{"id":"https://openalex.org/W7161697484","doi":"https://doi.org/10.48550/arxiv.2605.16363","title":"ORACLE: Anticipating Scams from Partial Trajectories in Streaming App Usage","display_name":"ORACLE: Anticipating Scams from Partial Trajectories in Streaming App Usage","publication_year":2026,"publication_date":"2026-05-09","ids":{"openalex":"https://openalex.org/W7161697484","doi":"https://doi.org/10.48550/arxiv.2605.16363"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16363","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136474959","display_name":"Wenbo Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Wenbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136485077","display_name":"Songbai Tan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tan, Songbai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027234252","display_name":"Zhongan Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zhongan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136487204","display_name":"Fei Shen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Fei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136456407","display_name":"Gang Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Gang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136491633","display_name":"Huiping Zhuang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhuang, Huiping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136463195","display_name":"Yunyun Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yunyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136463618","display_name":"Ming Li","orcid":"https://orcid.org/0000-0003-4882-2743"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5037340898","display_name":"Xiaofeng Zhu","orcid":"https://orcid.org/0000-0001-6840-0578"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Xiaofeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.722000002861023,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.722000002861023,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.1965000033378601,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.00860000029206276,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6055999994277954},{"id":"https://openalex.org/keywords/interleaving","display_name":"Interleaving","score":0.5781000256538391},{"id":"https://openalex.org/keywords/anticipation","display_name":"Anticipation (artificial intelligence)","score":0.4977000057697296},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.461899995803833},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.46160000562667847},{"id":"https://openalex.org/keywords/intervention","display_name":"Intervention (counseling)","score":0.4219000041484833},{"id":"https://openalex.org/keywords/smartphone-app","display_name":"Smartphone app","score":0.4219000041484833}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6697999835014343},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6055999994277954},{"id":"https://openalex.org/C28034677","wikidata":"https://www.wikidata.org/wiki/Q17092530","display_name":"Interleaving","level":2,"score":0.5781000256538391},{"id":"https://openalex.org/C176777502","wikidata":"https://www.wikidata.org/wiki/Q4774623","display_name":"Anticipation (artificial intelligence)","level":2,"score":0.4977000057697296},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.461899995803833},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.46160000562667847},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.4219000041484833},{"id":"https://openalex.org/C3017619522","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Smartphone app","level":2,"score":0.4219000041484833},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.4115000069141388},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4059000015258789},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3991999924182892},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3822000026702881},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.3472000062465668},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3093999922275543},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2953000068664551},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28279998898506165},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26840001344680786},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26100000739097595},{"id":"https://openalex.org/C2777611316","wikidata":"https://www.wikidata.org/wiki/Q39045282","display_name":"Streaming data","level":2,"score":0.2605000138282776}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6970239281654358}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Smartphone":[0],"scams":[1,21],"are":[2],"increasingly":[3],"prevalent":[4],"and":[5,97,100,153,172],"typically":[6],"manifest":[7],"as":[8,31],"multi-stage,":[9],"cross-application":[10],"processes":[11],"with":[12,38],"gradually":[13],"emerging":[14,176],"intent.":[15],"Effective":[16],"intervention":[17],"thus":[18],"requires":[19],"anticipating":[20],"before":[22],"the":[23,55],"intent":[24],"becomes":[25],"explicit.":[26],"This":[27,166],"is":[28],"inherently":[29],"challenging,":[30],"decisions":[32],"must":[33],"rely":[34],"on":[35,90,149],"partial":[36,128,180],"trajectories":[37],"temporally":[39],"distributed":[40],"evidence.":[41],"In":[42],"this":[43,69],"paper,":[44],"we":[45,71,107,137],"propose":[46,138],"\\textbf{ORACLE}":[47],"Online":[48],"Reasoning":[49],"for":[50,59],"Anticipating":[51],"Cross-temporal":[52],"Latent":[53],"thrEats,":[54],"first":[56],"agentic":[57],"framework":[58],"early":[60,188],"scam":[61,83,101,189],"anticipation":[62],"from":[63,127,179],"\\textit{streaming":[64],"app-usage}":[65],"trajectories.":[66,181],"To":[67,103,130],"support":[68],"setting,":[70],"curate":[72],"a":[73,109,145,158],"real-world":[74],"long-horizon":[75],"benchmark":[76],"of":[77,124,175],"streaming":[78,200],"app-usage":[79],"trajectories,":[80],"covering":[81],"12":[82],"types,":[84],"spanning":[85],"extended":[86],"periods":[87],"(15":[88],"days":[89],"average),":[91],"involving":[92],"diverse":[93],"applications":[94],"(95":[95],"apps),":[96],"interleaving":[98],"normal":[99],"behaviors.":[102],"address":[104],"fragmented":[105],"evidence,":[106],"introduce":[108],"self-evolving":[110],"context":[111],"manager":[112],"that":[113,184],"adaptively":[114],"consolidates":[115],"entity-centric":[116],"interactions":[117],"over":[118],"time,":[119],"enabling":[120],"more":[121],"effective":[122],"reconstruction":[123],"cross-temporal":[125],"evidence":[126],"observations.":[129],"enhance":[131],"sensitivity":[132],"to":[133,163],"latent":[134],"early-stage":[135],"signals,":[136],"an":[139],"on-policy":[140],"self-distillation":[141],"scheme":[142,167],"in":[143,198],"which":[144],"teacher":[146],"model,":[147],"conditioned":[148],"summarized":[150],"anti-scam":[151],"reflections":[152],"clues":[154],"by":[155],"skills,":[156],"supervises":[157],"student":[159],"model":[160],"without":[161],"access":[162],"such":[164],"reflections.":[165],"thereby":[168],"distills":[169],"evidence-informed":[170],"knowledge":[171],"improves":[173,187],"recognition":[174],"fraud":[177],"patterns":[178],"Experiments":[182],"show":[183],"\\method{}":[185],"consistently":[186],"anticipation,":[190],"yielding":[191],"timely":[192],"warnings":[193],"while":[194],"reducing":[195],"false":[196],"alerts":[197],"realistic":[199],"scenarios.":[201]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}