{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T09:31:09Z","timestamp":1779355869234,"version":"3.51.4"},"reference-count":9,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2020,2,11]],"date-time":"2020-02-11T00:00:00Z","timestamp":1581379200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,2,11]],"date-time":"2020-02-11T00:00:00Z","timestamp":1581379200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci. China Inf. Sci."],"published-print":{"date-parts":[[2020,3]]},"DOI":"10.1007\/s11432-018-9615-8","type":"journal-article","created":{"date-parts":[[2020,2,15]],"date-time":"2020-02-15T03:02:24Z","timestamp":1581735744000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":20,"title":["Hybrid malware detection approach with feedback-directed machine learning"],"prefix":"10.1007","volume":"63","author":[{"given":"Zhetao","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenlin","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fuyuan","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yi","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Min","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhibo","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,2,11]]},"reference":[{"key":"9615_CR1","unstructured":"G DATA. Threat situation for mobile devices worsens. https:\/\/www.gdatasoftware.com\/news\/2017\/02\/threat-situation-for-mobile-devices-worsens"},{"key":"9615_CR2","first-page":"235","volume-title":"On lightweight mobile phone application certification","author":"W Enck","year":"2009","unstructured":"Enck W, Ongtang M, McDaniel P. On lightweight mobile phone application certification. In: Proceedings of the 16th ACM Conference on Computer and Communications Security, Chicago, 2009. 235\u2013245"},{"key":"9615_CR3","first-page":"329","volume-title":"Automated static code analysis for classifying android applications using machine learning","author":"A Shabtai","year":"2010","unstructured":"Shabtai A, Fledel Y, Elovici Y. Automated static code analysis for classifying android applications using machine learning. In: Proceedings of International Conference on Computational Intelligence and Security, Nanning, 2010. 329\u2013333"},{"key":"9615_CR4","first-page":"259","volume-title":"FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps","author":"S Arzt","year":"2014","unstructured":"Arzt S, Rasthofer S, Fritz C, et al. FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. In: Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation, New York, 2014. 259\u2013269"},{"key":"9615_CR5","first-page":"393","volume-title":"TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones","author":"W Enck","year":"2010","unstructured":"Enck W, Gilbert P, Chun B G, et al. TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In: Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation (OSDI\u201910), Berkeley, 2010. 393\u2013407"},{"key":"9615_CR6","first-page":"15","volume-title":"Crowdroid: behavior-based malware detection system for Android","author":"I Burguera","year":"2011","unstructured":"Burguera I, Zurutuza U, Nadjm-Tehrani S. Crowdroid: behavior-based malware detection system for Android. In: Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM\u201911), New York, 2011. 15\u201326"},{"key":"9615_CR7","doi-asserted-by":"publisher","first-page":"646","DOI":"10.1016\/j.jnca.2012.10.004","volume":"36","author":"R Islam","year":"2013","unstructured":"Islam R, Tian R, Batten L M, et al. Classification of malware based on integrated static and dynamic features. J Netw Comput Appl, 2013, 36: 646\u2013656","journal-title":"J Netw Comput Appl"},{"key":"9615_CR8","doi-asserted-by":"publisher","DOI":"10.1109\/UEMCON.2016.7777821","volume-title":"A hybrid analysis for mobile security threat detection","author":"Y Shi","year":"2016","unstructured":"Shi Y, You W Q, Qian K, et al. A hybrid analysis for mobile security threat detection. In: Proceedings of the 7th Annual Ubiquitous Computing, Electronics and Mobile Communication Conference (UEMCON), New York, 2016"},{"key":"9615_CR9","first-page":"62","volume-title":"DroidMat: Android malware detection through manifest and API calls tracing","author":"D J Wu","year":"2012","unstructured":"Wu D J, Mao C H, Wei T E, et al. DroidMat: Android malware detection through manifest and API calls tracing. In: Proceedings of the 7th Asia Joint Conference on Information Security, Tokyo, 2012. 62\u201369"}],"container-title":["Science China Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-018-9615-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11432-018-9615-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-018-9615-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,2,10]],"date-time":"2021-02-10T07:33:28Z","timestamp":1612942408000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11432-018-9615-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,2,11]]},"references-count":9,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2020,3]]}},"alternative-id":["9615"],"URL":"https:\/\/doi.org\/10.1007\/s11432-018-9615-8","relation":{},"ISSN":["1674-733X","1869-1919"],"issn-type":[{"value":"1674-733X","type":"print"},{"value":"1869-1919","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,2,11]]},"assertion":[{"value":"20 July 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 September 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 February 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"139103"}}