{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T20:17:37Z","timestamp":1784233057351,"version":"3.55.0"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2017,8,1]],"date-time":"2017-08-01T00:00:00Z","timestamp":1501545600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2016YFB1000903"],"award-info":[{"award-number":["2016YFB1000903"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["91418205"],"award-info":[{"award-number":["91418205"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61472318"],"award-info":[{"award-number":["61472318"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61532015"],"award-info":[{"award-number":["61532015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61532004"],"award-info":[{"award-number":["61532004"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672419"],"award-info":[{"award-number":["61672419"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61632015"],"award-info":[{"award-number":["61632015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004806","name":"Fok Ying-Tong Education Foundation","doi-asserted-by":"crossref","award":["151067"],"award-info":[{"award-number":["151067"]}],"id":[{"id":"10.13039\/501100004806","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100010002","name":"Ministry of Education Innovation Research Team","doi-asserted-by":"publisher","award":["IRT13035"],"award-info":[{"award-number":["IRT13035"]}],"id":[{"id":"10.13039\/100010002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Shenzhen City Science and Technology Research and Development Fund","award":["JCYJ20150630115257892"],"award-info":[{"award-number":["JCYJ20150630115257892"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2017,8]]},"DOI":"10.1109\/tifs.2017.2687880","type":"journal-article","created":{"date-parts":[[2017,3,27]],"date-time":"2017-03-27T20:25:29Z","timestamp":1490646329000},"page":"1772-1785","source":"Crossref","is-referenced-by-count":126,"title":["DAPASA: Detecting Android Piggybacked Apps Through Sensitive Subgraph Analysis"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9327-0987","authenticated-orcid":false,"given":"Ming","family":"Fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haifei","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenzhou","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7600-0934","authenticated-orcid":false,"given":"Ting","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2016.14"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btl038"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1361684.1361686"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2014.6911805"},{"key":"ref31","first-page":"293","article-title":"Dexhunter: Toward extracting hidden code from packed Android applications","author":"zhang","year":"2015","journal-title":"Proc Euro Symp Res Computer Security"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2304536.2304541"},{"key":"ref36","doi-asserted-by":"crossref","first-page":"824","DOI":"10.1126\/science.298.5594.824","article-title":"Network motifs: Simple building blocks of complex networks","volume":"298","author":"milo","year":"2002","journal-title":"Science"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.38"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/S0306-4573(02)00021-3"},{"key":"ref28","first-page":"86","article-title":"Droidapiminer: Mining api-level features for robust malware detection in Android","author":"aafer","year":"2013","journal-title":"Proc 9th Int ICST Conf Secur Privacy Commun Netw (SecureComm)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.09.014"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.06.015"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435377"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2011.226"},{"key":"ref22","first-page":"163","article-title":"Droidminer: Automated mining and characterization of fine-grained malicious behaviors in Android applications","author":"yang","year":"2014","journal-title":"Proc European Symp Research in Computer Security (ESORICS)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2556464.2556467"},{"key":"ref23","first-page":"142","article-title":"Detecting code reuse in Android applications using component-based control flow graph","author":"sun","year":"2014","journal-title":"Proc 29th IFIP TC 11 Int Conf ICT Syst Secur Privacy Protect (SEC)"},{"key":"ref26","first-page":"659","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-play scale","author":"chen","year":"2015","journal-title":"24th USENIX Security Symp"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2015.7404721"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.40"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.25"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.07.106"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2290431"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2353996"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref17","first-page":"158","article-title":"Antimaldroid: an efficient SVM-based malware detection framework for Android","author":"zhao","year":"2011","journal-title":"Proc 2nd Int Conf Inf Comput Appl (ICICA)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660359"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.010"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664275"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2014.169"},{"key":"ref6","first-page":"89","article-title":"Semantics-based repackaging detection for mobile apps","author":"guan","year":"2016","journal-title":"Proc IEEE Int Symp Syst Synth"},{"key":"ref5","first-page":"25","article-title":"Viewdroid: Towards obfuscation-resilient mobile application repackaging detection","author":"zhang","year":"2014","journal-title":"Proc 6th ACM Conf Secur Privacy Wirel Mobile Netw (WiSec)"},{"key":"ref8","first-page":"50","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets","author":"zhou","year":"2012","journal-title":"Proc ISOC Netw Distrib Syst Secur Symp (NDSS)"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1145\/2771783.2771795","article-title":"Wukong: A scalable and accurate two-phase approach to Android app clone detection","author":"wang","year":"2015","journal-title":"Proc 25th Int Symp Softw Test Anal (ISSTA)"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2015.2454508"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022631118932"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.2307\/1402731"},{"key":"ref48","doi-asserted-by":"crossref","first-page":"169","DOI":"10.1007\/978-3-642-38908-5_13","article-title":"A framework for evaluating mobile app repackaging detection algorithms","author":"huang","year":"2013","journal-title":"Proc 4th Int Conf on Trust and Trustworthy Computing"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1023\/B:AMAI.0000018580.96245.c6"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/BF00153759"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/BF00993309"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2000.827315"},{"key":"ref43","first-page":"144","article-title":"Generating accurate rule sets without global optimization","author":"frank","year":"1998","journal-title":"Proc 15th Int Conf Mach Learn (ICML)"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/7921660\/07887707.pdf?arnumber=7887707","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,26]],"date-time":"2022-07-26T23:02:12Z","timestamp":1658876532000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7887707\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,8]]},"references-count":51,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2017.2687880","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,8]]}}}