{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,18]],"date-time":"2026-09-18T04:17:56Z","timestamp":1789705076927,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2014,12,8]],"date-time":"2014-12-08T00:00:00Z","timestamp":1417996800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2014,12,8]]},"DOI":"10.1145\/2664243.2664250","type":"proceedings-article","created":{"date-parts":[[2014,12,8]],"date-time":"2014-12-08T16:30:28Z","timestamp":1418056228000},"page":"216-225","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":75,"title":["Morpheus"],"prefix":"10.1145","author":[{"given":"Yiming","family":"Jing","sequence":"first","affiliation":[{"name":"Arizona State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[{"name":"Arizona State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[{"name":"Arizona State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"Clemson University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2014,12,8]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"http:\/\/developer.android.com\/tools\/devices\/emulator.html","year":"2014","unstructured":"Android developers - using the emulator. http:\/\/developer.android.com\/tools\/devices\/emulator.html . Accessed : May 2014 . Android developers - using the emulator. http:\/\/developer.android.com\/tools\/devices\/emulator.html. Accessed: May 2014."},{"key":"e_1_3_2_1_2_1","unstructured":"Genymotion the fastest android emulator for app testing and presentation. http:\/\/genymotion.com. Accessed: May 2014.  Genymotion the fastest android emulator for app testing and presentation. http:\/\/genymotion.com. Accessed: May 2014."},{"key":"e_1_3_2_1_3_1","volume-title":"http:\/\/sanddroid.xjtu.edu.cn\/","year":"2014","unstructured":"Sanddroid - an apk analysis sandbox. http:\/\/sanddroid.xjtu.edu.cn\/ . Accessed : May 2014 . Sanddroid - an apk analysis sandbox. http:\/\/sanddroid.xjtu.edu.cn\/. Accessed: May 2014."},{"key":"e_1_3_2_1_4_1","volume-title":"http:\/\/tracedroid.few.vu.nl\/","year":"2014","unstructured":"Tracedroid - dynamic android app analysis (by vu amsterdam). http:\/\/tracedroid.few.vu.nl\/ . Accessed : May 2014 . Tracedroid - dynamic android app analysis (by vu amsterdam). http:\/\/tracedroid.few.vu.nl\/. Accessed: May 2014."},{"key":"e_1_3_2_1_5_1","volume-title":"An android application sandbox for dynamic analysis. https:\/\/code.google.com\/p\/droidbox\/","year":"2011","unstructured":"Droidbox : An android application sandbox for dynamic analysis. https:\/\/code.google.com\/p\/droidbox\/ , 2011 . Accessed : May 2014. Droidbox: An android application sandbox for dynamic analysis. https:\/\/code.google.com\/p\/droidbox\/, 2011. Accessed: May 2014."},{"key":"e_1_3_2_1_6_1","unstructured":"Andrubis: A tool for analyzing unknown android applications. http:\/\/blog.iseclab.org\/2012\/06\/04\/andrubis-a-tool-for-analyzing-unknown-androidapplications-2\/ June 2012. Accessed: May 2014.  Andrubis: A tool for analyzing unknown android applications. http:\/\/blog.iseclab.org\/2012\/06\/04\/andrubis-a-tool-for-analyzing-unknown-androidapplications-2\/ June 2012. Accessed: May 2014."},{"key":"e_1_3_2_1_7_1","volume-title":"Imei allocation and approval guidelines","author":"G. Association et al.","year":"2010","unstructured":"G. Association et al. Imei allocation and approval guidelines . volume 10 , 2010 . G. Association et al. Imei allocation and approval guidelines. volume 10, 2010."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of Network and Distributed System Security Symposium","author":"Balzarotti D.","year":"2010","unstructured":"D. Balzarotti , M. Cova , C. Karlberger , C. Kruegel , E. Kirda , and G. Vigna . Efficient detection of split personalities in malware . In Proceedings of Network and Distributed System Security Symposium , 2010 . D. Balzarotti, M. Cova, C. Karlberger, C. Kruegel, E. Kirda, and G. Vigna. Efficient detection of split personalities in malware. In Proceedings of Network and Distributed System Security Symposium, 2010."},{"key":"e_1_3_2_1_9_1","unstructured":"H. Dharmdasani. Android.hehe: Malware now disconnects phone calls. http:\/\/www.fireeye.com\/blog\/technical\/2014\/01\/android-hehe-malware-now-disconnects-phone-calls.html January 2014. Accessed: May 2014.  H. Dharmdasani. Android.hehe: Malware now disconnects phone calls. http:\/\/www.fireeye.com\/blog\/technical\/2014\/01\/android-hehe-malware-now-disconnects-phone-calls.html January 2014. Accessed: May 2014."},{"key":"e_1_3_2_1_10_1","first-page":"1","volume-title":"Proceedings of the USENIX conference on Operating systems design and implementation","author":"Enck W.","year":"2010","unstructured":"W. Enck , P. Gilbert , B.-G. Chun , L. P. Cox , J. Jung , P. McDaniel , and A. N. Sheth . Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones . In Proceedings of the USENIX conference on Operating systems design and implementation , pages 1 -- 6 . USENIX, 2010 . W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In Proceedings of the USENIX conference on Operating systems design and implementation, pages 1--6. USENIX, 2010."},{"key":"e_1_3_2_1_11_1","volume-title":"April","year":"2013","unstructured":"F-Secure. Trojan:android\/pincer.a. http:\/\/www.f-secure.com\/weblog\/archives\/00002538.html , April 2013 . Accessed : May 2014. F-Secure. Trojan:android\/pincer.a. http:\/\/www.f-secure.com\/weblog\/archives\/00002538.html, April 2013. Accessed: May 2014."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of USENIX Workshop on Hot Topics in Operating Systems","author":"Garfinkel T.","year":"2007","unstructured":"T. Garfinkel , K. Adams , A. Warfield , and J. Franklin . Compatibility is not transparency: Vmm detection myths and realities . In Proceedings of USENIX Workshop on Hot Topics in Operating Systems , 2007 . T. Garfinkel, K. Adams, A. Warfield, and J. Franklin. Compatibility is not transparency: Vmm detection myths and realities. In Proceedings of USENIX Workshop on Hot Topics in Operating Systems, 2007."},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the USENIX Security Symposium","author":"Heuser S.","year":"2014","unstructured":"S. Heuser , A. Nadkarni , W. Enck , and A.-R. Sadeghi . Asm : A programmable interface for extending android security . In Proceedings of the USENIX Security Symposium , 2014 . S. Heuser, A. Nadkarni, W. Enck, and A.-R. Sadeghi. Asm: A programmable interface for extending android security. In Proceedings of the USENIX Security Symposium, 2014."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.709601"},{"key":"e_1_3_2_1_15_1","unstructured":"C. Ionescu. Obfuscating embedded malware on android. http:\/\/www.symantec.com\/connect\/blogs\/obfuscating-embedded-malware-android June 2012. Accessed: May 2014.  C. Ionescu. Obfuscating embedded malware on android. http:\/\/www.symantec.com\/connect\/blogs\/obfuscating-embedded-malware-android June 2012. Accessed: May 2014."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.18"},{"key":"e_1_3_2_1_17_1","unstructured":"H. Lockheimer. Android and security. http:\/\/googlemobile.blogspot.com\/2012\/02\/android-and-security.html February 2012. Accessed: May 2014.  H. Lockheimer. Android and security. http:\/\/googlemobile.blogspot.com\/2012\/02\/android-and-security.html February 2012. Accessed: May 2014."},{"key":"e_1_3_2_1_18_1","volume-title":"Gartner: 102b app store downloads globally","author":"Lunden I.","year":"2013","unstructured":"I. Lunden . Gartner: 102b app store downloads globally in 2013 , 26b in sales, 17% from in-app purchases. http:\/\/techcrunch.com\/2013\/09\/19\/gartner-102b-app-store-downloads-globally-in-2013-26b-in-sales-17-from-in-app-purchases\/, September 2013. Accessed: May 2014. I. Lunden. Gartner: 102b app store downloads globally in 2013, 26b in sales, 17% from in-app purchases. http:\/\/techcrunch.com\/2013\/09\/19\/gartner-102b-app-store-downloads-globally-in-2013-26b-in-sales-17-from-in-app-purchases\/, September 2013. Accessed: May 2014."},{"key":"e_1_3_2_1_19_1","unstructured":"F. Matenaar and P. Schulz. Detecting android sandboxes. http:\/\/dexlabs.org\/blog\/btdetect August 2012. Accessed: May 2014.  F. Matenaar and P. Schulz. Detecting android sandboxes. http:\/\/dexlabs.org\/blog\/btdetect August 2012. Accessed: May 2014."},{"key":"e_1_3_2_1_20_1","volume-title":"Summer Con2012","author":"Oberheide J.","year":"2012","unstructured":"J. Oberheide and C. Miller . Dissecting the android bouncer . Summer Con2012 , New York , 2012 . J. Oberheide and C. Miller. Dissecting the android bouncer. Summer Con2012, New York, 2012."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592796"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"e_1_3_2_1_23_1","volume-title":"Proceedings of the European Workshop on System Security","author":"Reina A.","year":"2013","unstructured":"A. Reina , A. Fattori , and L. Cavallaro . A system call-centric analysis and stimulation technique to automatically reconstruct android malware behaviors . In Proceedings of the European Workshop on System Security , April 2013 . A. Reina, A. Fattori, and L. Cavallaro. A system call-centric analysis and stimulation technique to automatically reconstruct android malware behaviors. In Proceedings of the European Workshop on System Security, April 2013."},{"key":"e_1_3_2_1_24_1","volume-title":"December","author":"Schulz P.","year":"2013","unstructured":"P. Schulz . Android emulator detection by observing low-level caching behavior. https:\/\/bluebox.com\/technical\/android-emulator-detection-by-observing-low-level-caching-behavior\/ , December 2013 . Accessed : May 2014. P. Schulz. Android emulator detection by observing low-level caching behavior. https:\/\/bluebox.com\/technical\/android-emulator-detection-by-observing-low-level-caching-behavior\/, December 2013. Accessed: May 2014."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590325"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23164"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516676"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516689"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"e_1_3_2_1_30_1","first-page":"5","volume-title":"Proceedings of the Network and Distributed System Security Symposium","author":"Zhou Y.","year":"2012","unstructured":"Y. Zhou , Z. Wang , W. Zhou , and X. Jiang . Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets . In Proceedings of the Network and Distributed System Security Symposium , pages 5 -- 8 , 2012 . Y. Zhou, Z. Wang, W. Zhou, and X. Jiang. Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets. In Proceedings of the Network and Distributed System Security Symposium, pages 5--8, 2012."}],"event":{"name":"ACSAC '14: Annual Computer Security Applications Conference","location":"New Orleans Louisiana USA","acronym":"ACSAC '14","sponsor":["ACSA Applied Computing Security Assoc"]},"container-title":["Proceedings of the 30th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2664243.2664250","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2664243.2664250","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:12:01Z","timestamp":1750227121000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2664243.2664250"}},"subtitle":["automatically generating heuristics to detect Android emulators"],"short-title":[],"issued":{"date-parts":[[2014,12,8]]},"references-count":30,"alternative-id":["10.1145\/2664243.2664250","10.1145\/2664243"],"URL":"https:\/\/doi.org\/10.1145\/2664243.2664250","relation":{},"subject":[],"published":{"date-parts":[[2014,12,8]]},"assertion":[{"value":"2014-12-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}