{"id":"https://openalex.org/W7116653083","doi":"https://doi.org/10.23919/cnsm67658.2025.11297499","title":"Towards Context-aware Intrusion Detection in Individual-oriented Information Systems: An Empirical Study on Android Malware","display_name":"Towards Context-aware Intrusion Detection in Individual-oriented Information Systems: An Empirical Study on Android Malware","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7116653083","doi":"https://doi.org/10.23919/cnsm67658.2025.11297499"},"language":null,"primary_location":{"id":"doi:10.23919/cnsm67658.2025.11297499","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297499","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071256353","display_name":"Van-Tien Nguyen","orcid":"https://orcid.org/0009-0006-3983-0281"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I190497903","display_name":"Laboratoire d'Analyse et d'Architecture des Syst\u00e8mes","ror":"https://ror.org/03vcm6439","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I190497903","https://openalex.org/I193033237","https://openalex.org/I196454796","https://openalex.org/I205747304","https://openalex.org/I4210095849","https://openalex.org/I4210152422","https://openalex.org/I4210159245","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]},{"id":"https://openalex.org/I196454796","display_name":"Institut National des Sciences Appliqu\u00e9es de Toulouse","ror":"https://ror.org/01h8pf755","country_code":"FR","type":"education","lineage":["https://openalex.org/I196454796"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Van-Tien Nguyen","raw_affiliation_strings":["LAAS-CNRS UPR,INSA Toulouse,Toulouse,France,8001"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAAS-CNRS UPR,INSA Toulouse,Toulouse,France,8001","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I190497903","https://openalex.org/I196454796"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071421986","display_name":"Renzo E. Navas","orcid":"https://orcid.org/0000-0002-8784-7444"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Renzo E. Navas","raw_affiliation_strings":["IRISA UMR CNRS,IMT Atlantique,Rennes,France,6074"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IRISA UMR CNRS,IMT Atlantique,Rennes,France,6074","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I4210127572"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024604995","display_name":"Guillaume Doyen","orcid":"https://orcid.org/0000-0002-9996-0145"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Guillaume Doyen","raw_affiliation_strings":["IRISA UMR CNRS,IMT Atlantique,Rennes,France,6074"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IRISA UMR CNRS,IMT Atlantique,Rennes,France,6074","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I4210127572"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.52425526,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5058000087738037,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5058000087738037,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.4011000096797943,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.02239999920129776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7339000105857849},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.49709999561309814},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.4715000092983246},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.46160000562667847},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4207000136375427},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.40950000286102295},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.390500009059906},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.35030001401901245}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.751800000667572},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7339000105857849},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.49709999561309814},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.4715000092983246},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.46160000562667847},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4207000136375427},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.40950000286102295},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.390500009059906},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3869999945163727},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3564000129699707},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.35030001401901245},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3301999866962433},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.3262999951839447},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.2531000077724457},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.251800000667572},{"id":"https://openalex.org/C2777622855","wikidata":"https://www.wikidata.org/wiki/Q7901844","display_name":"User information","level":3,"score":0.2506999969482422},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cnsm67658.2025.11297499","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297499","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.44842520356178284,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2586536827","https://openalex.org/W2906631928","https://openalex.org/W3046892157","https://openalex.org/W3118778829","https://openalex.org/W4285178486","https://openalex.org/W4289522396","https://openalex.org/W4293660950","https://openalex.org/W4306849504","https://openalex.org/W4311779590","https://openalex.org/W4366779682","https://openalex.org/W4385569552","https://openalex.org/W4387394709","https://openalex.org/W4391944556","https://openalex.org/W4392241356","https://openalex.org/W4392404318","https://openalex.org/W4399485312","https://openalex.org/W4399704535","https://openalex.org/W4399896140","https://openalex.org/W4403094304","https://openalex.org/W4404326055"],"related_works":[],"abstract_inverted_index":{"In":[0,152],"recent":[1],"years,":[2],"the":[3,31,40,46,140,144,153,190,205],"range":[4],"and":[5,24,45,89,132,162,180,201],"volume":[6],"of":[7,33,75,139,155,207],"Internet":[8],"services":[9,27],"utilized":[10],"by":[11,147],"an":[12,21,56,130,177],"individual":[13,22],"have":[14],"significantly":[15],"expanded.":[16],"This":[17],"growing":[18],"relationship":[19],"between":[20,87],"user":[23,77,198],"diverse":[25],"digital":[26],"has":[28],"led":[29],"to":[30,67,97,106,117,123,134,143,215],"emergence":[32],"Individualoriented":[34],"Information":[35],"System":[36],"(IIS)":[37],"that":[38,159,195],"encompasses":[39],"user,":[41],"their":[42],"physical":[43,163,199],"devices,":[44],"information":[47,105],"systems":[48],"they":[49,64,71,82,95],"interact":[50],"with.":[51],"Current":[52],"security":[53,109],"approaches":[54],"within":[55,129],"IIS":[57,131,141,212],"suffer":[58],"from":[59,184],"three":[60],"main":[61],"limitations:":[62],"(1)":[63,118],"are":[65],"restricted":[66],"specific":[68,85],"services,":[69],"(2)":[70,133],"require":[72],"intrusive":[73],"instrumentation":[74],"each":[76],"single":[78],"device,":[79],"or":[80],"(3)":[81],"rely":[83],"on":[84],"integration":[86],"client":[88],"server":[90],"components.":[91],"As":[92],"a":[93,120,168],"result,":[94],"fail":[96],"globally":[98],"protect":[99],"against":[100],"attackers":[101],"who":[102],"possess":[103],"enough":[104],"bypass":[107],"standalone":[108],"schemes.":[110],"To":[111],"overcome":[112],"these":[113],"constraints,":[114],"we":[115,166],"propose":[116],"consider":[119],"network-oriented":[121],"approach":[122],"detect":[124],"intrusions":[125],"which":[126],"may":[127],"occur":[128],"make":[135],"sensors":[136],"taking":[137],"part":[138],"contribute":[142],"intrusion":[145,181,208],"detection":[146],"providing":[148],"user-related":[149],"contextual":[150,164],"data.":[151],"absence":[154],"any":[156],"suitable":[157],"dataset":[158,171,188],"mixes":[160],"network":[161,202],"data,":[165],"construct":[167],"new":[169],"integrated":[170],"comprising":[172],"benign":[173],"data":[174],"captured":[175],"through":[176],"in-situ":[178],"experiment":[179],"traces":[182],"extracted":[183],"CIC-AndMal2017-a":[185],"widely":[186],"referenced":[187],"in":[189],"literature.":[191],"Our":[192],"evaluation":[193],"confirms":[194],"considering":[196],"both":[197],"context":[200],"features":[203],"improves":[204],"performance":[206],"detection,":[209],"thereby":[210],"making":[211],"more":[213],"resilient":[214],"attackers.":[216]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-12-22T00:00:00"}