{"id":"https://openalex.org/W2067547021","doi":"https://doi.org/10.1109/ares.2014.12","title":"Divide-and-Conquer: Why Android Malware Cannot Be Stopped","display_name":"Divide-and-Conquer: Why Android Malware Cannot Be Stopped","publication_year":2014,"publication_date":"2014-09-01","ids":{"openalex":"https://openalex.org/W2067547021","doi":"https://doi.org/10.1109/ares.2014.12","mag":"2067547021"},"language":"en","primary_location":{"id":"doi:10.1109/ares.2014.12","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ares.2014.12","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 Ninth International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066091127","display_name":"Dominik Maier","orcid":"https://orcid.org/0000-0002-5588-5008"},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dominik Maier","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013627385","display_name":"Tilo M\u00fcller","orcid":"https://orcid.org/0009-0007-0430-1467"},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tilo Muller","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068308432","display_name":"Mykola Protsenko","orcid":null},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mykola Protsenko","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t, Erlangen-N\u00fcrnberg, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I181369854"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"30","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9518073201179504},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8483303189277649},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8219578266143799},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.7553597688674927},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.7360032796859741},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.6403800249099731},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.6332317590713501},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.622979998588562},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4865056872367859},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47742804884910583},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.45089295506477356},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.45053431391716003},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1314937174320221}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9518073201179504},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8483303189277649},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8219578266143799},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.7553597688674927},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.7360032796859741},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.6403800249099731},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.6332317590713501},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.622979998588562},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4865056872367859},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47742804884910583},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.45089295506477356},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.45053431391716003},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1314937174320221}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ares.2014.12","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ares.2014.12","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 Ninth International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W147685372","https://openalex.org/W191656338","https://openalex.org/W1531023122","https://openalex.org/W1963971515","https://openalex.org/W1964241047","https://openalex.org/W1989147187","https://openalex.org/W1997201541","https://openalex.org/W2014390890","https://openalex.org/W2030314305","https://openalex.org/W2031666744","https://openalex.org/W2060646286","https://openalex.org/W2065339563","https://openalex.org/W2076192525","https://openalex.org/W2084944235","https://openalex.org/W2104839588","https://openalex.org/W2111038628","https://openalex.org/W2115175195","https://openalex.org/W2120297918","https://openalex.org/W2122672392","https://openalex.org/W2132874238","https://openalex.org/W2145688371","https://openalex.org/W2152149943","https://openalex.org/W2153497135","https://openalex.org/W2186224748","https://openalex.org/W2399034518","https://openalex.org/W3210873429","https://openalex.org/W6606062397","https://openalex.org/W6641190993","https://openalex.org/W6666744930","https://openalex.org/W6677743974","https://openalex.org/W6712520696","https://openalex.org/W6944952481"],"related_works":["https://openalex.org/W3135174262","https://openalex.org/W2183925834","https://openalex.org/W3199551743","https://openalex.org/W2717179875","https://openalex.org/W3200508744","https://openalex.org/W4390188637","https://openalex.org/W4249118297","https://openalex.org/W2731848812","https://openalex.org/W2810666735","https://openalex.org/W2743799202"],"abstract_inverted_index":{"In":[0,104],"this":[1,84,105],"paper,":[2],"we":[3,48,107,123],"demonstrate":[4,120],"that":[5,91,110,127,137],"Android":[6,172],"malware":[7,71,87,126,130,139,160],"can":[8,72,141],"bypass":[9],"all":[10,56],"automated":[11],"analysis":[12,34,43,69],"systems,":[13],"including":[14],"AV":[15,168],"solutions,":[16],"mobile":[17],"sandboxes,":[18],"and":[19,100],"the":[20,30,38,65,143],"Google":[21,144],"Bouncer.":[22],"We":[23,82,134],"propose":[24],"a":[25,96],"tool":[26],"called":[27],"Sand-Finger":[28],"for":[29,132,159,167],"fingerprinting":[31,99],"of":[32,40,67,86,98,156],"Android-based":[33],"systems.":[35],"By":[36],"analyzing":[37],"fingerprints":[39],"ten":[41],"unique":[42],"environments":[44,58],"from":[45,60],"different":[46],"vendors,":[47],"were":[49],"able":[50],"to":[51,153,170],"find":[52],"characteristics":[53],"in":[54],"which":[55],"tested":[57],"differ":[59],"actual":[61],"hardware.":[62],"Depending":[63],"on":[64],"availability":[66],"an":[68,157],"system,":[70],"either":[73],"behave":[74],"benignly":[75],"or":[76],"load":[77],"malicious":[78],"code":[79,102],"at":[80,162],"runtime.":[81],"classify":[83],"group":[85],"as":[88,114,116],"Divide-and-Conquer":[89],"attacks":[90,109],"are":[92],"efficiently":[93],"obfuscated":[94],"by":[95,147],"combination":[97],"dynamic":[101,113],"loading.":[103],"group,":[106],"aggregate":[108],"work":[111],"against":[112,174],"well":[115],"static":[117],"analysis.":[118],"To":[119],"our":[121],"approach,":[122],"create":[124],"proof-of-concept":[125],"surpasses":[128],"up-to-date":[129],"scanners":[131],"Android.":[133],"also":[135],"prove":[136],"known":[138],"samples":[140],"enter":[142],"Play":[145],"Store":[146],"modifying":[148],"them":[149],"only":[150],"slightly.":[151],"Due":[152],"Android's":[154],"lack":[155],"API":[158],"scanning":[161],"runtime,":[163],"it":[164],"is":[165],"impossible":[166],"solutions":[169],"secure":[171],"devices":[173],"these":[175],"attacks.":[176]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":5},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":13},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":8},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}