{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,15]],"date-time":"2026-10-15T16:16:18Z","timestamp":1792080978170,"version":"4.4.0"},"reference-count":49,"publisher":"PeerJ","license":[{"start":{"date-parts":[[2024,10,17]],"date-time":"2024-10-17T00:00:00Z","timestamp":1729123200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"abstract":"<jats:sec>\n               <jats:title>Background<\/jats:title>\n               <jats:p>The Android operating system holds the vast majority of the market share in smart device usage worldwide. The Android operating system, which is of interest to users, is increasing its usage rate day by day due to its open source nature and free applications. Applications can be installed on the Android operating system from official application markets and unofficial third-party environments, which poses a great risk to users\u2019 privacy and security.<\/jats:p>\n            <\/jats:sec>\n            <jats:sec>\n               <jats:title>Methods<\/jats:title>\n               <jats:p>In this study, an attention-layered mini-ResNet model is proposed, which can detect QR code-like images created using the 100 most effective defined permission information of Android applications. In the proposed method, permission information is obtained from four different datasets with different number of applications. QR code-like images of size 10x10x1 are created by selecting effective permissions using the chi-square technique. In the proposed classification architecture, residual layers are used to avoid ignoring the residual features of the images, and attention layers are used to focus on specific regions after each residual layer. The proposed architecture has a low number of parameters and memory consumption despite adding the residual layer and the weighting operations in the attention layer.<\/jats:p>\n            <\/jats:sec>\n            <jats:sec>\n               <jats:title>Results<\/jats:title>\n               <jats:p>Using the proposed method, accuracy values of 96.95%, 98.34%, 98.33% and 100% were achieved, respectively, on four datasets containing applications obtained from different sources such as Androzoo, Drebin, Genome and Google Play Store. On the Mix dataset, which is a combination of four datasets, an accuracy value of 96.7% was produced with the proposed method. When 10-fold cross validation was applied to reduce the suggested bias, accuracy values of 97.50%, 98.62%, 98%, 94% and 97.61% were obtained, respectively. The success and durability of the proposed method in different environments have been tested through experiments conducted on different datasets. The results show that the proposed method exhibits better classification performance compared to classical machine learning algorithms, deep learning-based studies using permission information, and similar image-based studies.<\/jats:p>\n            <\/jats:sec>","DOI":"10.7717\/peerj-cs.2362","type":"journal-article","created":{"date-parts":[[2024,10,17]],"date-time":"2024-10-17T07:31:32Z","timestamp":1729150292000},"page":"e2362","source":"Crossref","is-referenced-by-count":4,"title":["PermQRDroid: Android malware detection with novel attention layered mini-ResNet architecture over effective permission information image"],"prefix":"10.7717","volume":"10","author":[{"given":"Kaz\u0131m","family":"K\u0131l\u0131\u00e7","sequence":"first","affiliation":[{"name":"IoTLab, Department of Computer Engineering, Gazi University, Ankara, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"\u0130brahim Alper","family":"Do\u011fru","sequence":"additional","affiliation":[{"name":"IoTLab, Department of Computer Engineering, Gazi University, Ankara, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sinan","family":"Toklu","sequence":"additional","affiliation":[{"name":"IoTLab, Department of Computer Engineering, Gazi University, Ankara, Turkey"},{"name":"Information Technology Faculty, Mingachevir State University, Minge\u00e7evir, Minge\u00e7evir, Azerbaijan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"4443","published-online":{"date-parts":[[2024,10,17]]},"reference":[{"issue":"8","key":"10.7717\/peerj-cs.2362\/ref-1","doi-asserted-by":"publisher","first-page":"2964","DOI":"10.3837\/tiis.2015.08.012","article-title":"Intelligent approach for android malware detection","volume":"9","author":"Abdulla","year":"2015","journal-title":"KSII Transactions on Internet and Information Systems"},{"key":"10.7717\/peerj-cs.2362\/ref-2","first-page":"468","article-title":"Androzoo: collecting millions of android apps for the research community","author":"Allix","year":"2016"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-3","doi-asserted-by":"publisher","first-page":"123","DOI":"10.3390\/sym15010123","article-title":"Malware detection using deep learning and correlation-based feature selection","volume":"15","author":"Alomari","year":"2023","journal-title":"Symmetry"},{"issue":"3","key":"10.7717\/peerj-cs.2362\/ref-4","doi-asserted-by":"publisher","first-page":"2232","DOI":"10.3906\/elk-1602-107","article-title":"Android malware classification based on ANFIS with fuzzy c-means clustering using significant application permissions","volume":"25","author":"Altaher","year":"2017","journal-title":"Turkish Journal of Electrical Engineering & Computer Sciences"},{"key":"10.7717\/peerj-cs.2362\/ref-5","first-page":"23","article-title":"Drebin: effective and explainable detection of android malware in your pocket","author":"Arp","year":"2014"},{"key":"10.7717\/peerj-cs.2362\/ref-6","doi-asserted-by":"publisher","first-page":"e533","DOI":"10.7717\/peerj-cs.533","article-title":"AndroAnalyzer: android malicious software detection based on deep learning","volume":"7","author":"Arslan","year":"2021","journal-title":"PeerJ Computer Science"},{"key":"10.7717\/peerj-cs.2362\/ref-7","doi-asserted-by":"publisher","first-page":"e1043","DOI":"10.7717\/peerj-cs.1043","article-title":"FG-Droid: grouping based feature size reduction for Android malware detection","volume":"8","author":"Arslan","year":"2022","journal-title":"PeerJ Computer Science"},{"issue":"23","key":"10.7717\/peerj-cs.2362\/ref-8","doi-asserted-by":"publisher","first-page":"e7180","DOI":"10.1002\/cpe.7180","article-title":"AMD-CNN: android malware detection via feature graph and convolutional neural networks","volume":"34","author":"Arslan","year":"2022","journal-title":"Concurrency and Computation: Practice and Experience"},{"issue":"3","key":"10.7717\/peerj-cs.2362\/ref-9","doi-asserted-by":"publisher","first-page":"1484","DOI":"10.3390\/app13031484","article-title":"An ensemble approach based on fuzzy logic using machine learning classifiers for Android malware detection","volume":"13","author":"Atacak","year":"2023","journal-title":"Applied Sciences"},{"key":"10.7717\/peerj-cs.2362\/ref-10","doi-asserted-by":"publisher","first-page":"e1092","DOI":"10.7717\/peerj-cs.1092","article-title":"Android malware detection using hybrid ANFIS architecture with low computational cost convolutional layers","volume":"8","author":"Atacak","year":"2022","journal-title":"PeerJ Computer Science"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-11","doi-asserted-by":"publisher","first-page":"3093","DOI":"10.1038\/s41598-023-30028-w","article-title":"Evaluation and classification of obfuscated Android malware through deep learning using ensemble voting mechanism","volume":"13","author":"Aurangzeb","year":"2023","journal-title":"Scientific Reports"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-12","doi-asserted-by":"publisher","first-page":"212","DOI":"10.1038\/s41597-024-03027-3","article-title":"AndroDex: Android Dex images of obfuscated malware","volume":"11","author":"Aurangzeb","year":"2024","journal-title":"Scientific Data"},{"issue":"3","key":"10.7717\/peerj-cs.2362\/ref-13","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1080\/15536548.2015.1073510","article-title":"M0droid: an android behavioral-based malware detection model","volume":"11","author":"Damshenas","year":"2015","journal-title":"Journal of Information Privacy and Security"},{"issue":"4","key":"10.7717\/peerj-cs.2362\/ref-14","doi-asserted-by":"publisher","first-page":"4543","DOI":"10.1007\/s10489-021-02550-9","article-title":"A comprehensive survey on feature selection in the various fields of machine learning","volume":"52","author":"Dhal","year":"2022","journal-title":"Applied Intelligence"},{"key":"10.7717\/peerj-cs.2362\/ref-15","doi-asserted-by":"publisher","first-page":"123675","DOI":"10.1016\/j.eswa.2024.123675","article-title":"A hybrid approach for Android malware detection using improved multi-scale convolutional neural networks and residual networks","volume":"249","author":"Fu","year":"2024","journal-title":"Expert Systems with Applications"},{"key":"10.7717\/peerj-cs.2362\/ref-16","doi-asserted-by":"publisher","first-page":"354","DOI":"10.1016\/j.patcog.2017.10.013","article-title":"Recent advances in convolutional neural networks","volume":"77","author":"Gu","year":"2018","journal-title":"Pattern Recognition"},{"key":"10.7717\/peerj-cs.2362\/ref-17","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.7717\/peerj-cs.2362\/ref-18","doi-asserted-by":"publisher","first-page":"117833","DOI":"10.1016\/j.eswa.2022.117833","article-title":"DroidMalwareDetector: a novel Android malware detection framework based on convolutional neural network","volume":"206","author":"Kabakus","year":"2022","journal-title":"Expert Systems with Applications"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-19","first-page":"3710968","article-title":"Op2Vec: an Opcode embedding technique and dataset design for end-to-end detection of android malware","volume":"2022","author":"Khan","year":"2022","journal-title":"Security and Communication Networks"},{"key":"10.7717\/peerj-cs.2362\/ref-20","doi-asserted-by":"publisher","first-page":"27527","DOI":"10.1109\/ACCESS.2023.3258377","article-title":"Apk2Audio4AndMal: audio based malware family detection framework","volume":"11","author":"Kural","year":"2023","journal-title":"IEEE Access"},{"issue":"7553","key":"10.7717\/peerj-cs.2362\/ref-21","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"LeCun","year":"2015","journal-title":"Nature"},{"issue":"12","key":"10.7717\/peerj-cs.2362\/ref-22","doi-asserted-by":"crossref","first-page":"6999","DOI":"10.1109\/TNNLS.2021.3084827","article-title":"A survey of convolutional neural networks: analysis, applications, and prospects","volume":"33","author":"Li","year":"2021","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"key":"10.7717\/peerj-cs.2362\/ref-23","first-page":"515","article-title":"Dynamic android malware category classification using semi-supervised deep learning","author":"Mahdavifar","year":"2020"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-24","doi-asserted-by":"publisher","first-page":"10724","DOI":"10.1038\/s41598-024-60982-y","article-title":"PermDroid a framework developed using proposed feature selection approach and machine learning techniques for Android malware detection","volume":"14","author":"Mahindru","year":"2024","journal-title":"Scientific Reports"},{"issue":"3","key":"10.7717\/peerj-cs.2362\/ref-25","doi-asserted-by":"publisher","first-page":"424","DOI":"10.1016\/j.icte.2021.09.003","article-title":"A Bayesian probability model for Android malware detection","volume":"8","author":"Mat","year":"2022","journal-title":"ICT Express"},{"key":"10.7717\/peerj-cs.2362\/ref-26","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1016\/j.neucom.2021.03.091","article-title":"A review on the attention mechanism of deep learning","volume":"452","author":"Niu","year":"2021","journal-title":"Neurocomputing"},{"issue":"1","key":"10.7717\/peerj-cs.2362\/ref-27","doi-asserted-by":"publisher","first-page":"19534","DOI":"10.1038\/s41598-022-23766-w","article-title":"AndroMalPack: enhancing the ML-based malware classification by detection and removal of repacked apps for Android systems","volume":"12","author":"Rafiq","year":"2022","journal-title":"Scientific Reports"},{"key":"10.7717\/peerj-cs.2362\/ref-28","first-page":"3226","article-title":"Malbert: malware detection using bidirectional encoder representations from transformers","author":"Rahali","year":"2021"},{"key":"10.7717\/peerj-cs.2362\/ref-29","first-page":"1","article-title":"Graph-based android malware detection and categorization through BERT transformer","author":"Saracino","year":"2023"},{"key":"10.7717\/peerj-cs.2362\/ref-30","doi-asserted-by":"publisher","first-page":"4903","DOI":"10.1007\/s00521-021-05875-1","article-title":"A novel permission-based Android malware detection system using feature selection based on linear regression","volume":"35","author":"\u015eahin","year":"2023","journal-title":"Neural Computing and Applications"},{"key":"10.7717\/peerj-cs.2362\/ref-31","doi-asserted-by":"publisher","first-page":"14246","DOI":"10.1109\/ACCESS.2022.3146363","article-title":"LinRegDroid: detection of android malware using multiple linear regression models-based classifiers","volume":"10","author":"\u015eah\u0131n","year":"2022","journal-title":"IEEE Access"},{"issue":"4","key":"10.7717\/peerj-cs.2362\/ref-32","doi-asserted-by":"publisher","first-page":"10525","DOI":"10.1007\/s11042-023-16035-z","article-title":"A new approach to android malware detection using fuzzy logic-based simulated annealing and feature selection","volume":"83","author":"Seyfari","year":"2024","journal-title":"Multimedia Tools and Applications"},{"key":"10.7717\/peerj-cs.2362\/ref-33","article-title":"IT threat evolution in Q1 2022","author":"Sh\u0131shkova","year":"2022"},{"key":"10.7717\/peerj-cs.2362\/ref-34","doi-asserted-by":"publisher","first-page":"100130","DOI":"10.1016\/j.teler.2024.100130","article-title":"Android malware detection and identification frameworks by leveraging the machine and deep learning techniques: a comprehensive review","volume":"14","author":"Smmarwar","year":"2024","journal-title":"Telematics and Informatics Reports"},{"key":"10.7717\/peerj-cs.2362\/ref-35","article-title":"Number of available applications in the Google Play Store from March 2017 to June 2024","author":"Statista","year":"2024"},{"key":"10.7717\/peerj-cs.2362\/ref-36","doi-asserted-by":"publisher","first-page":"103721","DOI":"10.1016\/j.jisa.2024.103721","article-title":"Android malware detection based on a novel mixed bytecode image combined with attention mechanism","volume":"82","author":"Tang","year":"2024","journal-title":"Journal of Information Security and Applications"},{"key":"10.7717\/peerj-cs.2362\/ref-37","doi-asserted-by":"publisher","first-page":"103282","DOI":"10.1016\/j.cose.2023.103282","article-title":"Using multi-audio feature fusion for Android malware detection","volume":"131","author":"Tarwireyi","year":"2023","journal-title":"Computers & Security"},{"issue":"3","key":"10.7717\/peerj-cs.2362\/ref-38","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1007\/s11554-023-01311-w","article-title":"RT-Droid: a novel approach for real-time android application analysis with transfer learning-based CNN models","volume":"20","author":"Tasyurek","year":"2023","journal-title":"Journal of Real-Time Image Processing"},{"key":"10.7717\/peerj-cs.2362\/ref-39","article-title":"Number Of Smartphone Users Worldwide (Billions)","author":"Turner","year":"2024"},{"issue":"37","key":"10.7717\/peerj-cs.2362\/ref-40","doi-asserted-by":"publisher","first-page":"45","DOI":"10.18046\/syt.v14i37.2241","article-title":"Framework for malware analysis in Android","volume":"14","author":"Urcuqui-L\u00f3pez","year":"2016","journal-title":"Sistemas y Telem\u00e1tica"},{"key":"10.7717\/peerj-cs.2362\/ref-41","article-title":"Attention is all you need","author":"Vaswani","year":"2017"},{"key":"10.7717\/peerj-cs.2362\/ref-42","article-title":"Virus analysis\u2014VirusTotal","author":"VT Team","year":"2020"},{"key":"10.7717\/peerj-cs.2362\/ref-43","first-page":"252","article-title":"Deep ground truth analysis of current android malware","author":"Wei","year":"2017"},{"key":"10.7717\/peerj-cs.2362\/ref-44","first-page":"1259","article-title":"An image-inspired and cnn-based android malware detection approach","author":"Xiao","year":"2019"},{"issue":"4","key":"10.7717\/peerj-cs.2362\/ref-45","doi-asserted-by":"publisher","first-page":"3979","DOI":"10.1007\/s11042-017-5104-0","article-title":"Android malware detection based on system call sequences and LSTM","volume":"78","author":"Xiao","year":"2019","journal-title":"Multimedia Tools and Applications"},{"key":"10.7717\/peerj-cs.2362\/ref-46","doi-asserted-by":"publisher","first-page":"102622","DOI":"10.1016\/j.cose.2022.102622","article-title":"EfficientNet convolutional neural networks-based Android malware detection","volume":"115","author":"Yadav","year":"2022","journal-title":"Computers & Security"},{"key":"10.7717\/peerj-cs.2362\/ref-47","doi-asserted-by":"publisher","first-page":"109","DOI":"10.1016\/j.microrel.2019.01.007","article-title":"An Android mutation malware detection based on deep learning using visualization of importance from codes","volume":"93","author":"Yen","year":"2019","journal-title":"Microelectronics Reliability"},{"key":"10.7717\/peerj-cs.2362\/ref-48","first-page":"95","article-title":"Dissecting android malware: characterization and evolution","author":"Zhou","year":"2012"},{"key":"10.7717\/peerj-cs.2362\/ref-49","doi-asserted-by":"publisher","first-page":"118705","DOI":"10.1016\/j.eswa.2022.118705","article-title":"Android malware detection based on multi-head squeeze-and-excitation residual network","volume":"212","author":"Zhu","year":"2023","journal-title":"Expert Systems with Applications"}],"container-title":["PeerJ Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/peerj.com\/articles\/cs-2362.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2362.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2362.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2362.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,17]],"date-time":"2024-10-17T07:31:44Z","timestamp":1729150304000},"score":1,"resource":{"primary":{"URL":"https:\/\/peerj.com\/articles\/cs-2362"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,17]]},"references-count":49,"alternative-id":["10.7717\/peerj-cs.2362"],"URL":"https:\/\/doi.org\/10.7717\/peerj-cs.2362","archive":["CLOCKSS","LOCKSS","Portico"],"relation":{},"ISSN":["2376-5992"],"issn-type":[{"value":"2376-5992","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,17]]},"article-number":"e2362"}}