{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,7]],"date-time":"2026-02-07T09:10:38Z","timestamp":1770455438131,"version":"3.49.0"},"reference-count":259,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/OAPA.html"}],"funder":[{"name":"National Key R&D Program of China","award":["2017YFB0802805"],"award-info":[{"award-number":["2017YFB0802805"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1736114"],"award-info":[{"award-number":["U1736114"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2918139","type":"journal-article","created":{"date-parts":[[2019,5,22]],"date-time":"2019-05-22T16:04:23Z","timestamp":1558541063000},"page":"67602-67631","source":"Crossref","is-referenced-by-count":88,"title":["Constructing Features for Detecting Android Malicious Applications: Issues, Taxonomy and Directions"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2965-6196","authenticated-orcid":false,"given":"Wei","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Meichen","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenzhen","family":"Gao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2079-0989","authenticated-orcid":false,"given":"Guangquan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hequn","family":"Xian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuanyuan","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangliang","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref170","first-page":"1","article-title":"DySign: Dynamic fingerprinting for the automatic detection of Android malware","volume":"abs 1702","author":"karbab","year":"2017","journal-title":"CoRR"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3138838"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/3041008.3041010"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1109\/WIW.2016.040"},{"key":"ref173","first-page":"1","article-title":"DynaLog: An automated dynamic analysis framework for characterizing Android applications","author":"alzaylaee","year":"2016","journal-title":"Proc Int Conf Cyber Secur Protection Digit Services (Cyber Secur )"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2018.03.018"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.08.072"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1145\/3021460.3021485"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.02.040"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2017.08.216"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.06.001"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.375"},{"key":"ref38","first-page":"714","article-title":"Fest: A feature extraction and selection tool for Android malware detection","author":"zhao","year":"2016","journal-title":"Proc Computers and Communications"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2791405.2791558"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2523514.2523539"},{"key":"ref37","first-page":"300","article-title":"Machine learning for Android malware detection using permission and api calls","author":"peiravian","year":"2014","journal-title":"Proc IEEE Int Conf Tools Artif Intell"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref35","first-page":"440","article-title":"Static malware analysis using machine learning methods","author":"nath","year":"2014","journal-title":"Proc Int Conf Secur Comput Netw Distrib Syst"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2012.18"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.05.035"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-016-0703-5"},{"key":"ref185","first-page":"701","article-title":"Android malware detection from Google Play meta-data: Selection of important features","author":"mu\u00f1oz","year":"2015","journal-title":"Proc CNSR"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2536605"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2018.06.006"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2879302"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/DESEC.2017.8073813"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/UEMCON.2016.7777867"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI.2016.7849904"},{"key":"ref186","first-page":"598","article-title":"Mmda: Metadata based malware detection on Android","author":"wang","year":"2017","journal-title":"Proc Int Conf Comput Intell Secur"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557587"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MobileCloud.2014.22"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176336"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818038"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295141"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2014.6911805"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660357"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.52"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.11.001"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939931"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-016-2283-y"},{"key":"ref154","article-title":"Detection and visualization of Android malware behavior","volume":"2016","author":"jarqu\u00edn","year":"2016","journal-title":"J Elect Comput Eng"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1155\/2016\/6860217"},{"key":"ref156","first-page":"1","article-title":"Man in the binder: He who controls IPC, controls the droid","author":"artenstein","year":"2014","journal-title":"Black Hat"},{"key":"ref155","first-page":"785","article-title":"PowerSpy: Location tracking using mobile device power analysis","author":"michalevsky","year":"2015","journal-title":"Proc Usenix Secur Symp"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.7763\/IJCCE.2014.V3.310"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/ISBAST.2014.7013120"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2014.8.1.22"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/NSysS.2015.7043530"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2015.27"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSec.2015.21"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"key":"ref59","first-page":"1","article-title":"Comparative evaluation of machine learning-based malware detection on Android","author":"hahn","year":"2016","journal-title":"Proc Sicherheit"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2015.36"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.009"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2015.37"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2014.0099"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978304"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931043"},{"key":"ref52","first-page":"99","article-title":"String-based malware detection for Android environments","author":"mart\u00edn","year":"2016","journal-title":"Proc Int Symp Intell Distrib Comput"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.57"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/TSA.2016.13"},{"key":"ref166","first-page":"2771","article-title":"Secure HybridApp: A detection method on the risk of privacy leakage in HTML5 hybrid applications based on dynamic taint tracking","author":"sun","year":"2016","journal-title":"Proc 2nd IEEE Int Conf Comput Commun (ICCC)"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2017.8074845"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.237"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2740169"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.215"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2017.31"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2017.8074847"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274726"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.04.041"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.05.022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2847447"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2017.8038362"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.04.001"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2016.03.004"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2016.2615307"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/ISTEL.2016.7881801"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/ISEASP.2017.7976989"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.373"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2016.0127"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2355839"},{"key":"ref48","first-page":"727","article-title":"DroidChain: A novel malware detection method for Android based on behavior chain","author":"wang","year":"2015","journal-title":"Proc Security Commun Netw"},{"key":"ref47","first-page":"673","article-title":"API sequences based malware detection for Android","author":"zhu","year":"2016","journal-title":"Proc IEEE Int Conf Auton Trusted Comput IEEE Int Conf Scalable Comput Commun ITS Associated Workshops Ubiquitous Intell Comput"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11203-9_10"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.10.004"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2016.09.006"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2016.03.003"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2016.7727508"},{"key":"ref72","first-page":"414","article-title":"Evaluation of Android anti-malware techniques against dalvik bytecode obfuscation","author":"faruki","year":"2015","journal-title":"Proc IEEE Int Conf Trust Secur Privacy Comput Commun"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1016\/S1005-8885(14)60506-9"},{"key":"ref70","first-page":"754","article-title":"Malware detection in Android-based mobile environments using optimum-path forest","author":"da costa","year":"2016","journal-title":"Proc IEEE Int Conf Mach Learn Appl"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.11.007"},{"key":"ref77","first-page":"1","article-title":"SigPID: Significant permission identification for Android malware detection","author":"sun","year":"2017","journal-title":"Proc 5th Int conf Malicious Unwanted Softw"},{"key":"ref74","first-page":"527","article-title":"WHYPER: Towards automating risk assessment of mobile applications","author":"pandita","year":"2013","journal-title":"Proc Usenix Security Conf"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19713-5_33"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.03.011"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.11.011"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.01.001"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2774991"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19644-2_35"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/IIAI-AAI.2016.237"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-01854-6_48"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2013.88"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2013.0095"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1504\/IJSPM.2015.072522"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2015.88"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/IC3.2015.7346711"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/TST.2016.7399288"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.14738\/tmlai.23.261"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.04.001"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1145\/2663761.2664223"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2800003"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666630"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897860"},{"key":"ref95","article-title":"Poster: Android collusive data leaks with flow-sensitive DIALDroid dataset","author":"bosu","year":"2017","journal-title":"Proc IEEE Eur Symp Secur Privacy (EuroS P)"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019793"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.11.011"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.14257\/ijhit.2016.9.3.19"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-010-0148-x"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/CIC.2017.00021"},{"key":"ref192","first-page":"50","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets","volume":"25","author":"zhou","year":"2012","journal-title":"Proc NDSS"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/ICITECH.2017.8080041"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766507"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-017-0446-0"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-018-0803-6"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/EST.2017.8090410"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.01.019"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3110025.3116211"},{"key":"ref81","first-page":"19","article-title":"Android security via static program analysis","author":"feng","year":"2017","journal-title":"Proc Workshop MOBISYS Ph D Forum"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3105826"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2978192.2978218"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029823"},{"key":"ref89","doi-asserted-by":"crossref","first-page":"259","DOI":"10.1145\/2666356.2594299","article-title":"Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps","volume":"49","author":"arzt","year":"2014","journal-title":"ACM SIGPLAN Notices"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2843859.2843860"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134642"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052645"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134636"},{"key":"ref200","first-page":"380","article-title":"Attack tree based Android malware detection with hybrid analysis","author":"zhao","year":"2015","journal-title":"Proc IEEE Int Conf Trust Secur Privacy Comput Commun"},{"key":"ref101","first-page":"62","article-title":"nAdroid: Statically detecting ordering violations in Android applications","author":"fu","year":"0","journal-title":"Proc Int Symp Code Generation Optimization (CGO)"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.07.030"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2347206"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1145\/2940343.2940348"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592796"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1186\/s40064-015-1356-1"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2016.03.028"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2014.12.014"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.115"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0250-0"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.61"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.11"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23384"},{"key":"ref212","first-page":"569","article-title":"Research on Android intent security detection based on machine learning","author":"lv","year":"2017","journal-title":"Proc IET Int Conf Inf Sci Control Eng"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2017.12"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1145\/3077286.3077288"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1049\/cje.2017.07.001"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68542-7_48"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2017.11.028"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1145\/2802130.2802132"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134601"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.01.001"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.006"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2792941"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.06.049"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2019.2903186"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.1145\/3293475.3293489"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2018.00020"},{"key":"ref225","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238188"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1145\/3241539.3267768"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2017.11.028"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICISA.2014.6847364"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2888568"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/3264746.3264775"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274731"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435379"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046619"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7511573"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA.2015.7166128"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-017-8798-7_68"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/2875475.2875487"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1145\/2875475.2875481"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.04.007"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029825"},{"key":"ref230","doi-asserted-by":"publisher","DOI":"10.1155\/2015\/479174"},{"key":"ref231","first-page":"767","article-title":"Manilyzer: Automated Android malware detection through manifest analysis","author":"feldman","year":"2015","journal-title":"Proc IEEE Int Conf Mobile Ad hoc Sensor Syst"},{"key":"ref239","first-page":"1","article-title":"Soot: A Java bytecode optimization framework","author":"vall\u00e9e-rai","year":"1999","journal-title":"Proc Conf Centre Adv Stud Collaborative Res (CASCON)"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1145\/3014812.3014888"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.103"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.07.013"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3055156"},{"key":"ref236","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.12.005"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-014-1511-6"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2016.10.012"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1145\/2804345.2804349"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2800004"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-014-0226-7"},{"key":"ref140","first-page":"21","article-title":"IntelliDroid: A targeted input generator for the dynamic analysis of Android malware","volume":"16","author":"wong","year":"2016","journal-title":"Proc NDSS"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7511424"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/ICEEI.2015.7352512"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1145\/2567948.2579366"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11698-3_43"},{"key":"ref2","year":"2019","journal-title":"Data of Appbrain"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.25"},{"key":"ref1","year":"2019","journal-title":"360 Internet Security Center"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019797"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.10.023"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2014.06.018"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2014.0353"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1145\/2259051.2259052"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2008.04.006"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2006.73"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1145\/1982185.1982512"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-28648-6_105"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2009.06.040"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2809727"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2018.08.003"},{"key":"ref107","doi-asserted-by":"crossref","first-page":"333","DOI":"10.1016\/j.future.2018.11.021","article-title":"A machine learning based approach to detect malicious Android apps using discriminant system calls","volume":"94","author":"vinod","year":"2019","journal-title":"Future Gener Comput Syst"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232825"},{"key":"ref105","first-page":"1","article-title":"Exploring sensor usage behaviors of Android applications based on data flow analysis","author":"liu","year":"2015","journal-title":"Proc IEEE Int Perform Comput Commun Conf"},{"key":"ref104","first-page":"11","article-title":"Lightweight, obfuscation-resilient detection and family identification of Android malware","volume":"26","author":"garcia","year":"2016","journal-title":"ACM Trans Softw Eng Methodol"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2687880"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2835654"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2771228"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2806891"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180214"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.05.005"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1109\/I-SPAN.2009.49"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2386139"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1109\/ITNG.2014.71"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2007.10.010"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2017.04.003"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01701-9_10"},{"key":"ref256","first-page":"3","article-title":"A survey of Android security threats and defenses","volume":"6","author":"rashidi","year":"2015","journal-title":"JoWUA"},{"key":"ref259","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.066"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2523912"},{"key":"ref258","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232823"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2353996"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04283-1_6"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2462096.2462100"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.61"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274744"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635869"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3287921.3287977"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660359"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435377"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/3199478.3199492"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664275"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2018.8390391"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.190"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.07.013"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2017.04.044"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3194244.3194257"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/3194452.3194465"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3264746.3264780"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2018.07.015"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08720030.pdf?arnumber=8720030","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T11:54:54Z","timestamp":1641988494000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8720030\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":259,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2918139","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}