{"authors":[{"id":"orcid_______::ad14d685d6b12cb35628fa85f202dc7b","fullName":"Ciaramella, Giovanni","name":"Giovanni","surname":"Ciaramella","rank":1,"pid":{"id":{"scheme":"orcid","value":"0009-0002-9512-0621"},"provenance":null}},{"id":"orcid_______::2e1e04dcd02fa9e93a7cea4862c3b04d","fullName":"Martinelli, Fabio","name":"Fabio","surname":"Martinelli","rank":2,"pid":{"id":{"scheme":"orcid","value":"0000-0002-6721-9395"},"provenance":null}},{"id":"orcid_______::ea1e1cfa27a27f73a8857b367418d73e","fullName":"Peluso, Christian","name":"Christian","surname":"Peluso","rank":3,"pid":{"id":{"scheme":"orcid","value":"0009-0001-2972-4374"},"provenance":null}},{"id":null,"fullName":"Santone, Antonella","name":"Antonella","surname":"Santone","rank":4,"pid":null},{"id":"orcid_______::a843e0bc36e535fa1789daa47c73c811","fullName":"Mercaldo, Francesco","name":"Francesco","surname":"Mercaldo","rank":5,"pid":{"id":{"scheme":"orcid","value":"0000-0002-9425-1657"},"provenance":null}}],"openAccessColor":"hybrid","publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"eng","label":"English"},"countries":[{"code":"IT","label":"Italy","provenance":null}],"subjects":[{"subject":{"scheme":"keyword","value":"Federated Machine Learning"},"provenance":null},{"subject":{"scheme":"keyword","value":"Android"},"provenance":null},{"subject":{"scheme":"keyword","value":"Privacy"},"provenance":null},{"subject":{"scheme":"keyword","value":"Machine learning"},"provenance":null},{"subject":{"scheme":"FOS","value":"0202 electrical engineering, electronic engineering, information engineering"},"provenance":null},{"subject":{"scheme":"keyword","value":"Security"},"provenance":null},{"subject":{"scheme":"FOS","value":"02 engineering and technology"},"provenance":null},{"subject":{"scheme":"keyword","value":"Malware"},"provenance":null},{"subject":{"scheme":"keyword","value":"Mobile"},"provenance":null}],"mainTitle":"A method for real-world privacy-preserving Android malware detection through Federated Machine Learning","subTitle":null,"descriptions":["<jats:p>One of the most critical issues associated with the use of the Internet of Things and Internet of Everything devices is privacy. Over the years, several methods have been introduced to try to address this phenomenon. In 2016, Google introduced the concept of Federated Learning, an innovative machine learning paradigm that allows models to be trained collaboratively across multiple decentralized devices or servers, holding local data samples, without exchanging them. This approach enhances data privacy and security by ensuring that raw data remains on local devices while only model updates are shared and aggregated. In this paper, we present a privacy-preserving Android malware detector based on Federated Machine Learning. As a first step, we built a dataset comprising over 40,000 Android applications, including trusted and malicious (belonging to 72 malware families) samples. Afterward, we conducted experiments on two pre-trained models by exploiting the CIFAR-10 and the ImageNet datasets, employing hyperparameters determined through a Grid Search algorithm by exploiting 40 different clients. Moreover, the experimental analysis exploits two different distributions: Default Distribution and Dirichlet Distribution. Across these two distributions, we also proposed two different experiments for each distribution and pre-trained model: one without using any norm, and another where we employed the Clipping Norm aggregator. The results indicate that the model exhibits interesting performances with a Default distribution, achieving an accuracy of 0.816 without normalization and 0.805 with the Clipping Norm aggregator. However, with a Dirichlet Distribution, the model accuracy is equal to 0.773 without normalization and equal to 0.744 with the Clipping Norm aggregator. Both experiments show that the proposed method can provide interesting performances in privacy-preserving Android malware detection.</jats:p>"],"publicationDate":"2024-01-01","publisher":"Elsevier BV","embargoEndDate":null,"sources":["Crossref","Information and Software Technology"],"formats":["application/pdf"],"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"Information and Software Technology","issnPrinted":"0950-5849","issnOnline":null,"issnLinking":null,"ep":null,"iss":null,"sp":"107892","vol":"189","edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::a7d8e49adcb4d162c7f127bb08c118c8","originalIds":["S0950584925002319","10.1016/j.infsof.2025.107892","50|doiboost____|9909901c9229d7fac1d8f1d99c3ddeea","10.2139/ssrn.4919074","50|doiboost____|a7d8e49adcb4d162c7f127bb08c118c8","50|dblp________::57af6fc266320bbf0de9fdcc9faa1460","oai:iris.cnr.it:20.500.14243/559501","50|od_____10978::d72325ec619d6a1e5b14108c1649d136","10.1016/J.INFSOF.2025.107892","50|r3c4b2081b22::4152cd069da1e438dbb0cebfb7bab088","50|sygma_______::9909901c9229d7fac1d8f1d99c3ddeea"],"pids":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"},{"scheme":"doi","value":"10.2139/ssrn.4919074"},{"scheme":"handle","value":"20.500.14243/559501"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":3.0,"influence":2.5301625E-9,"popularity":4.007286E-9,"impulse":3.0,"citationClass":"C5","influenceClass":"C5","impulseClass":"C5","popularityClass":"C4"}},"projects":[{"id":"corda_____he::9ce4795c43250f481c709ae85d41b183","code":"101086308","acronym":"DUCA","title":"Data Usage Control for empowering digital sovereignty for All citizens","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101086308"}]}],"organizations":[{"legalName":"Istituto di Informatica e Telematica","acronym":"IIT CNR","id":"openorgs____::14e7e8086bf152848aa54f0f3108c882","pids":[{"scheme":"ISNI","value":"0000000417756402"},{"scheme":"GRID","value":"grid.473659.a"},{"scheme":"ROR","value":"https://ror.org/02gdcn153"}],"countries":[{"code":"IT","label":"Italy"}],"websiteurl":"http://www.iit.cnr.it"},{"legalName":"University of Molise","acronym":"UNIMOL","id":"openorgs____::1399698736743569904b8fff1e02556a","pids":[{"scheme":"OrgReg","value":"IT0015"},{"scheme":"ROR","value":"https://ror.org/04z08z627"},{"scheme":"FundRef","value":"501100012305"},{"scheme":"wikidata","value":"Q1093340"},{"scheme":"PIC","value":"999850005"},{"scheme":"OrgRef","value":"4933616"},{"scheme":"ISNI","value":"0000000122055422"},{"scheme":"fundref","value":"501100012305"},{"scheme":"Wikidata","value":"Q1093340"},{"scheme":"mag_id","value":"129627893"},{"scheme":"GRID","value":"grid.10373.36"}],"countries":[{"code":"IT","label":"Italy"}],"websiteurl":"http://www.unimol.it/"},{"legalName":"National Research Council","acronym":"CNR","id":"openorgs____::d41cf6bd4ab1b1362a44397e0b95c975","pids":[{"scheme":"ROR","value":"https://ror.org/04zaypm56"},{"scheme":"Wikidata","value":"Q902464"},{"scheme":"fundref","value":"501100004462"},{"scheme":"PIC","value":"999979500"},{"scheme":"OrgReg","value":"IT1002"},{"scheme":"RRID","value":"RRID:nlx_33409"},{"scheme":"ISNI","value":"0000000119404177"},{"scheme":"wikidata","value":"Q902464"},{"scheme":"FundRef","value":"501100004462"},{"scheme":"PIC","value":"997940560"},{"scheme":"OrgRef","value":"1819946"},{"scheme":"PIC","value":"952138324"},{"scheme":"GRID","value":"grid.5326.2"},{"scheme":"RRID","value":"RRID:SCR_011322"}],"countries":[{"code":"IT","label":"Italy"}],"websiteurl":"http://cnr.it"},{"legalName":"IMT Institute for Advanced Studies Lucca","acronym":"IMT Institute for Advanced Studies Lucca","id":"openorgs____::077f17e38c0098d2f45207552408c124","pids":[{"scheme":"OrgRef","value":"33148455"},{"scheme":"OrgReg","value":"IT0031"},{"scheme":"GRID","value":"grid.462365.0"},{"scheme":"fundref","value":"100015963"},{"scheme":"Wikidata","value":"Q3788629"},{"scheme":"ISNI","value":"0000000417909464"},{"scheme":"ROR","value":"https://ror.org/035gh3a49"},{"scheme":"FundRef","value":"100015963"},{"scheme":"mag_id","value":"127077003"},{"scheme":"wikidata","value":"Q3788629"},{"scheme":"PIC","value":"965146412"}],"countries":[{"code":"IT","label":"Italy"}],"websiteurl":"https://www.imtlucca.it/"},{"legalName":"Institute for high performance computing and networking","acronym":"ICAR","id":"openorgs____::799e09bd25493ed406667fd2154072b6","pids":[{"scheme":"mag_id","value":"3005160176"},{"scheme":"GRID","value":"grid.503051.2"},{"scheme":"ROR","value":"https://ror.org/04r5fge26"},{"scheme":"ISNI","value":"0000000417900611"}],"countries":[{"code":"IT","label":"Italy"}],"websiteurl":"https://www.icar.cnr.it/"}],"communities":[{"code":"eu-conexus","label":"European University for Smart Urban Coastal Sustainability","provenance":null},{"code":"cnr","label":"CNR","provenance":null}],"collectedFrom":[{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"},{"key":"opendoar____::9f9d8edfbd4baab2060a115bbdcee1d6","value":"IRIS Cnr"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":"hybrid"},"type":"Article","urls":["https://doi.org/10.1016/j.infsof.2025.107892"],"publicationDate":"2026-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::da10b8126df224f5272d7704bc0ee142","value":"Information and Software Technology"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"pids":[{"scheme":"doi","value":"10.2139/ssrn.4919074"}],"license":"https://www.uspto.gov/ip-policy/copyright-policy/copyright-basics","accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.2139/ssrn.4919074"],"publicationDate":"2024-01-01","refereed":"peerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"}],"type":"Article","urls":["https://doi.org/10.1016/j.infsof.2025.107892","https://dblp.org/rec/journals/infsof/CiaramellaMPSM26.html"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"pids":[{"scheme":"handle","value":"20.500.14243/559501"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"},{"scheme":"urn","value":"https://hdl.handle.net/20.500.14243/559501"},{"scheme":"urn","value":"2-s2.0-105019203288"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1016/j.infsof.2025.107892","https://hdl.handle.net/20.500.14243/559501"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::9f9d8edfbd4baab2060a115bbdcee1d6","value":"IRIS Cnr"},"collectedFrom":{"key":"opendoar____::9f9d8edfbd4baab2060a115bbdcee1d6","value":"IRIS Cnr"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"}],"type":"Article","urls":["http://dx.doi.org/10.1016/J.INFSOF.2025.107892"],"publicationDate":"2025-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::da10b8126df224f5272d7704bc0ee142","value":"Information and Software Technology"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.infsof.2025.107892"}],"license":"Elsevier TDM","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["http://dx.doi.org/10.1016/j.infsof.2025.107892"],"refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::9ce4795c43250f481c709ae85d41b183","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"Data Usage Control for empowering digital sovereignty for All citizens","code":"101086308","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-TMA-MSCA-SE","description":"HORIZON TMA MSCA Staff Exchanges","name":"HORIZON-TMA-MSCA-SE"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-01-01","endDate":"2026-12-31"}],"otherTitles":null,"green":true,"inDiamondJournal":false,"isGreen":true,"isInDiamondJournal":false}