{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,18]],"date-time":"2025-09-18T10:42:42Z","timestamp":1758192162349,"version":"3.44.0"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Hong Kong RGC Project","award":["PolyU15231223"],"award-info":[{"award-number":["PolyU15231223"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62502173"],"award-info":[{"award-number":["62502173"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Post-Doctoral Fellowship Program of CPSF","award":["GZB20240248"],"award-info":[{"award-number":["GZB20240248"]}]},{"name":"China Post-Doctoral Science Foundation","award":["2024M751010"],"award-info":[{"award-number":["2024M751010"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3607270","type":"journal-article","created":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T17:43:39Z","timestamp":1757353419000},"page":"9413-9426","source":"Crossref","is-referenced-by-count":0,"title":["An Efficient Adversarial Attack on FCG-Based Android Malware Detection Systems"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8045-8983","authenticated-orcid":false,"given":"Heng","family":"Li","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bang","family":"Wu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Zhou","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5867-5364","authenticated-orcid":false,"given":"Wei","family":"Yuan","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0709-3361","authenticated-orcid":false,"given":"Cuiying","family":"Gao","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0607-1777","authenticated-orcid":false,"given":"Xinge","family":"You","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9082-3208","authenticated-orcid":false,"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hung Hom, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2019.2903186"},{"key":"ref2","first-page":"1955","article-title":"Mind your weight(S): A large-scale study on insufficient machine learning model protection in mobile apps","volume-title":"Proc. USENIX Secur. Symp.","author":"Sun"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23353"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.10.054"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417291"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3003571"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2932228"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485387"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"ref11","article-title":"Generating adversarial malware examples for black-box attacks based on GAN","author":"Hu","year":"2017","journal-title":"arXiv:1702.05983"},{"key":"ref12","first-page":"1181","article-title":"Black-box adversarial example attack towards FCG based Android malware detection under incomplete feature information","volume-title":"Proc. USENIX Secur. Symp.","author":"Li"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2019.2906120"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3236872"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-73671-2_2"},{"key":"ref16","article-title":"Realizable universal adversarial perturbations for malware","author":"Labaca-Castro","year":"2021","journal-title":"arXiv:2102.06747"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771796"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3333567"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2019.2958382"},{"key":"ref20","first-page":"1560","article-title":"Unsuccessful story about few shot malware family classification and Siamese network to the rescue","volume-title":"Proc. ICSE","author":"Bai"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653691"},{"key":"ref22","first-page":"1","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets","volume-title":"Proc. NDSS","author":"Zhou"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2016.7792435"},{"key":"ref24","article-title":"Automated synthesis of semantic malware signatures using maximum satisfiability","author":"Feng","year":"2016","journal-title":"arXiv:1608.06254"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2013.05.008"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref27","first-page":"1327","article-title":"Hybrid batch attacks: Finding black-box adversarial examples with limited queries","volume-title":"Proc. USENIX Secur. Symp.","author":"Suya"},{"key":"ref28","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"ref30","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2017.17"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2656460"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623117"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_36"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1080\/23311916.2018.1502242"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TMAG.2017.2663760"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-014-1234-8"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.cor.2012.01.001"},{"key":"ref39","first-page":"225","article-title":"Linear Hinge loss and average margin","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"11","author":"Gentile"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1162\/EVCO_a_00109"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2017.2695579"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2687880"},{"volume-title":"Shrink your Java and Android code","year":"2025","key":"ref43"},{"key":"ref44","first-page":"3971","article-title":"Dos and don\u2019ts of machine learning in computer security","volume-title":"Proc. USENIX Secur. Symp.","author":"Arp"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/dsc54232.2022.9888878"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24207"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3039691"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3153844"},{"key":"ref50","article-title":"Playing Atari with deep reinforcement learning","author":"Mnih","year":"2013","journal-title":"arXiv:1312.5602"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01182"},{"volume-title":"Virustotal","year":"2022","key":"ref52"},{"key":"ref53","doi-asserted-by":"crossref","DOI":"10.1016\/j.softx.2020.100403","article-title":"Obfuscapk: An open-source black-box obfuscation tool for Android apps","volume":"11","author":"Aonzo","year":"2020","journal-title":"SoftwareX"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11153502.pdf?arnumber=11153502","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,17]],"date-time":"2025-09-17T17:30:21Z","timestamp":1758130221000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11153502\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3607270","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2025]]}}}