcid":"https://orcid.org/0000-0002-9582-0698"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoai Xu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China","Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-9582-0698","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8049,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.85097531,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"2","issue":"ISSTA","first_page":"320","last_page":"342"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7737264633178711},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.7496383190155029},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6962421536445618},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6869995594024658},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6202070116996765},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5951699614524841},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.5205351114273071},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.512999951839447},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.4893319010734558},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.46654248237609863},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13947933912277222}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7737264633178711},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.7496383190155029},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6962421536445618},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6869995594024658},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6202070116996765},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5951699614524841},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.5205351114273071},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.512999951839447},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.4893319010734558},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.46654248237609863},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13947933912277222},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728884","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728884","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728884","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728884","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5891643925","display_name":null,"funder_award_id":"No.2021YFB3101500","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":68,"referenced_works":["https://openalex.org/W1532142362","https://openalex.org/W1965555277","https://openalex.org/W1973965874","https://openalex.org/W2000121968","https://openalex.org/W2041151434","https://openalex.org/W2118978333","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2148143831","https://openalex.org/W2292240422","https://openalex.org/W2296073425","https://openalex.org/W2407313496","https://openalex.org/W2440599146","https://openalex.org/W2514847810","https://openalex.org/W2528287124","https://openalex.org/W2572070369","https://openalex.org/W2599823825","https://openalex.org/W2620844046","https://openalex.org/W2733922298","https://openalex.org/W2744095836","https://openalex.org/W2749627501","https://openalex.org/W2755632345","https://openalex.org/W2789983203","https://openalex.org/W2808866466","https://openalex.org/W2810417023","https://openalex.org/W2886064601","https://openalex.org/W2897230315","https://openalex.org/W2897812226","https://openalex.org/W2905097561","https://openalex.org/W2906631928","https://openalex.org/W2908285635","https://openalex.org/W2953797486","https://openalex.org/W2963212406","https://openalex.org/W2963691377","https://openalex.org/W2971450851","https://openalex.org/W2980025636","https://openalex.org/W2984666763","https://openalex.org/W3005273021","https://openalex.org/W3014596384","https://openalex.org/W3033777149","https://openalex.org/W3034571331","https://openalex.org/W3036833724","https://openalex.org/W3048804154","https://openalex.org/W3091388282","https://openalex.org/W3112311055","https://openalex.org/W3123353479","https://openalex.org/W3134774296","https://openalex.org/W3142849873","https://openalex.org/W3156669901","https://openalex.org/W3161071537","https://openalex.org/W3161331107","https://openalex.org/W3183048323","https://openalex.org/W3198941561","https://openalex.org/W3210231570","https://openalex.org/W4238688913","https://openalex.org/W4280577524","https://openalex.org/W4281638412","https://openalex.org/W4283214976","https://openalex.org/W4283800429","https://openalex.org/W4294493961","https://openalex.org/W4313563606","https://openalex.org/W4384345661","https://openalex.org/W4384948606","https://openalex.org/W4394769542","https://openalex.org/W4402352184","https://openalex.org/W4403536866","https://openalex.org/W4411449783","https://openalex.org/W6931249331"],"related_works":["https://openalex.org/W2393964553","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W2462192250","https://openalex.org/W4383468964","https://openalex.org/W4312234627"],"abstract_inverted_index":{"Android":[0],"malware":[1,36,63],"detection":[2,23],"remains":[3],"a":[4,22,77],"critical":[5],"challenge":[6],"in":[7,38,48,54,93,180],"cybersecurity":[8],"research.":[9],"Recent":[10],"advancements":[11],"leverage":[12],"AI":[13],"techniques,":[14],"particularly":[15],"deep":[16],"neural":[17],"networks":[18],"(DNNs),":[19],"to":[20,46,201],"train":[21],"model,":[24],"but":[25],"their":[26],"effectiveness":[27],"is":[28],"often":[29],"compromised":[30],"by":[31,100,111,166,172,187],"the":[32,67,113,156,169,177,195,203],"pronounced":[33],"imbalance":[34,44],"among":[35],"families":[37],"commonly":[39],"used":[40],"training":[41,87,106,121,134],"datasets.":[42],"This":[43],"leads":[45],"overfitting":[47],"dominant":[49],"categories":[50],"and":[51,174],"poor":[52],"performance":[53,69,157],"underrepresented":[55],"ones,":[56],"increasing":[57,164],"predictive":[58,114],"uncertainty":[59,115,200],"for":[60,208],"less":[61],"common":[62],"families.":[64],"To":[65],"address":[66],"suboptimal":[68],"of":[70,116,158,184,198,205],"many":[71],"DNN":[72,105,117,206],"models,":[73],"we":[74,109,132],"introduce":[75],"MalTutor,":[76],"novel":[78],"framework":[79],"that":[80,152],"enhances":[81],"model":[82],"robustness":[83,204],"through":[84],"an":[85],"optimized":[86],"process.":[88],"Our":[89,148,189],"primary":[90],"insight":[91],"lies":[92],"transforming":[94],"uncertainties":[95],"from":[96],"\u201cliabilities\u201d":[97],"into":[98,104,194],"\u201cassets\u201d":[99],"strategically":[101],"incorporating":[102,142,199],"them":[103],"methodologies.":[107],"Specifically,":[108],"begin":[110],"evaluating":[112],"models":[118,159,207],"throughout":[119],"various":[120,182],"epochs,":[122],"which":[123],"guides":[124],"our":[125],"sample":[126],"categorization.":[127],"Incorporating":[128],"Curriculum":[129],"Learning":[130],"strategies,":[131],"commence":[133],"with":[135,138,145],"easy-to-learn":[136],"samples":[137],"lower":[139],"uncertainty,":[140],"progressively":[141],"difficult-to-learn":[143],"ones":[144],"higher":[146],"uncertainty.":[147],"experimental":[149],"results":[150],"demonstrate":[151],"MalTutor":[153],"significantly":[154],"improves":[155],"trained":[160],"on":[161],"imbalanced":[162],"datasets,":[163],"accuracy":[165,179],"31.0%,":[167],"elevating":[168],"F1":[170],"score":[171],"138.8%,":[173],"specifically":[175],"boosting":[176],"average":[178],"detecting":[181],"types":[183],"malicious":[185],"apps":[186],"133.9%.":[188],"findings":[190],"provide":[191],"valuable":[192],"insights":[193],"potential":[196],"benefits":[197],"improve":[202],"prediction-oriented":[209],"software":[210],"engineering":[211],"tasks.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}