arXiv Machine Learning July 17, 2026 By Md Rafid Islam

Diagnosing and Mitigating Domain Shift in Permission-Based Android Malware Detection

Read the original on arXiv Machine Learning →

arXiv:2605. 09028v3 Announce Type: replace Abstract: Machine learning-based Android malware detectors often fail in real-world deployment due to domain shift, where models trained on one data source perform poorly on applications from another.

Summary generated by The Flow from the publisher's feed. The full article lives at arXiv Machine Learning.

arXiv Machine Learning

Aug 5

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

arXiv:2608. 03250v1 Announce Type: cross Abstract: The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications.

By Md Faisal Ahmed, Zarin Tasnim Biash, Abu Raihan Shakil, Ahmed Ann Noor Ryen, Arman Hossain, Faisal Bin Ashraf, Muhammad Iqbal Hossain

arXiv Machine Learning

Jun 26

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

arXiv:2606. 26707v1 Announce Type: cross Abstract: Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors.

By Christian Scano, Diego Soi, Angelo Sotgiu, Luca Demetrio, Davide Maiorca, Giorgio Giacinto, Fabio Roli, Battista Biggio

safety

arXiv Machine Learning

Jul 13

Regression-aware Continual Learning for Android Malware Detection

arXiv:2507. 18313v2 Announce Type: replace Abstract: Malware evolves rapidly, forcing machine learning-based detectors to be continuously updated.

By Daniele Ghiani, Daniele Angioni, Giorgio Piras, Angelo Sotgiu, Luca Minnei, Srishti Gupta, Maura Pintor, Fabio Roli, Battista Biggio

arXiv Machine Learning

Jun 8

Self-Supervised Learning for Android Malware Detection on a Time-Stamped Dataset

arXiv:2604. 23025v2 Announce Type: replace-cross Abstract: Android malware detectors built with machine learning often suffer from temporal bias: models are trained and evaluated without respecting apps' actual release times, inflating accuracy and weakening real-world robustness.

By Annan Fu, Hao Pei, Maryam Tanha

safety

arXiv AI

Jun 16

MASCOT-Android: A Curated Dataset and Automated Collection Pipeline for Android Malware Source Code Specimens

arXiv:2606. 16072v1 Announce Type: cross Abstract: Compared with binaries and decompiled code, malware source code more directly reflects the attackers' original intent.

By Bojing Li, Duo Zhong, Prajna Bhandary, Raguvir S, Charles Maxa, Robert J Joyce, Charles Nicholas

arXiv AI

Jul 16

Mind the Gap: Action Rebinding Attacks against Android GUI Agents

arXiv:2601. 12349v3 Announce Type: replace-cross Abstract: Large multimodal model powered GUI agents are emerging as high-privilege operators on mobile platforms, entrusted to perceive screen content and inject inputs across application boundaries.

By Yi Qian, Kunwei Qian, Xingbang He, Ligeng Chen, Jikang Zhang, Tiantai Zhang, Haiyang Wei, Linzhang Wang, Hao Wu, Bing Mao

agents multimodal safety

Related stories

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

Regression-aware Continual Learning for Android Malware Detection

Self-Supervised Learning for Android Malware Detection on a Time-Stamped Dataset

MASCOT-Android: A Curated Dataset and Automated Collection Pipeline for Android Malware Source Code Specimens

Mind the Gap: Action Rebinding Attacks against Android GUI Agents