{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T01:51:31Z","timestamp":1760147491279,"version":"build-2065373602"},"reference-count":37,"publisher":"MDPI AG","issue":"2","license":[{"start":{"date-parts":[[2023,2,7]],"date-time":"2023-02-07T00:00:00Z","timestamp":1675728000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>Android operating system (OS) has been recently featured as the most commonly used and ingratiated OS for smartphone ecosystems. This is due to its high interoperability as an open-source platform and its compatibility with all the major browsers within the mobile ecosystem. However, android is susceptible to a wide range of Spyware traffic that can endanger a mobile user in many ways, like password stealing and recording patterns of a user. This paper presents a spyware identification schemes for android systems making use of three different machine learning schemes, including fine decision trees (FDT), support vector machines (SVM), and the na\u00efve Bayes classifier (NBC). The constructed models have been evaluated on a novel dataset (Spyware-Android 2022) using several performance measurement units such as accuracy, precision, and sensitivity. Our experimental simulation tests revealed the notability of the model-based FDT, making the peak accuracy 98.2%. The comparison with the state-of-art spyware identification models for android systems showed that our proposed model had improved the model\u2019s accuracy by more than 18%.<\/jats:p>","DOI":"10.3390\/info14020102","type":"journal-article","created":{"date-parts":[[2023,2,7]],"date-time":"2023-02-07T01:35:17Z","timestamp":1675733717000},"page":"102","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Spyware Identification for Android Systems Using Fine Trees"],"prefix":"10.3390","volume":"14","author":[{"given":"Muawya","family":"Naser","sequence":"first","affiliation":[{"name":"Department of Computer Science, Princess Sumaya University for Technology, Amman 11941, Jordan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2422-0297","authenticated-orcid":false,"given":"Qasem","family":"Abu Al-Haija","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Princess Sumaya University for Technology, Amman 11941, Jordan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,2,7]]},"reference":[{"key":"ref_1","first-page":"25","article-title":"Spyware vs. Spyware: Software Conflicts and User Autonomy","volume":"16","author":"Grimmelmann","year":"2020","journal-title":"Ohio St. Tech. LJ."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Albulayhi, K., Smadi, A.A., Sheldon, F.T., and Abercrombie, R.K. (2021). IoT Intrusion Detection Taxonomy, Reference Architecture, and Analyses. Sensors, 21.","DOI":"10.3390\/s21196432"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Smadi, A.A., Ajao, B.T., Johnson, B.K., Lei, H., Chakhchoukh, Y., and Abu Al-Haija, Q. (2021). A Comprehensive Survey on Cyber-Physical Smart Grid Testbed Architectures: Requirements and Challenges. Electronics, 10.","DOI":"10.3390\/electronics10091043"},{"key":"ref_4","unstructured":"Kaspersky (2023, January 14). Spyware Definition. Available online: https:\/\/www.kaspersky.com\/resource-center\/threats\/spyware."},{"key":"ref_5","first-page":"116","article-title":"Android os: A review","volume":"4","author":"Gilski","year":"2015","journal-title":"Tem J."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Yadav, C.S., Singh, J., Yadav, A., Pattanayak, H.S., Kumar, R., Khan, A.A., Haq, M.A., Alhussen, A., and Alharby, S. (2022). Malware Analysis in IoT & Android Systems with Defensive Mechanism. Electronics, 11.","DOI":"10.3390\/electronics11152354"},{"key":"ref_7","unstructured":"Android Authority (2023, January 14). Opportunity Powered by Choice. Available online: https:\/\/www.android.com\/everyone\/enabling-opportunity\/."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Al-Haija, Q.A., Saleh, E., and Alnabhan, M. (2021, January 6\u20138). Detecting Port Scan Attacks Using Logistic Regression. Proceedings of the 4th International Symposium on Advanced Electrical and Communication Technologies (ISAECT), Alkhobar, Saudi Arabia.","DOI":"10.1109\/ISAECT53699.2021.9668562"},{"key":"ref_9","unstructured":"Laricchia, F. (2023, January 14). Mobile Operating Systems\u2019 Market Share Worldwide from 1st Quarter 2009 to 4th Quarter 2022. 16 November 2022. Available online: https:\/\/www.statista.com\/markets\/418\/topic\/481\/telecommunications\/."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Shahzad, R.K., Haider, S.I., and Lavesson, N. (2010, January 15\u201318). Detection of Spyware by Mining Executable Files. Proceedings of the 2010 International Conference on Availability, Reliability and Security, Krakow, Poland.","DOI":"10.1109\/ARES.2010.105"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., and Al-Saraireh, J. (2022). Asymmetric Identification Model for Human-Robot Contacts via Supervised Learning. Symmetry, 14.","DOI":"10.3390\/sym14030591"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1830201","DOI":"10.1155\/2022\/1830201","article-title":"An Android Malware Detection Leveraging Machine Learning","volume":"2022","author":"Shatnawi","year":"2022","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"124579","DOI":"10.1109\/ACCESS.2020.3006143","article-title":"A Review of Android Malware Detection Approaches Based on Machine Learning","volume":"8","author":"Liu","year":"2020","journal-title":"IEEE Access"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Ghazali, R., Deris, M., Nawi, N., and Abawajy, J. (2018). Recent Advances on Soft Computing and Data Mining, Proceedings of the Third International Conference on Soft Computing and Data Mining (SCDM 2018), Johor, Malaysia, 6\u20137 February 2018, Springer.","DOI":"10.1007\/978-3-319-72550-5"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., Odeh, A., and Qattous, H. (2022). PDF Malware Detection Based on Optimizable Decision Trees. Electronics, 11.","DOI":"10.20944\/preprints202209.0103.v1"},{"key":"ref_16","first-page":"438","article-title":"Instance reduction for avoiding overfitting in decision trees","volume":"30","author":"Amro","year":"2021","journal-title":"J. Intell. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Mohamed, W., Salleh, M., and Omar, A. (2012, January 23\u201325). A comparative study of Reduced Error Pruning method in decision tree algorithms. Proceedings of the IEEE International Conference on Control System, Computing and Engineering, Penang, Malaysia.","DOI":"10.1109\/ICCSCE.2012.6487177"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3382158","article-title":"A data-driven characterization of modern Android spyware","volume":"11","author":"Pierazzi","year":"2020","journal-title":"ACM Trans. Manag. Inf. Syst."},{"key":"ref_19","unstructured":"Gana, N.N., Abdulhamid, S.M., Misra, S., Garg, L., Ayeni, F., and Azeta, A. (2022). Information Systems and Management Science. ISMS 2020, Springer. Lecture Notes in Networks and Systems."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Qabalin, M.K., Naser, M., and Alkasassbeh, M. (2022). Android Spyware Detection Using Machine Learning: A Novel Dataset. Sensors, 22.","DOI":"10.3390\/s22155765"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"AlJarrah, M.N., Yaseen, Q.M., and Mustafa, A.M. (2022). A Context-Aware Android Malware Detection Approach Using Machine Learning. Information, 13.","DOI":"10.3390\/info13120563"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"7611741","DOI":"10.1155\/2022\/7611741","article-title":"Design and Analysis of Machine Learning Based Technique for Malware Identification and Classification of Portable Document Format Files","volume":"2022","author":"Alshamrani","year":"2022","journal-title":"Secur. Commun. Netw."},{"key":"ref_23","first-page":"345","article-title":"Spyware Detection and Prevention using Deep Learning, A.I. for user applications","volume":"7","author":"Mahesh","year":"2019","journal-title":"Int. J. Recent Technol. Eng."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., and Krichen, M. (2022). A Lightweight In-Vehicle Alcohol Detection Using Smart Sensing and Supervised Learning. Computers, 11.","DOI":"10.20944\/preprints202207.0261.v1"},{"key":"ref_25","unstructured":"Lysenko, S., Bobrovnikova, K., Popov, P.T., Kharchenko, V., and Medzatyi, D. (2020, January 10\u201312). Spyware detection technique based on reinforcement learning. Proceedings of the 1st International Workshop on Intelligent Information Technologies & Systems of Information Security, Khmelnytskyi, Ukraine."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Anumula, K., and Raymond, J. (2021, January 7\u20138). Adware, and Spyware Detection Using Classification and Association. Proceedings of the International Conference on Deep Learning, Computing and Intelligence, Chennai, India.","DOI":"10.1007\/978-981-16-5652-1_31"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Fasano, F., Martinelli, F., Mercaldo, F., Nardone, V., and Santone, A. (2019, January 23\u201325). Spyware Detection using Temporal Logic. Proceedings of the 5th International Conference on Information Systems Security and Privacy, Prague, Czech Republic.","DOI":"10.5220\/0007704806900699"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Elmalaki, S., Ho, B.J., Alzantot, M., Shoukry, Y., and Srivastava, M. (2019, January 23). Spycon: Adaptation based spyware in human-in-the-loop IoT. Proceedings of the 2019 IEEE Security and Privacy Workshops, San Francisco, CA, USA.","DOI":"10.1109\/SPW.2019.00039"},{"key":"ref_29","first-page":"1","article-title":"Efficient handwritten passwords to overcome spyware attacks","volume":"3","author":"Suruthi","year":"2021","journal-title":"Sci. Technol."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., Smadi, A.A., and Allehyani, M.F. (2021). Meticulously Intelligent Identification System for Smart Grid Network Stability to Optimize Risk Management. Energies, 14.","DOI":"10.3390\/en14216935"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"10885","DOI":"10.1007\/s00521-022-07015-9","article-title":"High-performance intrusion detection system for networked UAVs via deep learning","volume":"34","year":"2022","journal-title":"Neural Comput. Appl."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Conti, M., Rigoni, G., and Toffalini, F. (2020, January 25\u201328). ASAINT: A spy App identification system based on network traffic. Proceedings of the ARES \u201920\u2014The 15th International Conference on Availability, Reliability, and Security, Virtual.","DOI":"10.1145\/3407023.3407076"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Malik, J., and Kaushal, R. (2016, January 5\u20138). CREDROID: Android malware detection by network traffic analysis. Proceedings of the PAMCO 2016\u20142nd MobiHoc International Workshop on Privacy-Aware Mobile Computing, Paderborn, Germany.","DOI":"10.1145\/2940343.2940348"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., and Al-Dala\u2019ien, M. (2022). ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks. J. Sens. Actuator Netw., 11.","DOI":"10.3390\/jsan11010018"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Albulayhi, K., Abu Al-Haija, Q., Alsuhibany, S.A., Jillepalli, A.A., Ashrafuzzaman, M., and Sheldon, F.T. (2022). IoT Intrusion Detection Using Machine Learning with a Novel High Performing Feature Selection Method. Appl. Sci., 12.","DOI":"10.3390\/app12105015"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Abu Al-Haija, Q., and Zein-Sabatto, S. (2020). An Efficient Deep-Learning-Based Detection and Classification System for Cyber-Attacks in IoT Communication Networks. Electronics, 9.","DOI":"10.20944\/preprints202011.0508.v2"},{"key":"ref_37","first-page":"992","article-title":"Android fragmentation classification, causes, problems and solutions","volume":"14","author":"Kamran","year":"2016","journal-title":"Int. J. Comput. Sci. Inf. Secur."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/2\/102\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:26:14Z","timestamp":1760120774000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/2\/102"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,7]]},"references-count":37,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2023,2]]}},"alternative-id":["info14020102"],"URL":"https:\/\/doi.org\/10.3390\/info14020102","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2023,2,7]]}}}