{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T12:01:49Z","timestamp":1770724909448,"version":"3.49.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1618684"],"award-info":[{"award-number":["CNS-1618684"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"ARO","award":["W911NF-13-1-0421"],"award-info":[{"award-number":["W911NF-13-1-0421"]}]},{"name":"ARO","award":["W911NF-15-1-0576"],"award-info":[{"award-number":["W911NF-15-1-0576"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1422594"],"award-info":[{"award-number":["CNS-1422594"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1505664"],"award-info":[{"award-number":["CNS-1505664"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["SBE-1422215"],"award-info":[{"award-number":["SBE-1422215"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61602210"],"award-info":[{"award-number":["61602210"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Project of Guangdong Province","award":["2015A030401043"],"award-info":[{"award-number":["2015A030401043"]}]},{"name":"Science and Technology Project of Guangdong Province","award":["2017A040405029"],"award-info":[{"award-number":["2017A040405029"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["21617408"],"award-info":[{"award-number":["21617408"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Big Data"],"published-print":{"date-parts":[[2021,6,1]]},"DOI":"10.1109\/tbdata.2018.2790439","type":"journal-article","created":{"date-parts":[[2018,1,8]],"date-time":"2018-01-08T22:36:03Z","timestamp":1515450963000},"page":"255-270","source":"Crossref","is-referenced-by-count":13,"title":["A Large-Scale Study of Android Malware Development Phenomenon on Public Malware Submission and Scanning Platform"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8113-3531","authenticated-orcid":false,"given":"Heqing","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cong","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2413-3065","authenticated-orcid":false,"given":"Junyuan","family":"Zeng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wu","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sencun","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5091-8464","authenticated-orcid":false,"given":"Peng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ian","family":"Molloy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Suresh","family":"Chari","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ce","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Quanlong","family":"Guan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23205"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2967360.2967367"},{"key":"ref33","article-title":"SSL\/TLS interception proxies and transitive trust","author":"jarmoc","year":"2012","journal-title":"Black Hat Europe'06"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-38908-5_13","article-title":"A framework for evaluating mobile app repackaging detection algorithms","author":"huang","year":"2013","journal-title":"Trust and Trustworthy Computing"},{"key":"ref31","first-page":"1005","article-title":"ASM: A programmable interface for extending android security","author":"heuser","year":"2014","journal-title":"Proc 23rd Usenix Conf Secur Symp"},{"key":"ref30","first-page":"1057","article-title":"Needles in a haystack: Mining information from public dynamic analysis sandboxes for malware intelligence","author":"graziano","year":"2015","journal-title":"Proc 24th USENIX Conf Secur Symp"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2536605"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2013.142"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2808769.2808780"},{"key":"ref34","first-page":"338","article-title":"Estimating continuous distributions in Bayesian classifiers","author":"john","year":"1995","journal-title":"Proc 11th Conf Uncertainty Artif Intell"},{"key":"ref10","year":"0"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2457918"},{"key":"ref11","year":"2010"},{"key":"ref12","year":"2016"},{"key":"ref13","year":"0"},{"key":"ref14","year":"0"},{"key":"ref15","year":"0"},{"key":"ref16","year":"0"},{"key":"ref17","year":"0"},{"key":"ref18","year":"2010"},{"key":"ref19","year":"0"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref4","year":"0"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.08.019"},{"key":"ref3","year":"0"},{"key":"ref6","year":"0"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2687880"},{"key":"ref5","year":"0"},{"key":"ref8","year":"0"},{"key":"ref7","year":"0"},{"key":"ref2","year":"0"},{"key":"ref9","year":"0"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076738"},{"key":"ref46","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets","author":"zhou","year":"2012","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref20","year":"0"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2322867"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766499"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23384"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/1281192.1281308"},{"key":"ref24","first-page":"131","article-title":"Flexible and fine-grained mandatory access control on android for diverse security and privacy policies","author":"bugiel","year":"2013","journal-title":"Proc 22nd USENIX Conf Secur"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2014.10"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.62"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24177-7_15"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.20"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627395"},{"key":"ref25","first-page":"659","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-play scale","author":"chen","year":"2015","journal-title":"Proc 24th USENIX Conf Secur Symp"}],"container-title":["IEEE Transactions on Big Data"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6687317\/9443230\/8248752-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6687317\/9443230\/08248752.pdf?arnumber=8248752","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:54:07Z","timestamp":1652194447000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8248752\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6,1]]},"references-count":47,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tbdata.2018.2790439","relation":{},"ISSN":["2332-7790","2372-2096"],"issn-type":[{"value":"2332-7790","type":"electronic"},{"value":"2372-2096","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,6,1]]}}}