{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T01:16:09Z","timestamp":1783991769117,"version":"3.55.0"},"reference-count":312,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2018YFB0803605"],"award-info":[{"award-number":["2018YFB0803605"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Basic Scientific Research Projects of National Defense Science, Technology, and Industry Technology","award":["JSZL2017601C-1"],"award-info":[{"award-number":["JSZL2017601C-1"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61897069"],"award-info":[{"award-number":["61897069"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61831003"],"award-info":[{"award-number":["61831003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3006143","type":"journal-article","created":{"date-parts":[[2020,7,1]],"date-time":"2020-07-01T21:11:26Z","timestamp":1593637886000},"page":"124579-124607","source":"Crossref","is-referenced-by-count":315,"title":["A Review of Android Malware Detection Approaches Based on Machine Learning"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2274-783X","authenticated-orcid":false,"given":"Kaijun","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shengwei","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9582-0698","authenticated-orcid":false,"given":"Guoai","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miao","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dawei","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haifeng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref275","doi-asserted-by":"publisher","DOI":"10.1007\/BF02295996"},{"key":"ref274","first-page":"39","article-title":"On estimating model accuracy with repeated cross-validation","author":"vanwinckelen","year":"2012","journal-title":"Proc Belgian-Dutch Conf Mach Learn"},{"key":"ref277","doi-asserted-by":"publisher","DOI":"10.2307\/2279372"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1111\/j.1541-0420.2010.01408.x"},{"key":"ref271","doi-asserted-by":"publisher","DOI":"10.1214\/ss\/1177013437"},{"key":"ref270","doi-asserted-by":"publisher","DOI":"10.1109\/MAP.2009.5251252"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1111\/j.2517-6161.1974.tb00994.x"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2017.2778147"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1214\/09-SS051"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19644-2_35"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029823"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref173","first-page":"207","article-title":"An investigation of the classifiers to detect Android malicious apps","author":"sharma","year":"2016","journal-title":"Proc 2nd Int Congr Inf Commun Technol (ICICT)"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11203-9_10"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2017.7876235"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2013.53"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-016-2283-y"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098026"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019793"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2012.013012.00028"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2386139"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.5121\/ijdps.2014.5403"},{"key":"ref32","first-page":"13","article-title":"A comprehensive study for mobile Android malware detection","author":"ricky","year":"2015","journal-title":"Proc Int Conf Netw Secur Comput Sci (ICNSCS)"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2015.54"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.02.001"},{"key":"ref267","doi-asserted-by":"publisher","DOI":"10.1002\/9781118445112.stat06340"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2963145"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1109\/66.382280"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.04.001"},{"key":"ref269","author":"gerald","year":"2004","journal-title":"Applied Numerical Analysis"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3301285"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.5121\/csit.2014.4522"},{"key":"ref288","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00014"},{"key":"ref287","article-title":"Concept drifting detection and classification on data streams","author":"li","year":"2012"},{"key":"ref286","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2626320"},{"key":"ref285","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_31"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/DASC-PICom-DataCom-CyberSciTec.2017.24"},{"key":"ref283","first-page":"51","article-title":"AndRadar: Fast discovery of Android applications in alternative markets","volume":"2014","author":"lindorfer","year":"0","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2017.8322742"},{"key":"ref282","first-page":"729","article-title":"TESSERACT: Eliminating experimental bias in malware classification across space and time","author":"pendlebury","year":"2019","journal-title":"Proc 28th USENIX Security Symp"},{"key":"ref281","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9352-6"},{"key":"ref280","author":"hollander","year":"2013","journal-title":"Nonparametric Statistical Methods"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1145\/2462096.2462100"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2012.18"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2018.8433204"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/ICSGEA.2017.59"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2745575"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2016.7792435"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/WiMOB.2014.6962194"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1080\/01969722.2013.803889"},{"key":"ref28","first-page":"47","article-title":"A survey on Android malware detection","volume":"2","author":"yadav","year":"2016","journal-title":"Int J New Technol Res"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2016.070262"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2015.50"},{"key":"ref29","first-page":"39","article-title":"A survey of Android malware detection strategy and techniques","author":"sharma","year":"2015","journal-title":"Proc Int Conf ICT Sustain Develop"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01535-0_19"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/IEMCON.2018.8614895"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"7","DOI":"10.24018\/ejers.2018.3.2.302","article-title":"Smart devices threats, vulnerabilities and malware detection approaches: A survey","volume":"3","author":"balaganesh","year":"2018","journal-title":"European Journal of Engineering Research and Science"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3073559"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3017427"},{"key":"ref278","doi-asserted-by":"publisher","DOI":"10.1186\/s12859-017-1486-2"},{"key":"ref26","first-page":"629","article-title":"Research trends in malware detection on Android devices","author":"aneja","year":"2017","journal-title":"Proc Int Conf Recent Develop Sci Eng Technol"},{"key":"ref279","article-title":"Distribution-free multiple comparisons","author":"nemenyi","year":"1963"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s41870-017-0010-2"},{"key":"ref293","first-page":"625","article-title":"Transcend: Detecting concept drift in malware classification models","volume":"2017","author":"jordaney","year":"0","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref50","year":"0","journal-title":"Secure an Android Device"},{"key":"ref292","doi-asserted-by":"publisher","DOI":"10.1145\/2523813"},{"key":"ref51","year":"0","journal-title":"Platform Architect"},{"key":"ref295","first-page":"1467","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"2012","journal-title":"Proc 29th Int Conf Mach Learn"},{"key":"ref294","doi-asserted-by":"publisher","DOI":"10.1145\/3371924"},{"key":"ref297","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2700270"},{"key":"ref296","doi-asserted-by":"publisher","DOI":"10.1145\/3003816"},{"key":"ref299","article-title":"Adversarial attacks and defences: A survey","author":"chakraborty","year":"2018","journal-title":"arXiv 1810 00069"},{"key":"ref298","first-page":"387","article-title":"Evasion attacks against machine learning at test time","author":"biggio","year":"2013","journal-title":"Proc Eur Conf Mach Learn Knowl Discovery Databases"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1063\/1.4992953"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/CCIS.2016.7790261"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2792941"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1601491"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2353996"},{"key":"ref291","first-page":"242","article-title":"Transfer learning","author":"torrey","year":"2009","journal-title":"Handbook of Research on Machine Learning Applications"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/SOCA.2016.14"},{"key":"ref290","article-title":"Active learning literature survey","author":"settles","year":"2009"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2523912"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.5755\/j01.itc.48.2.21457"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-010-0148-x"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-12280-9_13"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.07.030"},{"key":"ref289","doi-asserted-by":"crossref","first-page":"119","DOI":"10.5121\/ijdkp.2013.3408","article-title":"Methods for incremental learning: A survey","volume":"3","author":"ade","year":"2013","journal-title":"International Journal of Data Mining & Knowledge Management Process"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.101613.00077"},{"key":"ref58","first-page":"42","article-title":"Software and cyber security-A survey","volume":"29","author":"liu","year":"2018","journal-title":"J Softw"},{"key":"ref57","first-page":"1385","article-title":"Survey of Android OS security","volume":"51","author":"zhang","year":"2014","journal-title":"J Comput Res Develop"},{"key":"ref56","author":"sikorski","year":"2012","journal-title":"Practical Malware Analysis The Hands-On Guide to Dissecting Malicious Software"},{"key":"ref55","author":"skoudis","year":"2004","journal-title":"Malware Fighting Malicious Code"},{"key":"ref54","year":"0","journal-title":"Android 10"},{"key":"ref53","author":"elenkov","year":"2015","journal-title":"Android Security Internals An In-Depth Guide to Android's Security Architecture"},{"key":"ref52","first-page":"255","article-title":"WrapDroid: Flexible and fine-grained scheme towards regulating behaviors of Android apps","author":"wang","year":"2014","journal-title":"Proc Int Conf Inf Secur Cryptol (ICISC)"},{"key":"ref40","year":"0","journal-title":"ACM Digital Libraries"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47121-1_5"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.241"},{"key":"ref165","first-page":"86","article-title":"DroidAPIMiner: Mining API-level features for robust malware detection in Android","author":"aafer","year":"2013","journal-title":"Proc Int Conf Secur Privacy Commun Syst"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.03.170"},{"key":"ref163","first-page":"106","article-title":"Android malware detection method based on permission sequential pattern mining algorithm","volume":"34","author":"yang","year":"2013","journal-title":"J Commun"},{"key":"ref162","first-page":"289","article-title":"Puma: Permission usage to detect malware in Android","author":"sanz","year":"2012","journal-title":"Proc Int Joint Conf CISIS'12-ICEUTE'12-SOCO'12 Special Sessions"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295141"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/ICEEOT.2016.7754896"},{"key":"ref4","first-page":"58","article-title":"Securing Android: A survey, taxonomy, and challenges","volume":"47","author":"tan","year":"2015","journal-title":"ACM Comput Surv"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2017.2789219"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2019.8757523"},{"key":"ref5","first-page":"45","article-title":"Research progress on Android security","volume":"27","author":"qing","year":"2016","journal-title":"J Softw"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2017.081005"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.5121\/ijmnct.2017.7601"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCI.2018.8441295"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2372251.2372257"},{"key":"ref157","author":"goldberg","year":"1989","journal-title":"Genetic Algorithms in Search Optimization and Machine Learning"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-018-0125-x"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022602019183"},{"key":"ref46","year":"0","journal-title":"GoogleScholar"},{"key":"ref45","year":"0","journal-title":"Springerlink"},{"key":"ref48","year":"0","journal-title":"Academia"},{"key":"ref47","year":"0","journal-title":"ResearchGATE"},{"key":"ref42","year":"0","journal-title":"Web of Science"},{"key":"ref41","year":"0","journal-title":"Science Direct"},{"key":"ref44","year":"0","journal-title":"Cornell University Library"},{"key":"ref43","year":"0","journal-title":"IEEE Xplore Digital Library"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.14445\/22312803\/IJCTT-V8P105"},{"key":"ref72","first-page":"1301","article-title":"A survey on machine learning: Concept, algorithms and applications","volume":"5","author":"das","year":"2017","journal-title":"Int J Innov Res Comput Commun Eng"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1201\/9781315371658"},{"key":"ref70","year":"0","journal-title":"Machine Learning"},{"key":"ref76","author":"mohri","year":"2018","journal-title":"Foundations of Machine Learning"},{"key":"ref77","author":"murphy","year":"2012","journal-title":"Machine Learning A Probabilistic Perspective"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1613\/jair.301"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/219717.219768"},{"key":"ref312","doi-asserted-by":"publisher","DOI":"10.1037\/1082-989X.5.2.241"},{"key":"ref78","author":"marsland","year":"2015","journal-title":"Machine Learning An Algorithmic Perspective"},{"key":"ref311","doi-asserted-by":"publisher","DOI":"10.1186\/cc1493"},{"key":"ref79","author":"zhou","year":"2016","journal-title":"Machine Learning"},{"key":"ref310","doi-asserted-by":"publisher","DOI":"10.2307\/1169648"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046618"},{"key":"ref62","year":"0","journal-title":"Android Security & Privacy 2018 Year in Review"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref305","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.559"},{"key":"ref63","author":"michalski","year":"1983","journal-title":"Machine Learning An Artificial Intelligence Approach"},{"key":"ref304","doi-asserted-by":"publisher","DOI":"10.1023\/A:1019956318069"},{"key":"ref64","author":"mitchell","year":"1997","journal-title":"Machine Learning"},{"key":"ref307","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897873"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-21579-2_9"},{"key":"ref306","article-title":"Hypothesis testing for high-dimensional multinomials: A selective review","author":"balakrishnan","year":"2017","journal-title":"arXiv 1712 06120"},{"key":"ref66","author":"domingos","year":"2015","journal-title":"The Master Algorithm How the Quest for the Ultimate Learning Machine Will Remake Our World"},{"key":"ref301","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007601015854"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-007-9052-3"},{"key":"ref300","first-page":"6","article-title":"Why question machine learning evaluation methods","author":"japkowicz","year":"2006","journal-title":"Natl Conf Artificial Intelligence (AAAI)"},{"key":"ref68","first-page":"4","article-title":"Survey on five tribes of machine learning and the main algorithms","volume":"18","author":"li","year":"2019","journal-title":"Software Guide"},{"key":"ref303","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-013-9406-y"},{"key":"ref69","first-page":"1174","article-title":"Machine learning algorithms: A review","volume":"7","author":"dey","year":"2016","journal-title":"Int J Comput Sci Inf Technol"},{"key":"ref302","article-title":"Meta-learning: A survey","author":"vanschoren","year":"2018","journal-title":"arXiv 1810 03548"},{"key":"ref309","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-16612-9_11"},{"key":"ref308","first-page":"883","article-title":"Hypothesis exploration for malware detection using planning","author":"sohrabi","year":"2013","journal-title":"Proc 27th AAAI Conf Artif Intell"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2870534"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2015.0211"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2017.8074847"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2019.8685502"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/ECACE.2019.8679493"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/ISEASP.2017.7976989"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2013.11.024"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00067"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCE.2018.8441737"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1049\/cje.2018.09.008"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2835654"},{"key":"ref92","first-page":"436","article-title":"Droidkin: Lightweight detection of Android apps similarity","author":"gonzalez","year":"2014","journal-title":"Proc Conf Secur Privacy Commun Netw"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/ICSESP.2018.8376705"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/ICETAS.2018.8629270"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_9"},{"key":"ref98","first-page":"199","article-title":"A hybrid system based on multi-agent system in the data preprocessing stage","volume":"7","author":"kobkul","year":"2010","journal-title":"Int J Comput Sci Inf Secur"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/EISIC.2012.34"},{"key":"ref96","author":"han","year":"2012","journal-title":"Data Mining Concepts and Techniques"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10247-4"},{"key":"ref82","year":"0","journal-title":"VirusTotal"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2396756.2396759"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3121264.3121267"},{"key":"ref83","year":"0","journal-title":"AndroBugs_Framework"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-60876-1_12"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2919796"},{"key":"ref85","year":"2020","journal-title":"VirusShare com-Because Sharing is caring"},{"key":"ref86","year":"2020","journal-title":"Contagio Mobile Mobile Malware Mini Dump"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref88","year":"2020","journal-title":"Androzoo"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/iThings-GreenCom-CPSCom-SmartData.2016.166"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/INTELCCT.2017.8324010"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref209","first-page":"176","article-title":"Analysis of malware detection techniques in Android","volume":"3","author":"sawle","year":"2014","journal-title":"Int J Comput Sci Mob Comput"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-016-0343-z"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/GreenCom-iThings-CPSCom.2013.122"},{"key":"ref201","first-page":"251","article-title":"A study of machine learning classifiers for anomaly-based mobile botnet detection","volume":"26","author":"feizollah","year":"2013","journal-title":"Malaysian J Comput Sci"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/NGMAST.2014.57"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2879302"},{"key":"ref208","article-title":"Android malware detection and analysis of malware behavior","author":"du","year":"2018"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-014-0226-7"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.25"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0250-0"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2631434"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2800003"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE.2016.7430561"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897860"},{"key":"ref215","first-page":"873","article-title":"Detection of Android malware by static analysis on permissions and sensitive functions","author":"su","year":"2016","journal-title":"Proc 8th Int Conf Ubiquitous Future Netw (ICUFN)"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1109\/I2CT.2017.8226303"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2771470"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2536605"},{"key":"ref219","year":"0","journal-title":"Scikit-learn Machine Learning in Python"},{"key":"ref220","first-page":"562","article-title":"The optimality of Naive Bayes","author":"zhang","year":"2004","journal-title":"Proc Int Florida Artif Intell Res Soc Conf (FLAIRS)"},{"key":"ref222","author":"harrington","year":"2012","journal-title":"Machine Learning in Action South Hill Drive"},{"key":"ref221","first-page":"2","article-title":"An overview on theory and algorithm of support vector machines","volume":"40","author":"ding","year":"2011","journal-title":"J Univ Electron Sci Technol China"},{"key":"ref229","author":"hebb","year":"1949","journal-title":"The Organization of Behavior of A Neuropsychological Theory"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.1007\/BF02478259"},{"key":"ref227","author":"zhang","year":"2018","journal-title":"All Illustrated Guide to Deep Learning"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1016\/0893-6080(88)90020-2"},{"key":"ref225","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref224","author":"alpaydin","year":"2020","journal-title":"Introduction to Machine Learning"},{"key":"ref223","article-title":"Research on Android malicious application detection based on machine learning","author":"tian","year":"2017"},{"key":"ref127","article-title":"Research on two-stage feature selection methods in machine learning","author":"liu","year":"2015"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.1990.118160"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/34.824819"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-57868-4_57"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-56602-3_138"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/T-C.1971.223398"},{"key":"ref130","article-title":"Research on feature selection for machine learning","author":"sun","year":"2013"},{"key":"ref133","author":"devijver","year":"1982","journal-title":"Pattern Recognition a Statistical Approach"},{"key":"ref134","first-page":"419","article-title":"Feature selection and classification-a probabilistic wrapper approach","author":"liu","year":"1996","journal-title":"9th Int Conf Ind Eng Appl Artif Intell Expert Syst (IEA\/AIE)"},{"key":"ref131","first-page":"547","article-title":"Learning with many irrelevant features","author":"almuallim","year":"1991","journal-title":"Proc 9th Nat Conf Artif Intell"},{"key":"ref132","first-page":"319","article-title":"A probabilistic approach to feature selection-a filter solution","author":"liu","year":"1996","journal-title":"Proc 13th Int Conf Machine Learning (ICML)"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35289-8_32"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1162\/089976602760128018"},{"key":"ref230","author":"rumelhart","year":"1988","journal-title":"Learning Internal Representations by Error Propagation"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1162\/neco.2008.04-07-510"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1007\/BF00058655"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-009-9124-7"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2014.09.003"},{"key":"ref234","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"lecun","year":"2015","journal-title":"Nature"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-9326-7"},{"key":"ref236","article-title":"Recent advances in deep learning: An overview","author":"rahman minar","year":"2018","journal-title":"arXiv 1807 08169"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883436"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.08.020"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2014.7009096"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2014.0099"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1145\/2804345.2804349"},{"key":"ref140","doi-asserted-by":"crossref","first-page":"2964","DOI":"10.3837\/tiis.2015.08.012","article-title":"Intelligent approach for Android malware detection","volume":"9","author":"abdulla","year":"2015","journal-title":"KSII Trans Internet Inf Syst"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.5220\/0006256706530662"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2017.8323954"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2016.76"},{"key":"ref2","year":"2020","journal-title":"Number of Android apps in the Google Play store"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/SSIC.2018.8556755"},{"key":"ref1","year":"2020","journal-title":"Smartphone Market Share"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/SmartIoT.2018.00034"},{"key":"ref241","author":"dabbagh","year":"2005","journal-title":"Online Learning Concepts Strategies and Application"},{"key":"ref242","author":"xu","year":"2019","journal-title":"An Illustrated Guide to Machine Learning"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2016.7473512"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2016.7727508"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.23956\/ijarcsse\/V7I1\/01113"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/WIW.2016.040"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1109\/TST.2016.7399288"},{"key":"ref246","article-title":"6thSense: A context-aware sensor-based attack detector for smart devices","author":"sikder","year":"0"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2699220"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00040"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS.2016.0155"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/4157156"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23353"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.103"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2896003"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-09770-1_3"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046619"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCT.2019.8711179"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/7247095"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/2663761.2664223"},{"key":"ref110","first-page":"344","article-title":"Detecting Android malware by applying classification techniques on images patterns","author":"yang","year":"2017","journal-title":"Proc IEEE 2nd Int Conf Cloud Comput Big Data Anal (ICCCBDA)"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47217-1_8"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.11.006"},{"key":"ref254","article-title":"A study of cross-validation and bootstrap for accuracy estimation and model selection","author":"kohavi","year":"0"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48751-4_17"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1007\/11941439_114"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1016\/S0306-4379(03)00072-3"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014063"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2009.25"},{"key":"ref259","article-title":"A review of performance evaluation measures for hierarchical classifiers","author":"costa","year":"0"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2012.6461012"},{"key":"ref258","first-page":"859","article-title":"Constructing new and better evaluation measures for machine learning","author":"huang","year":"2007","journal-title":"Proc Int Joint Conf Artif Intell"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.22247\/ijcna\/2019\/187292"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SDS.2019.8768729"},{"key":"ref13","article-title":"A review on the use of deep learning in Android malware detection","author":"naway","year":"2018","journal-title":"arXiv 1812 10360"},{"key":"ref14","first-page":"77","article-title":"Comparative evaluation of machine learning-based malware detection on Android","volume":"2016","author":"hahn","year":"0","journal-title":"Lecture Notes in Informatics Sicherheit 2016-Sicherheit Schutz und Zuverlässigkeit"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2019INI0003"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/PICECE.2019.8747224"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1002\/ett.3016"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.03.007"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-009-0125-5"},{"key":"ref18","first-page":"56","article-title":"Mobile malware detection: A survey","volume":"17","author":"hamed","year":"2019","journal-title":"Int J Comput Sci Inf Secur"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-017-9368-4"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/ICCT.2018.8600052"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2016.7502343"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.57"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2861405"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3055156"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2880731"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1016\/S1088-467X(97)00008-5"},{"key":"ref122","article-title":"A study on feature selection algorithms using information entropy","author":"liu","year":"2010"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-247-2.50037-1"},{"key":"ref260","year":"0","journal-title":"Machine Learning Glossary"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-036-2.50047-3"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.1016\/S0031-3203(96)00142-2"},{"key":"ref263","first-page":"519","article-title":"AUC: A statistically consistent and more discriminating measure than accuracy","author":"ling","year":"2003","journal-title":"Int Joint Conf on Artificial Intel (IJCAI)"},{"key":"ref264","author":"rumsey","year":"2015","journal-title":"U Can Statistics for Dummies Cheat Sheet"},{"key":"ref265","doi-asserted-by":"publisher","DOI":"10.1201\/EBK1439808184"},{"key":"ref266","author":"papoulis","year":"1991","journal-title":"Probability random variables and stochastic processes"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09130686.pdf?arnumber=9130686","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T01:09:47Z","timestamp":1641949787000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9130686\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":312,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3006143","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}