{"id":"https://openalex.org/W4412954623","doi":"https://doi.org/10.3390/jcp5030052","title":"YoloMal-XAI: Interpretable Android Malware Classification Using RGB Images and YOLO11","display_name":"YoloMal-XAI: Interpretable Android Malware Classification Using RGB Images and YOLO11","publication_year":2025,"publication_date":"2025-08-01","ids":{"openalex":"https://openalex.org/W4412954623","doi":"https://doi.org/10.3390/jcp5030052"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5030052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030052","pdf_url":"https://www.mdpi.com/2624-800X/5/3/52/pdf?version=1754025801","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/3/52/pdf?version=1754025801","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5118804225","display_name":"Chaymae El Youssofi","orcid":null},"institutions":[{"id":"https://openalex.org/I3121676899","display_name":"Universit\u00e9 Ibn-Tofail","ror":"https://ror.org/02wj89n04","country_code":"MA","type":"education","lineage":["https://openalex.org/I3121676899"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Chaymae El Youssofi","raw_affiliation_strings":["Engineering Sciences Laboratory, Ibn Tofail University, Kenitra 14000, Morocco"],"raw_orcid":"https://orcid.org/0009-0003-3822-0463","affiliations":[{"raw_affiliation_string":"Engineering Sciences Laboratory, Ibn Tofail University, Kenitra 14000, Morocco","institution_ids":["https://openalex.org/I3121676899"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075132083","display_name":"Khalid Chougdali","orcid":"https://orcid.org/0000-0002-1072-0461"},"institutions":[{"id":"https://openalex.org/I3121676899","display_name":"Universit\u00e9 Ibn-Tofail","ror":"https://ror.org/02wj89n04","country_code":"MA","type":"education","lineage":["https://openalex.org/I3121676899"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Khalid Chougdali","raw_affiliation_strings":["Engineering Sciences Laboratory, Ibn Tofail University, Kenitra 14000, Morocco"],"raw_orcid":"https://orcid.org/0000-0002-1072-0461","affiliations":[{"raw_affiliation_string":"Engineering Sciences Laboratory, Ibn Tofail University, Kenitra 14000, Morocco","institution_ids":["https://openalex.org/I3121676899"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5118804225"],"corresponding_institution_ids":["https://openalex.org/I3121676899"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1207},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1207},"fwci":1.6235,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.83852213,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"5","issue":"3","first_page":"52","last_page":"52"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9611999988555908,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7280885577201843},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6833140254020691},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6041790843009949},{"id":"https://openalex.org/keywords/rgb-color-model","display_name":"RGB color model","score":0.5873198509216309},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5392794013023376},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4658283591270447},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.43181324005126953},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22793221473693848},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2126908004283905}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7280885577201843},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6833140254020691},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6041790843009949},{"id":"https://openalex.org/C82990744","wikidata":"https://www.wikidata.org/wiki/Q166194","display_name":"RGB color model","level":2,"score":0.5873198509216309},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5392794013023376},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4658283591270447},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.43181324005126953},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22793221473693848},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2126908004283905}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5030052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030052","pdf_url":"https://www.mdpi.com/2624-800X/5/3/52/pdf?version=1754025801","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e1d190584373409eb920551dd58e4645","is_oa":true,"landing_page_url":"https://doaj.org/article/e1d190584373409eb920551dd58e4645","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 3, p 52 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5030052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030052","pdf_url":"https://www.mdpi.com/2624-800X/5/3/52/pdf?version=1754025801","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323771","display_name":"Centre National pour la Recherche Scientifique et Technique","ror":"https://ror.org/00675rp98"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412954623.pdf","grobid_xml":"https://content.openalex.org/works/W4412954623.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W2010065958","https://openalex.org/W2122672392","https://openalex.org/W2168347639","https://openalex.org/W2339980553","https://openalex.org/W2491928626","https://openalex.org/W2906631928","https://openalex.org/W3006334803","https://openalex.org/W3091722391","https://openalex.org/W3105429705","https://openalex.org/W3125601055","https://openalex.org/W4205876068","https://openalex.org/W4237889231","https://openalex.org/W4280590592","https://openalex.org/W4285592749","https://openalex.org/W4306769741","https://openalex.org/W4312318249","https://openalex.org/W4313216189","https://openalex.org/W4376109301","https://openalex.org/W4381597382","https://openalex.org/W4387941248","https://openalex.org/W4391933803","https://openalex.org/W4392696582","https://openalex.org/W4399807149","https://openalex.org/W4402305591","https://openalex.org/W4403277278","https://openalex.org/W4404368860","https://openalex.org/W4406109636","https://openalex.org/W4406434237","https://openalex.org/W4407144444","https://openalex.org/W4407668373","https://openalex.org/W4410738335","https://openalex.org/W6757817989","https://openalex.org/W6876778577","https://openalex.org/W6877287471"],"related_works":["https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W4281384336","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"As":[0],"Android":[1,38,194],"malware":[2,195],"grows":[3],"increasingly":[4],"sophisticated,":[5],"traditional":[6],"detection":[7],"methods":[8],"struggle":[9],"to":[10,23,54,87,119,169],"keep":[11],"pace,":[12],"creating":[13],"an":[14],"urgent":[15],"need":[16],"for":[17,193,200],"robust,":[18],"interpretable,":[19],"and":[20,51,75,84,90,125,147,166,190],"real-time":[21],"solutions":[22],"safeguard":[24],"mobile":[25,205],"ecosystems.":[26],"This":[27],"study":[28,139],"introduces":[29],"YoloMal-XAI,":[30],"a":[31,187],"novel":[32],"deep":[33],"learning":[34],"framework":[35,192],"that":[36],"transforms":[37],"application":[39],"files":[40,53],"into":[41],"RGB":[42,153],"image":[43],"representations":[44],"by":[45,117],"mapping":[46],"DEX":[47,175],"(Dalvik":[48],"Executable),":[49],"Manifest.xml,":[50],"Resources.arsc":[52],"distinct":[55],"color":[56],"channels.":[57],"Evaluated":[58],"on":[59,133,203],"the":[60,129,141,151,157,174,178],"CICMalDroid2020":[61],"dataset":[62],"using":[63,123],"YOLO11":[64,92,107],"pretrained":[65],"classification":[66,74,79],"models,":[67],"YoloMal-XAI":[68,185],"achieves":[69,108],"99.87%":[70],"accuracy":[71,95,112],"in":[72,77],"binary":[73],"99.56%":[76],"multi-class":[78],"(Adware,":[80],"Banking,":[81],"Riskware,":[82],"SMS,":[83],"Benign).":[85],"Compared":[86],"ResNet-50,":[88],"GoogLeNet,":[89],"MobileNetV2,":[91],"offers":[93],"competitive":[94],"with":[96,150,197],"at":[97],"least":[98],"7\u00d7":[99],"faster":[100],"training":[101,115],"over":[102],"100":[103],"epochs.":[104],"Against":[105],"YOLOv8,":[106],"comparable":[109],"or":[110],"superior":[111],"while":[113],"reducing":[114],"time":[116],"up":[118],"3.5\u00d7.":[120],"Cross-corpus":[121],"validation":[122],"Drebin":[124],"CICAndMal2017":[126],"further":[127],"confirms":[128],"model\u2019s":[130],"generalization":[131],"capability":[132],"previously":[134],"unseen":[135],"malware.":[136],"An":[137],"ablation":[138],"highlights":[140],"value":[142],"of":[143],"integrating":[144],"DEX,":[145],"Manifest,":[146],"Resources":[148],"components,":[149],"full":[152],"configuration":[154],"consistently":[155],"delivering":[156],"best":[158],"performance.":[159],"Explainable":[160],"AI":[161],"(XAI)":[162],"techniques\u2014Grad-CAM,":[163],"Grad-CAM++,":[164],"Eigen-CAM,":[165],"HiRes-CAM\u2014are":[167],"employed":[168],"interpret":[170],"model":[171],"decisions,":[172],"revealing":[173],"segment":[176],"as":[177,186],"most":[179],"influential":[180],"component.":[181],"These":[182],"results":[183],"establish":[184],"scalable,":[188],"efficient,":[189],"interpretable":[191],"detection,":[196],"strong":[198],"potential":[199],"future":[201],"deployment":[202],"resource-constrained":[204],"devices.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}