{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T02:49:41Z","timestamp":1760237381099,"version":"build-2065373602"},"reference-count":44,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2020,5,13]],"date-time":"2020-05-13T00:00:00Z","timestamp":1589328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100010665","name":"H2020 Marie Sk\u0142odowska-Curie Actions","doi-asserted-by":"publisher","award":["H2020-MSCA-RISE-2016-734875"],"award-info":[{"award-number":["H2020-MSCA-RISE-2016-734875"]}],"id":[{"id":"10.13039\/100010665","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006595","name":"Unitatea Executiva pentru Finantarea Invatamantului Superior, a Cercetarii, Dezvoltarii si Inovarii","doi-asserted-by":"publisher","award":["PN-III-P1-1.2-PCCDI2017-2017-0637"],"award-info":[{"award-number":["PN-III-P1-1.2-PCCDI2017-2017-0637"]}],"id":[{"id":"10.13039\/501100006595","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>This paper describes the steps involved in obtaining a set of relevant data sources and the accompanying method using software-based sensors to detect anomalous behavior in modern smartphones based on machine-learning classifiers. Three classes of models are investigated for classification: logistic regressions, shallow neural nets, and support vector machines. The paper details the design, implementation, and comparative evaluation of all three classes. If necessary, the approach could be extended to other computing devices, if appropriate changes were made to the software infrastructure, based upon mandatory capabilities of the underlying hardware.<\/jats:p>","DOI":"10.3390\/s20102768","type":"journal-article","created":{"date-parts":[[2020,5,14]],"date-time":"2020-05-14T02:55:41Z","timestamp":1589424941000},"page":"2768","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Detection of Anomalous Behavior in Modern Smartphones Using Software Sensor-Based Data"],"prefix":"10.3390","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2000-4792","authenticated-orcid":false,"given":"Victor","family":"Vl\u0103d\u0103reanu","sequence":"first","affiliation":[{"name":"Institute of Solid Mechanics of the Romanian Academy, 010141 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5947-505X","authenticated-orcid":false,"given":"Valentin-Gabriel","family":"Voiculescu","sequence":"additional","affiliation":[{"name":"Faculty of Electronics, Telecommunications and Information Technology, University Politehnica of Bucharest, 061071 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vlad-Alexandru","family":"Grosu","sequence":"additional","affiliation":[{"name":"Faculty of Electronics, Telecommunications and Information Technology, University Politehnica of Bucharest, 061071 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luige","family":"Vl\u0103d\u0103reanu","sequence":"additional","affiliation":[{"name":"Institute of Solid Mechanics of the Romanian Academy, 010141 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ana-Maria","family":"Travediu","sequence":"additional","affiliation":[{"name":"Institute of Solid Mechanics of the Romanian Academy, 010141 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hao","family":"Yan","sequence":"additional","affiliation":[{"name":"Parallel Robot and Mechatronic System Laboratory of Hebei Province, Yanshan University, Qinhuangdao 066004, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongbo","family":"Wang","sequence":"additional","affiliation":[{"name":"Parallel Robot and Mechatronic System Laboratory of Hebei Province, Yanshan University, Qinhuangdao 066004, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Laura","family":"Ruse","sequence":"additional","affiliation":[{"name":"Faculty of Automatic Control and Computers, University Politehnica of Bucharest, 060042 Bucharest, Romania"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,5,13]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"202","DOI":"10.12753\/2066-026X-15-030","article-title":"Infrastructure for Learning the Behaviour Of Malicious and Abnormal Applications","volume":"Volume 1","author":"Gheorghe","year":"2015","journal-title":"The International Scientific Conference eLearning and Software for Education"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Gheorghe, L., Marin, B., Gibson, G., Mogosanu, L., Deaconescu, R., and Voiculescu, V.-G. (2015). Smart Malware Detection on Android, SCN, Wiley.","DOI":"10.1002\/sec.1340"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Zhou, Y., and Jiang, X. (2012). Dissecting Android Malware: Characterization and Evolution. IEEE Symp. Secur. Privacy, 95\u2013109.","DOI":"10.1109\/SP.2012.16"},{"key":"ref_4","unstructured":"(2020, March 20). Slideme. Available online: Slideme.org."},{"key":"ref_5","unstructured":"(2020, March 20). 42matters. Available online: https:\/\/42matters.com."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1120","DOI":"10.1007\/s42452-019-1124-x","article-title":"The Android malware detection systems between hope and reality","volume":"1","author":"Bakour","year":"2019","journal-title":"Sn Appl. Sci."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Li, C., Millis, K., Zhu, R., Niu, D., Zhang, H., and Kinawi, H. (2018). Android Malware Detection based on Factorization Machine. arXiv.","DOI":"10.1109\/ACCESS.2019.2958927"},{"key":"ref_8","unstructured":"Botnet Research Team (2020, March 20). SandDroid\u2014An Automatic Android Application Analysis System. Available online: http:\/\/sanddroid.xjtu.edu.cn:8080\/#."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"887","DOI":"10.1016\/j.future.2019.03.007","article-title":"Mobile malware attacks: Review, taxonomy & future directions","volume":"97","author":"Qamar","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Chalapathy, R., and Chawla, S. (2019). Deep learning for anomaly detection: A survey. Arxiv Prepr.","DOI":"10.1145\/3394486.3406704"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3073559","article-title":"A survey on malware detection using data mining techniques","volume":"50","author":"Ye","year":"2017","journal-title":"ACM Comput. Surv. (Csur)"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Dumitrache, I., Caramihai, S.I., Moisescu, M.A., Sacala, I.S., Vladareanu, L., and Repta, D. (2019). A Perceptive Interface for Intelligent Cyber Enterprises. Sensors, 19.","DOI":"10.3390\/s19204422"},{"key":"ref_13","unstructured":"Zong, B., Song, Q., Min, M.R., Cheng, W., Lumezanu, C., Cho, D., and Chen, H. (2020, March 20). Deep Auto-Encoding Gaussian Mixture Model for Unsupervised Anomaly Detection. Available online: https:\/\/sites.cs.ucsb.edu\/~bzong\/doc\/iclr18-dagmm.pdf."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Aljawarneh, S.A., and Vangipuram, R. (2018). GARUDA: Gaussian dissimilarity measure for feature representation and anomaly detection in Internet of things. J. Supercomput., 1\u201338.","DOI":"10.1007\/s11227-018-2397-3"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"45","DOI":"10.1016\/j.trc.2016.01.007","article-title":"Anomaly detection via a Gaussian Mixture Model for flight operation and safety monitoring","volume":"64","author":"Li","year":"2016","journal-title":"Transp. Res. Part C Emerg. Technol."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1016\/j.patcog.2016.03.028","article-title":"High-dimensional and large-scale anomaly detection using a linear one-class SVM with deep learning","volume":"58","author":"Erfani","year":"2016","journal-title":"Pattern Recognit."},{"key":"ref_17","unstructured":"Li, K.L., Huang, H.K., Tian, S.F., and Xu, W. (2003, January 5). Improving one-class SVM for anomaly detection. Proceedings of the 2003 IEEE International Conference on Machine Learning and Cybernetics (IEEE Cat. No. 03EX693), Xi\u2019an, China."},{"key":"ref_18","unstructured":"(2020, March 20). Contagio Mobile. Available online: http:\/\/contagiomobile.deependresearch.org\/index.html."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Witayangkurn, A., Horanont, T., Sekimoto, Y., and Shibasaki, R. (2013, January 8\u201312). Anomalous event detection on large-scale gps data from mobile phones using hidden markov model and cloud platform. Proceedings of the 2013 ACM Conference on Pervasive and Ubiquitous Computing Adjunct Publication, Zurich, Switzerland.","DOI":"10.1145\/2494091.2497352"},{"key":"ref_20","first-page":"156","article-title":"Anomaly detection on mobile phone based operational behavior","volume":"3","author":"Isohara","year":"2008","journal-title":"Inf. Media Technol."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Sanz, B., Santos, I., Ugarte-Pedrero, X., Laorden, C., Nieves, J., and Bringas, P.G. (2014). Anomaly detection using string analysis for android malware detection. International Joint Conference SOCO\u201913-CISIS\u201913-ICEUTE\u201913, Springer.","DOI":"10.1007\/978-3-319-01854-6_48"},{"key":"ref_22","unstructured":"Majeed, K., Jing, Y., Novakovic, D., and Ouazzane, K. (2014, January 17\u201318). Behaviour based anomaly detection for smartphones using machine learning algorithm. Proceedings of the International conference on Computer Science and Information Systems (ICSIS\u20192014), Dubai, UAE."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"137","DOI":"10.1016\/j.pmcj.2014.10.007","article-title":"Power-aware anomaly detection in smartphones: An analysis of on-platform versus externalized operation","volume":"18","author":"Tapiador","year":"2015","journal-title":"Pervasive Mob. Comput."},{"key":"ref_24","unstructured":"Brownlee, J. (2020, March 20). Better Deep Learning: Train Faster, Reduce Overfitting, and Make Better Predictions. Machine Learning Mastery, Blog Excerpt. Available online: https:\/\/machinelearningmastery.com\/how-to-choose-loss-functions-when-training-deep-learning-neural-networks\/."},{"key":"ref_25","unstructured":"Arora, S., and Hazan, E. (2020, March 20). COS 402 \u2013 Machine Learning and Artificial Intelligence Fall 2016 Lecture Notes. Available online: https:\/\/www.cs.princeton.edu\/courses\/archive\/fall16\/cos402\/lectures\/402-lec5.pdf."},{"key":"ref_26","first-page":"1","article-title":"CS229 Machine Learning Lecture notes","volume":"1","author":"Ng","year":"2000","journal-title":"Cs229 Lect. Notes"},{"key":"ref_27","unstructured":"Gandhi, R.X. (2020, March 20). Support vector machine\u2014Introduction to machine learning algorithms. Towards Data Science. Available online: https:\/\/towardsdatascience.com\/support-vector-machine-introduction-to-machine-learning-algorithms-934a444fca47."},{"key":"ref_28","first-page":"37","article-title":"Evaluation: From Precision, Recall and F-Measure to ROC, Informedness, Markedness and Correlation","volume":"2","author":"Powers","year":"2011","journal-title":"J. Mach. Learn. Res."},{"key":"ref_29","unstructured":"Cramer, J.S. (2020, March 20). The Origins of Logistic Regression. Available online: https:\/\/papers.tinbergen.nl\/02119.pdf."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"12","DOI":"10.11613\/BM.2014.003","article-title":"Understanding logistic regression analysis","volume":"24","author":"Sperandei","year":"2014","journal-title":"Biochem. Med. Biochem. Med."},{"key":"ref_31","unstructured":"Ravaut, M., and Gorti, S.K. (2020, March 20). Faster Gradient Descent via an Adaptive Learning Rate. Available online: http:\/\/www.cs.toronto.edu\/~satyag\/assets\/final_report.pdf."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1007\/BF00994018","article-title":"Support-vector networks","volume":"20","author":"Cortes","year":"1995","journal-title":"Mach. Learn."},{"key":"ref_33","unstructured":"Ramo, K. (2019). Hands-On Java Deep Learning for Computer Vision: Implement Machine Learning and Neural Network Methodologies to Perform Computer Vision-Related Tasks, Packt Publishing Ltd."},{"key":"ref_34","unstructured":"(2020, March 20). freeCodeCamp Notes on Machine Learning\u2013Support Vector Machine. Available online: https:\/\/guide.freecodecamp.org\/machine-learning\/support-vector-machine\/."},{"key":"ref_35","first-page":"318","article-title":"NAO robot fuzzy obstacle avoidance in virtual environment","volume":"7","author":"Melinte","year":"2019","journal-title":"Period. Eng. Nat. Sci."},{"key":"ref_36","unstructured":"Templeton, G. (2020, March 20). Artificial Neural Networks Are Changing the World. What Are They?. Available online: https:\/\/www.extremetech.com\/extreme\/215170-artificial-neural-networks-are-changing-the-world-what-are-they."},{"key":"ref_37","unstructured":"de JP Marques, S. (2003). Applied Statistics: Using SPSS, STATISTICA, and MATLAB, Springer."},{"key":"ref_38","unstructured":"(2020, April 25). Jos (10584) COCHRAN Q TEST. MATLAB Central File Exchange. Available online: https:\/\/www.mathworks.com\/matlabcentral\/fileexchange\/16753-cochran-q-test."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Agresti, A. (2003). Categorical Data Analysis, John Wiley & Sons.","DOI":"10.1002\/0471249688"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Fagerland, M.W., Lydersen, S., and Laake, P. (2013). The McNemar test for binary matched-pairs data: Mid-p and asymptotic are better than exact conditional. BMC Med Res. Methodol., 13.","DOI":"10.1186\/1471-2288-13-91"},{"key":"ref_41","unstructured":"(2020, April 15). Mathworks, Matlab Documentation\u2013Compare Predictive Accuracies of Two Classification Models (Testcholdout). Available online: https:\/\/www.mathworks.com\/help\/stats\/testcholdout.html."},{"key":"ref_42","first-page":"65","article-title":"A simple sequentially rejective multiple test procedure","volume":"6","author":"Holm","year":"1979","journal-title":"Scand. J. Stat."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"1185","DOI":"10.1111\/j.1541-0420.2010.01408.x","article-title":"Multiple McNemar tests","volume":"66","author":"Westfall","year":"2010","journal-title":"Biometrics"},{"key":"ref_44","unstructured":"(2020, April 28). Bonferroni Holm Correction for Multiple Comparisons in Matlab. Available online: http:\/\/freesourcecode.net\/matlabprojects\/64176\/bonferroni-holm-correction-for-multiple-comparisons-in-matlab."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/10\/2768\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T09:28:13Z","timestamp":1760174893000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/10\/2768"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,5,13]]},"references-count":44,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2020,5]]}},"alternative-id":["s20102768"],"URL":"https:\/\/doi.org\/10.3390\/s20102768","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2020,5,13]]}}}