{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T18:05:18Z","timestamp":1792865118611,"version":"4.5.0"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2018,8,1]],"date-time":"2018-08-01T00:00:00Z","timestamp":1533081600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2016YFB1000903"],"award-info":[{"award-number":["2016YFB1000903"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61632015"],"award-info":[{"award-number":["61632015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61772408"],"award-info":[{"award-number":["61772408"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["U1766215"],"award-info":[{"award-number":["U1766215"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61672419"],"award-info":[{"award-number":["61672419"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61702414"],"award-info":[{"award-number":["61702414"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61721002"],"award-info":[{"award-number":["61721002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61428206"],"award-info":[{"award-number":["61428206"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61472318"],"award-info":[{"award-number":["61472318"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61532004"],"award-info":[{"award-number":["61532004"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61532015"],"award-info":[{"award-number":["61532015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61602369"],"award-info":[{"award-number":["61602369"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Project of China Knowledge Centre for Engineering Science and Technology"},{"DOI":"10.13039\/501100004806","name":"Fok Ying-Tong Education Foundation","doi-asserted-by":"crossref","award":["151067"],"award-info":[{"award-number":["151067"]}],"id":[{"id":"10.13039\/501100004806","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100010002","name":"Ministry of Education Innovation Research Team","doi-asserted-by":"publisher","award":["IRT17R86"],"award-info":[{"award-number":["IRT17R86"]}],"id":[{"id":"10.13039\/100010002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Hong Kong GRF","award":["PolyU 5389\/13E"],"award-info":[{"award-number":["PolyU 5389\/13E"]}]},{"name":"Hong Kong GRF","award":["152279\/16E"],"award-info":[{"award-number":["152279\/16E"]}]},{"name":"Hong Kong RGC Project","award":["CityU C1008-16G"],"award-info":[{"award-number":["CityU C1008-16G"]}]},{"name":"HKPolyU Research Grants","award":["G-YBJX"],"award-info":[{"award-number":["G-YBJX"]}]},{"name":"Shenzhen City Science and Technology R&D Fund","award":["JCYJ20150630115257892"],"award-info":[{"award-number":["JCYJ20150630115257892"]}]},{"name":"National Key R&D Program of China","award":["2016QY04W0805"],"award-info":[{"award-number":["2016QY04W0805"]}]},{"name":"National Key R&D Program of China","award":["NSFC U1536106"],"award-info":[{"award-number":["NSFC U1536106"]}]},{"name":"National Key R&D Program of China","award":["61728209"],"award-info":[{"award-number":["61728209"]}]},{"DOI":"10.13039\/501100002367","name":"National Top-notch Youth Talents Program of China, Youth Innovation Promotion Association CAS","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100005090","name":"Beijing Nova Program","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100005090","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Research Grant from Ant Financial"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2018,8]]},"DOI":"10.1109\/tifs.2018.2806891","type":"journal-article","created":{"date-parts":[[2018,2,16]],"date-time":"2018-02-16T19:21:39Z","timestamp":1518808899000},"page":"1890-1905","source":"Crossref","is-referenced-by-count":207,"title":["Android Malware Familial Classification and Representative Sample Selection via Frequent Subgraph Analysis"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9327-0987","authenticated-orcid":false,"given":"Ming","family":"Fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kai","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenzhou","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qinghua","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7600-0934","authenticated-orcid":false,"given":"Ting","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref71","first-page":"24","article-title":"Frequent subgraph based familial classification of Android malware","author":"fan","year":"2016","journal-title":"Proc ISSRE"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664275"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/BF00153759"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/34.682181"},{"key":"ref32","year":"2016","journal-title":"VirusTotal"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2339530.2339723"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/BF00993309"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"ref35","first-page":"1","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-play scale","author":"chen","year":"2015","journal-title":"Proc USENIX SEC"},{"key":"ref34","year":"2017","journal-title":"Mobile Malware Mini Dump"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.30"},{"key":"ref62","first-page":"2721","article-title":"Learning to detect and classify malicious executables in the wild","volume":"7","author":"kolter","year":"2006","journal-title":"J Mach Learn Res"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653736"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.06.015"},{"key":"ref64","first-page":"37","article-title":"Attack of the clones: Detecting cloned applications on Android markets","author":"crussell","year":"2012","journal-title":"Proc ESORICS"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/WETSoM.2013.6619331"},{"key":"ref65","first-page":"182","article-title":"AnDarwin: Scalable detection of semantically similar Android applications","author":"crussell","year":"2013","journal-title":"Proc ESORICS"},{"key":"ref66","first-page":"142","article-title":"Detecting code reuse in Android applications using component-based control flow graph","author":"sun","year":"2014","journal-title":"Proceedings of IFIP SEC"},{"key":"ref29","year":"2016","journal-title":"NetworkX High productivity software for complex networks"},{"key":"ref67","first-page":"175","article-title":"Achieving accuracy and scalability simultaneously in detecting application clones on Android markets","author":"chen","year":"2014","journal-title":"Proc ICSE"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref69","first-page":"25","article-title":"ViewDroid: Towards obfuscation-resilient mobile application repackaging detection","author":"zhang","year":"2014","journal-title":"Proc WiSec"},{"key":"ref2","author":"kelly","year":"2014","journal-title":"Report 97% Of Mobile Malware Is On Android This Is The Easy Way You Stay Safe"},{"key":"ref1","year":"2016","journal-title":"Smartphone OS market share 2016 Q3"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/2008\/10\/P10008"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref21","year":"2016","journal-title":"ApkTool A tool for reverse engineering Android apk files"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1361684.1361686"},{"key":"ref23","year":"2016","journal-title":"VirusShare"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.69.026113"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/321921.321925"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2016.2584063"},{"key":"ref51","year":"2016","journal-title":"Proguard"},{"key":"ref59","first-page":"1","article-title":"Transcend: Detecting concept drift in malware classification models","author":"jordaney","year":"2017","journal-title":"Proc USENIX SEC"},{"key":"ref58","year":"2017","journal-title":"Bangcle"},{"key":"ref57","year":"2017","journal-title":"Apk protect"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2290431"},{"key":"ref55","first-page":"293","article-title":"Dexhunter: Toward extracting hidden code from packed Android applications","author":"zhang","year":"2015","journal-title":"Proc ESORICS"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.40"},{"key":"ref53","first-page":"318","article-title":"Droidra: Taming reflection to support whole-program analysis of Android apps","author":"li","year":"2016","journal-title":"Proc ISSTA"},{"key":"ref52","year":"2017","journal-title":"DashO"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2556464.2556467"},{"key":"ref11","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1145\/2771783.2771795","article-title":"WuKong: A scalable and accurate two-phase approach to Android app clone detection","author":"wang","year":"2015","journal-title":"Proc ISSTA"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.07.106"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2687880"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.010"},{"key":"ref14","first-page":"163","article-title":"DroidMiner: Automated mining and characterization of fine-grained malicious behaviors in Android applications","author":"yang","year":"2014","journal-title":"Proc ESORICS"},{"key":"ref15","first-page":"234","article-title":"Contextual policy enforcement in Android applications with permission event graphs","author":"chen","year":"2013","journal-title":"Proc NDSS"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0706851105"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.70.066111"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.76.036106"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516689"},{"key":"ref3","year":"2016","journal-title":"Report of Smartphone Security in China 2016 Q3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568301"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635869"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref49","article-title":"Reviving sequential program birthmarking for multithreaded software plagiarism detection","author":"tian","year":"0","journal-title":"IEEE Trans Softw Eng"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435377"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0151-y"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2015.2454508"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.06.014"},{"key":"ref42","first-page":"426","article-title":"Mining apps for abnormal usage of sensitive data","author":"avdiienko","year":"2015","journal-title":"Proceedings of the International Conference on Software Engineering ICSE'94"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660359"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23379"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053001"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8330769\/08293854.pdf?arnumber=8293854","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T07:12:11Z","timestamp":1643181131000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8293854\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,8]]},"references-count":71,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2018.2806891","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,8]]}}}