{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T12:16:40Z","timestamp":1783685800380,"version":"3.55.0"},"reference-count":50,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T00:00:00Z","timestamp":1774828800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T00:00:00Z","timestamp":1774828800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1007\/s10586-026-06018-8","type":"journal-article","created":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T20:40:20Z","timestamp":1774903220000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Enhanced android adware detection using optimized catboost and sparse autoencoder"],"prefix":"10.1007","volume":"29","author":[{"given":"Vahid","family":"Kardgar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seyed Yaser","family":"Bozorgi Rad","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Behnam","family":"Barzegar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Meisam","family":"Yadollahzadeh-Tabari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Homayun","family":"Motameni","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,3,30]]},"reference":[{"key":"6018_CR1","unstructured":"Reijonen, A.: The Evolution of Mobile Malware, (2024)"},{"key":"6018_CR2","doi-asserted-by":"crossref","unstructured":"Faruki, P., Bhan, R., Jain, V., Bhatia, S., Madhoun, N.E., Pamula, R.: A survey and evaluation of android-based malware evasion techniques and detection frameworks, Information, 14(7), 374 (2023)","DOI":"10.3390\/info14070374"},{"key":"6018_CR3","doi-asserted-by":"publisher","first-page":"40698","DOI":"10.1109\/ACCESS.2023.3268535","volume":"11","author":"S Razaulla","year":"2023","unstructured":"Razaulla, S., et al.: The age of ransomware: A survey on the evolution, taxonomy, and research directions. IEEE Access. 11, 40698\u201340723 (2023)","journal-title":"IEEE Access."},{"key":"6018_CR4","doi-asserted-by":"crossref","unstructured":"Karg\u00e9n, U., Mauthe, N., Shahmehri, N.: Characterizing the Use of Code Obfuscation in Malicious and Benign Android Apps, in Proceedings of the 18th International Conference on Availability, Reliability and Security, 1\u201312 (2023)","DOI":"10.1145\/3600160.3600194"},{"key":"6018_CR5","doi-asserted-by":"crossref","unstructured":"Cho, I., Towey, D., Kar, P.: Using obfuscators to test compilers: A metamorphic experience, in 2023 IEEE 47th Annual Computers, Software, and Applications Conference (COMPSAC), IEEE, 1786\u20131791 (2023)","DOI":"10.1109\/COMPSAC57700.2023.00276"},{"key":"6018_CR6","doi-asserted-by":"publisher","first-page":"102996","DOI":"10.1016\/j.cose.2022.102996","volume":"124","author":"B Molina-Coronado","year":"2023","unstructured":"Molina-Coronado, B., Mori, U., Mendiburu, A., Miguel-Alonso, J.: Towards a fair comparison and realistic evaluation framework of android malware detectors based on static analysis and machine learning. Computers Secur. 124, 102996 (2023)","journal-title":"Computers Secur."},{"key":"6018_CR7","doi-asserted-by":"crossref","unstructured":"Sharma, S., Arora, B.: On Static Android Malware Detection and Analysis: A Systematic Review, in International Conference on Cognitive Computing and Cyber Physical Systems, pp. 853\u2013869. Springer, (2023)","DOI":"10.1007\/978-981-97-2550-2_61"},{"key":"6018_CR8","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1016\/j.infsof.2017.04.001","volume":"88","author":"L Li","year":"2017","unstructured":"Li, L., et al.: Static analysis of android apps: A systematic literature review. \u200eInf. Softw. Technol. 88, 67\u201395 (2017)","journal-title":"\u200eInf. Softw. Technol."},{"key":"6018_CR9","unstructured":"Hande, K., Rao, V.: A comparative study of static, dynamic and hybrid analysis techniques for android malware detection. Int. J. Eng. Dev. Res. 5(2), 1433\u20131436 (2017)"},{"key":"6018_CR10","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1016\/j.aej.2024.11.068","volume":"114","author":"J Feng","year":"2025","unstructured":"Feng, J., Shen, L., Chen, Z., Lei, Y., Li, H.: HGDetector: A hybrid android malware detection method using network traffic and function call graph. Alexandria Eng. J. 114, 30\u201345 (2025)","journal-title":"Alexandria Eng. J."},{"key":"6018_CR11","first-page":"101945","volume":"62","author":"K K\u0131l\u0131\u00e7","year":"2025","unstructured":"K\u0131l\u0131\u00e7, K., Atacak, \u0130., Do\u011fru, \u0130.A.: FABLDroid: Malware detection based on hybrid analysis with factor analysis and broad learning methods for android applications. Eng. Sci. Technol. Int. J. 62, 101945 (2025)","journal-title":"Eng. Sci. Technol. Int. J."},{"issue":"1","key":"6018_CR12","doi-asserted-by":"publisher","first-page":"118","DOI":"10.1049\/ise2.12082","volume":"17","author":"Y Wu","year":"2023","unstructured":"Wu, Y., Shi, J., Wang, P., Zeng, D., Sun, C.: DeepCatra: Learning flow-and graph\u2010based behaviours for android malware detection. IET Inf. Secur. 17(1), 118\u2013130 (2023)","journal-title":"IET Inf. Secur."},{"key":"6018_CR13","doi-asserted-by":"crossref","unstructured":"Raghuraman, D., Soniya, S., Shivani, S.: Automatic Android Malware Detection using CNN and GRU, in Third International Conference on Smart Technologies and Systems for Next Generation Computing (ICSTSN), 2024: IEEE,1\u20136 (2024)","DOI":"10.1109\/ICSTSN61422.2024.10671270"},{"key":"6018_CR14","doi-asserted-by":"crossref","unstructured":"AlSobeh, A.M., Gaber, K., Hammad, M.M., Nuser, M., Shatnawi, A.: Android malware detection using time-aware machine learning approach. Cluster Comput. 27, 1\u201322 (2024)","DOI":"10.1007\/s10586-024-04484-6"},{"issue":"4","key":"6018_CR15","doi-asserted-by":"publisher","first-page":"725","DOI":"10.1007\/s10207-022-00579-6","volume":"21","author":"J Kim","year":"2022","unstructured":"Kim, J., Ban, Y., Ko, E., Cho, H., Yi, J.H.: MAPAS: A practical deep learning-based android malware detection system. Int. J. Inf. Secur. 21(4), 725\u2013738 (2022)","journal-title":"Int. J. Inf. Secur."},{"issue":"3","key":"6018_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10586-024-05017-x","volume":"28","author":"A Razaque","year":"2025","unstructured":"Razaque, A., et al.: Review of malicious code detection in data mining applications: challenges, algorithms, and future direction. Cluster Comput. 28(3), 1\u201337 (2025)","journal-title":"Cluster Comput."},{"key":"6018_CR17","doi-asserted-by":"crossref","unstructured":"Kouliaridis, V., Potha, N., Kambourakis, G.: Improving android malware detection through dimensionality reduction techniques, in International conference on machine learning for networking, pp. 57\u201372. Springer, (2020)","DOI":"10.1007\/978-3-030-70866-5_4"},{"key":"6018_CR18","doi-asserted-by":"publisher","first-page":"102757","DOI":"10.1016\/j.cose.2022.102757","volume":"120","author":"A Guerra-Manzanares","year":"2022","unstructured":"Guerra-Manzanares, A., Luckner, M., Bahsi, H.: Concept drift and cross-device behavior: Challenges and implications for effective android malware detection. Computers Secur. 120, 102757 (2022)","journal-title":"Computers Secur."},{"key":"6018_CR19","doi-asserted-by":"crossref","unstructured":"Hota, A., Panja, S., Nag, A.: Lightweight CNN-based malware image classification for resource-constrained applications. Innov. Syst. Softw. Eng. 21, 1\u201314 (2022)","DOI":"10.1007\/s11334-022-00461-7"},{"key":"6018_CR20","first-page":"100083","volume":"3","author":"BB Gupta","year":"2025","unstructured":"Gupta, B.B., et al.: Earthworm optimization algorithm based cascade LSTM-GRU model for android malware detection. Cyber Secur. Appl. 3, 100083 (2025)","journal-title":"Cyber Secur. Appl."},{"key":"6018_CR21","first-page":"100618","volume":"29","author":"S Sharma","year":"2025","unstructured":"Sharma, S., Chhikara, R., Khanna, K.: A novel feature selection technique: Detection and classification of android malware. Egypt. Inf. J. 29, 100618 (2025)","journal-title":"Egypt. Inf. J."},{"key":"6018_CR22","doi-asserted-by":"publisher","first-page":"125546","DOI":"10.1016\/j.eswa.2024.125546","volume":"262","author":"W Zhao","year":"2025","unstructured":"Zhao, W., Wu, J., Meng, Z.: Apppoet: Large Language model based android malware detection via multi-view prompt engineering. Expert Syst. Appl. 262, 125546 (2025)","journal-title":"Expert Syst. Appl."},{"key":"6018_CR23","doi-asserted-by":"crossref","unstructured":"Chen, Y., et al.: A survey of large Language models for cyber threat detection. Computers Secur. 145, 104016 (2024)","DOI":"10.1016\/j.cose.2024.104016"},{"issue":"13","key":"6018_CR24","doi-asserted-by":"publisher","first-page":"38753","DOI":"10.1007\/s11042-023-16920-7","volume":"83","author":"U Farooq","year":"2024","unstructured":"Farooq, U., Khurana, S.S., Singh, P., Kumar, M.: An empirical study on detection of android adware using machine learning techniques. Multimedia Tools Appl. 83(13), 38753\u201338792 (2024)","journal-title":"Multimedia Tools Appl."},{"key":"6018_CR25","doi-asserted-by":"crossref","unstructured":"Lashkari, A.H., Kadir, A.F.A., Taheri, L., Ghorbani, A.A.: Toward developing a systematic approach to generate benchmark android malware datasets and classification, in International Carnahan conference on security technology (ICCST), 2018: IEEE, 1\u20137 (2018)","DOI":"10.1109\/CCST.2018.8585560"},{"key":"6018_CR26","doi-asserted-by":"publisher","first-page":"124633","DOI":"10.1016\/j.eswa.2024.124633","volume":"255","author":"R Ma","year":"2024","unstructured":"Ma, R., Yin, S., Feng, X., Zhu, H., Sheng, V.S.: A lightweight deep learning-based android malware detection framework. Expert Syst. Appl. 255, 124633 (2024)","journal-title":"Expert Syst. Appl."},{"key":"6018_CR27","first-page":"200318","volume":"21","author":"AR Nasser","year":"2024","unstructured":"Nasser, A.R., Hasan, A.M., Humaidi, A.J.: DL-AMDet: Deep learning-based malware detector for android. Intell. Syst. Appl. 21, 200318 (2024)","journal-title":"Intell. Syst. Appl."},{"key":"6018_CR28","first-page":"100076","volume":"3","author":"MA Hossain","year":"2025","unstructured":"Hossain, M.A., Hasan, T., Ahmed, F., Cheragee, S.H., Kanchan, M.H., Haque, M.A.: Towards superior android ransomware detection: An ensemble machine learning perspective. Cyber Secur. Appl. 3, 100076 (2025)","journal-title":"Cyber Secur. Appl."},{"issue":"3","key":"6018_CR29","doi-asserted-by":"publisher","first-page":"210","DOI":"10.1007\/s10586-024-04849-x","volume":"28","author":"S Pasupathi","year":"2025","unstructured":"Pasupathi, S., Kumar, R., Pavithra, L.: Proactive DDoS detection: Integrating packet marking, traffic analysis, and machine learning for enhanced network security. Cluster Comput. 28(3), 210 (2025)","journal-title":"Cluster Comput."},{"key":"6018_CR30","doi-asserted-by":"publisher","first-page":"103654","DOI":"10.1016\/j.cose.2023.103654","volume":"138","author":"A Guerra-Manzanares","year":"2024","unstructured":"Guerra-Manzanares, A.: Machine learning for android malware detection: Mission accomplished? A comprehensive review of open challenges and future perspectives. Computers Secur. 138, 103654 (2024)","journal-title":"Computers Secur."},{"key":"6018_CR31","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1016\/j.compeleceng.2017.11.028","volume":"69","author":"Z-U Rehman","year":"2018","unstructured":"Rehman, Z.-U., et al.: Machine learning-assisted signature and heuristic-based detection of malwares in android devices. Comput. Electr. Eng. 69, 828\u2013841 (2018)","journal-title":"Comput. Electr. Eng."},{"key":"6018_CR32","doi-asserted-by":"crossref","unstructured":"Xu, K., Li, Y., Deng, R.H., Chen, K.: Deeprefiner: Multi-layer android malware detection system applying deep neural networks, in IEEE European Symposium on Security and Privacy (EuroS&P), 2018: IEEE, 473\u2013487 (2018)","DOI":"10.1109\/EuroSP.2018.00040"},{"issue":"18","key":"6018_CR33","doi-asserted-by":"publisher","first-page":"11499","DOI":"10.1007\/s00521-021-05816-y","volume":"33","author":"K Bakour","year":"2021","unstructured":"Bakour, K., \u00dcnver, H.M.: DeepVisDroid: Android malware detection by hybridizing image-based features with deep learning techniques. Neural Comput. Appl. 33(18), 11499\u201311516 (2021)","journal-title":"Neural Comput. Appl."},{"key":"6018_CR34","doi-asserted-by":"publisher","first-page":"29344","DOI":"10.1109\/ACCESS.2023.3260977","volume":"11","author":"X Zhang","year":"2023","unstructured":"Zhang, X., Wang, J., Xu, J., Gu, C.: Detection of android malware based on deep forest and feature enhancement. IEEE Access. 11, 29344\u201329359 (2023)","journal-title":"IEEE Access."},{"key":"6018_CR35","unstructured":"Jordaney, R., et al.: Transcend: Detecting concept drift in malware classification models, in 26th USENIX security symposium (USENIX security 17), 625\u2013642 (2017)"},{"key":"6018_CR36","doi-asserted-by":"crossref","unstructured":"Narayanan, A., Yang, L., Chen, L., Jinliang, L.: Adaptive and scalable android malware detection through online learning, in International Joint Conference on Neural Networks (IJCNN), 2016: IEEE, 2484\u20132491 (2016)","DOI":"10.1109\/IJCNN.2016.7727508"},{"issue":"2","key":"6018_CR37","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3313391","volume":"22","author":"L Onwuzurike","year":"2019","unstructured":"Onwuzurike, L., Mariconti, E., Andriotis, P., Cristofaro, E.D., Ross, G., Stringhini, G.: Mamadroid: Detecting android malware by Building Markov chains of behavioral models (extended version). ACM Trans. Priv. Secur. (TOPS). 22(2), 1\u201334 (2019)","journal-title":"ACM Trans. Priv. Secur. (TOPS)"},{"issue":"6","key":"6018_CR38","doi-asserted-by":"publisher","first-page":"1455","DOI":"10.1109\/TIFS.2018.2879302","volume":"14","author":"H Cai","year":"2018","unstructured":"Cai, H., Meng, N., Ryder, B., Yao, D.: Droidcat: Effective android malware detection and categorization via app-level profiling. IEEE Trans. Inf. Forensics Secur. 14(6), 1455\u20131470 (2018)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"6018_CR39","doi-asserted-by":"crossref","unstructured":"Xu, K., Li, Y., Deng, R., Chen, K., Xu, J.: Droidevolver: Self-evolving android malware detection system, in 2019 IEEE European Symposium on Security and Privacy (EuroS&P), IEEE, 47\u201362 (2019)","DOI":"10.1109\/EuroSP.2019.00014"},{"issue":"4","key":"6018_CR40","doi-asserted-by":"publisher","first-page":"6668","DOI":"10.1109\/JIOT.2019.2909745","volume":"6","author":"T Lei","year":"2019","unstructured":"Lei, T., Qin, Z., Wang, Z., Li, Q., Ye, D.: EveDroid: Event-aware android malware detection against model degrading for IoT devices. IEEE Internet Things J. 6(4), 6668\u20136680 (2019)","journal-title":"IEEE Internet Things J."},{"key":"6018_CR41","unstructured":"Pendlebury, F., Pierazzi, F., Jordaney, R., Kinder, J., Cavallaro, L.: {TESSERACT}: Eliminating experimental bias in malware classification across space and time, in 28th USENIX security symposium (USENIX Security 19), 729\u2013746 (2019)"},{"key":"6018_CR42","doi-asserted-by":"crossref","unstructured":"Barbero, F., Pendlebury, F., Pierazzi, F., Cavallaro, L.: Transcending transcend: Revisiting malware classification in the presence of concept drift, in 2022 IEEE Symposium on Security and Privacy (SP), IEEE, 805\u2013823 (2022)","DOI":"10.1109\/SP46214.2022.9833659"},{"key":"6018_CR43","doi-asserted-by":"crossref","unstructured":"Zhang, X., et al.: Enhancing state-of-the-art classifiers with api semantics to detect evolved android malware, in Proceedings of the 2020 ACM SIGSAC conference on computer and communications security, 757\u2013770 (2020)","DOI":"10.1145\/3372297.3417291"},{"issue":"2","key":"6018_CR44","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3371924","volume":"29","author":"H Cai","year":"2020","unstructured":"Cai, H.: Assessing and improving malware detection sustainability through app evolution studies. ACM Trans. Softw. Eng. Methodol. (TOSEM). 29(2), 1\u201328 (2020)","journal-title":"ACM Trans. Softw. Eng. Methodol. (TOSEM)"},{"key":"6018_CR45","doi-asserted-by":"crossref","unstructured":"Sihag, V., Choudhary, G., Vardhan, M., Singh, P., Seo, J.T.: PICAndro: Packet InspeCtion-Based Android Malware Detection, Security and Communication Networks, 2021(1), 9099476 (2021)","DOI":"10.1155\/2021\/9099476"},{"key":"6018_CR46","doi-asserted-by":"crossref","unstructured":"Alkahtani, H., Aldhyani, T.H.: Artificial intelligence algorithms for malware detection in android-operated mobile devices, Sensors, 22(6), 2268 (2022)","DOI":"10.3390\/s22062268"},{"key":"6018_CR47","unstructured":"Prokhorenkova, L., Gusev, G., Vorobev, A., Dorogush, A.V., Gulin, A.: CatBoost: Unbiased boosting with categorical features. Adv. Neural. Inf. Process. Syst. 31, 1\u201311 (2018)"},{"key":"6018_CR48","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1016\/j.eswa.2016.08.065","volume":"67","author":"M Abdar","year":"2017","unstructured":"Abdar, M., Zomorodi-Moghadam, M., Das, R., Ting, I.-H.: Performance analysis of classification algorithms on early detection of liver disease. Expert Syst. Appl. 67, 239\u2013251 (2017)","journal-title":"Expert Syst. Appl."},{"key":"6018_CR49","doi-asserted-by":"crossref","unstructured":"Pinheiro Cinelli, L., Ara\u00fajo Marins, M., Barros da Silva, E.A., Lima Netto, S.: Variational autoencoder. In: Variational Methods for Machine Learning with Applications To Deep Networks, pp.111\u2013149. Springer, (2021)","DOI":"10.1007\/978-3-030-70679-1_5"},{"key":"6018_CR50","unstructured":"Doersch, C.: Tutorial on variational autoencoders, arXiv preprint arXiv:1606.05908, (2016)"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06018-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-026-06018-8","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06018-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T11:40:21Z","timestamp":1783683621000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-026-06018-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,30]]},"references-count":50,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2026,5]]}},"alternative-id":["6018"],"URL":"https:\/\/doi.org\/10.1007\/s10586-026-06018-8","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,30]]},"assertion":[{"value":"27 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 January 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 February 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 March 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval"}}],"article-number":"228"}}