{"id":"https://openalex.org/W4415583967","doi":"https://doi.org/10.1145/3755881.3755890","title":"Measuring and Explaining the Effects of Android App Transformations in Online Malware Detection","display_name":"Measuring and Explaining the Effects of Android App Transformations in Online Malware Detection","publication_year":2025,"publication_date":"2025-06-20","ids":{"openalex":"https://openalex.org/W4415583967","doi":"https://doi.org/10.1145/3755881.3755890"},"language":null,"primary_location":{"id":"doi:10.1145/3755881.3755890","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755890","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755890","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755890","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017417068","display_name":"Guozhu Meng","orcid":"https://orcid.org/0000-0001-6388-2571"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guozhu Meng","raw_affiliation_strings":["University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6388-2571","affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015668956","display_name":"Zhixiu Guo","orcid":"https://orcid.org/0000-0002-0107-3522"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhixiu Guo","raw_affiliation_strings":["University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0107-3522","affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiaodong Zhang","orcid":"https://orcid.org/0000-0003-0599-1846"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaodong Zhang","raw_affiliation_strings":["University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0599-1846","affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, Hubei, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5624-2987","affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.38111193,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"24","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9739000201225281,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.972599983215332,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4546999931335449},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4196000099182129},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.3580000102519989},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.30000001192092896}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6499000191688538},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4546999931335449},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4196000099182129},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3449000120162964},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.29510000348091125},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2574999928474426},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.24899999797344208}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3755881.3755890","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755890","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755890","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3755881.3755890","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755890","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755890","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G895161659","display_name":null,"funder_award_id":"XDB0690100","funder_id":"https://openalex.org/F4320321133","funder_display_name":"Chinese Academy of Sciences"}],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415583967.pdf","grobid_xml":"https://content.openalex.org/works/W4415583967.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2046185165","https://openalex.org/W2125011234","https://openalex.org/W2152149943","https://openalex.org/W2403995870","https://openalex.org/W2509162308","https://openalex.org/W2517430515","https://openalex.org/W2583329118","https://openalex.org/W2794652108","https://openalex.org/W2897679705","https://openalex.org/W4366000548","https://openalex.org/W4402634012","https://openalex.org/W4403520170"],"related_works":[],"abstract_inverted_index":{"It":[0],"is":[1,66],"well":[2],"known":[3],"that":[4,14],"antivirus":[5,77,121,144,177],"engines":[6,35,145,178],"are":[7,95,181],"vulnerable":[8],"to":[9,25,49,56,99],"evasion":[10],"techniques":[11,94],"(e.g.,":[12],"obfuscation)":[13],"transform":[15],"malware":[16,57,189],"into":[17],"its":[18],"variants.However,":[19],"it":[20],"cannot":[21],"be":[22],"necessarily":[23],"attributed":[24],"the":[26,32,51,63,151,182],"effectiveness":[27],"of":[28,34,53,89,104,115,143,153,171,184],"these":[29,69,148],"evasions,":[30],"and":[31,59,157,179],"limits":[33],"may":[36],"also":[37],"make":[38],"this":[39,42],"unsatisfactory":[40],"result.In":[41],"study,":[43],"we":[44,71,110,125,138],"propose":[45],"a":[46,101,112,140,169],"data-driven":[47],"approach":[48],"measure":[50],"effect":[52],"app":[54,92,116],"transformations":[55],"detection,":[58],"further":[60],"explain":[61],"why":[62],"detection":[64,85,117,129,160],"result":[65],"produced":[67],"by":[68],"engines.First,":[70],"develop":[72],"an":[73],"interaction":[74],"model":[75],"for":[76,133],"engines,":[78,122],"illustrating":[79],"how":[80],"they":[81],"respond":[82],"with":[83,107,164],"different":[84],"results":[86,118],"in":[87,97,136,186],"terms":[88],"varying":[90],"inputs.Six":[91],"transformation":[93],"implemented":[96],"order":[98],"generate":[100],"large":[102],"number":[103,170],"Android":[105],"apps":[106,135,187],"traceable":[108],"changes.Then":[109],"undertake":[111],"onemonth":[113],"tracking":[114],"from":[119,131,150],"multiple":[120],"through":[123],"which":[124],"obtain":[126],"over":[127],"971K":[128],"reports":[130,149],"VirusTotal":[132],"179K":[134],"total.Last,":[137],"conduct":[139],"comprehensive":[141],"analysis":[142],"based":[146],"on":[147],"perspectives":[152],"signature-based,":[154],"static":[155],"analysis-based,":[156],"dynamic":[158],"analysis-based":[159],"techniques.The":[161],"results,":[162],"together":[163],"7":[165],"highlighted":[166],"findings,":[167],"identify":[168],"sealed":[172],"working":[173],"mechanisms":[174],"occurring":[175],"inside":[176],"what":[180],"indicators":[183],"compromise":[185],"during":[188],"detection.":[190]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-28T00:00:00"}