Deep Learning for Android Malware Defenses: a Systematic Literature Review
Not on the map. Why?
Abstract (arXiv)
Malicious applications (particularly those targeting the Android platform) pose a serious threat to developers and end-users. Numerous research efforts have been devoted to developing effective approaches to defend against Android malware. However, given the explosive growth of Android malware and the continuous advancement of malicious evasion technologies like obfuscation and reflection, Android malware defense approaches based on manual rules or traditional machine learning may not be effective. In recent years, a dominant research field called deep learning (DL), which provides a powerful feature abstraction ability, has demonstrated a compelling and promising performance in a variety of areas, like natural language processing and computer vision. To this end, employing deep learning techniques to thwart Android malware attacks has recently garnered considerable research attention. Yet, no systematic literature review focusing on deep learning approaches for Android Malware defenses exists. In this paper, we conducted a systematic literature review to search and analyze how deep learning approaches have been applied in the context of malware defenses in the Android environment. As a result, a total of 132 studies covering the period 2014-2021 were identified. Our investigation reveals that, while the majority of these sources mainly consider DL-based on Android malware detection, 53 primary studies (40.1 percent) design defense approaches based on other scenarios. This review also discusses research trends, research focuses, challenges, and future research directions in DL-based Android malware defenses.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 61 of its 256 references that are in the map. First posted on arXiv 9 Mar 2021.
Builds on
61 of 256 references.
References · 61
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,361
- 2017Graph Attention Networkscited by 8,923
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
- 2013Intriguing properties of neural networkscited by 5,155
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2014Neural Machine Translation by Jointly Learning to Align and Translatecited by 4,548
- 2014Going Deeper with Convolutionscited by 4,241
38 more
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2016node2vec: Scalable Feature Learning for Networkscited by 1,918
- 2014DeepWalk: Online Learning of Social Representationscited by 1,547
- 2018A Survey Of Methods For Explaining Black Box Modelscited by 973
- 2016Adversarial Machine Learning at Scalecited by 936
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
- 2014Deep Learning in Neural Networks: An Overviewcited by 770
- 2014Distributed Representations of Sentences and Documentscited by 678
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 678
- 2017BranchyNet: Fast Inference via Early Exiting from Deep Neural Networkscited by 596
- 2020Pre-trained Models for Natural Language Processing: A Surveycited by 505
- 2017A Brief Survey of Deep Reinforcement Learningcited by 483
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
- 2015Deep Speech 2: End-to-End Speech Recognition in English and Mandarincited by 451
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 351
- 2018Techniques for Interpretable Machine Learningcited by 238
- 2018An Introduction to Deep Reinforcement Learningcited by 206
- 2018Local Rule-Based Explanations of Black Box Decision Systemscited by 166
- 2018Independently Recurrent Neural Network (IndRNN): Building A Longer and Deeper RNNcited by 143
- 2017Encoding Sentences with Graph Convolutional Networks for Semantic Role Labelingcited by 137
- 2019An Attentive Survey of Attention Modelscited by 124
- 2018TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Timecited by 108
- 2017Generating Adversarial Malware Examples for Black-Box Attacks Based on GANcited by 75
- 2016Adversarial Perturbations Against Deep Neural Networks for Malware Classificationcited by 42
- 2015SourcererCC: Scaling Code Clone Detection to Big Codecited by 40
- 2019Evaluating Explanation Methods for Deep Learning in Securitycited by 38
- 2020Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detectioncited by 33
- 2017Survey of Machine Learning Techniques for Malware Analysiscited by 31
- 2016MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Modelscited by 30
- 2019On Defending Against Label Flipping Attacks on Malware Detection Systemscited by 22
- 2020Can We Trust Your Explanations? Sanity Checks for Interpreters in Android Malware Analysiscited by 20
- 2018Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detectioncited by 19
- 2020Why an Android App is Classified as Malware? Towards Malware Classification Interpretationcited by 16
- 2017R2-D2: ColoR-inspired Convolutional NeuRal Network (CNN)-based AndroiD Malware Detectionscited by 15
- 2020Predicting Defective Lines Using a Model-Agnostic Techniquecited by 14
- 2021Robust Android Malware Detection System against Adversarial Attacks using Q-Learningcited by 12
- 2019DL-Droid: Deep learning based android malware detection using real devicescited by 11
- 2020A Performance-Sensitive Malware Detection System Using Deep Learning on Mobile Devicescited by 9
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2021: 1; 2022: 4; 2023: 4; 2024: 4; 2025: 4; 2026: 1.
18 papers.
Sort:
By area:
- 2023Large Language Models for Software Engineering: A Systematic Literature Reviewcited by 399
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 89
- 2023Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Settingcited by 10
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2024Investigating White-Box Attacks for On-Device Modelscited by 6
- 2023PAD: Towards Principled Adversarial Malware Detection Against Evasion Attackscited by 5
- 2022Towards Using Data-Influence Methods to Detect Noisy Samples in Source Code Corporacited by 4
- 2022A two-steps approach to improve the performance of Android malware detectorscited by 2
- 2024Reinforcement Learning for an Efficient and Effective Malware Investigation during Cyber Incident Responsecited by 2
- 2025Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systemscited by 2
- 2021Energy-bounded Learning for Robust Models of Codecited by 1
- 2024MASKDROID: Robust Android Malware Detection with Masked Graph Representationscited by 1
6 more
- 2024Protect Your Secrets: Understanding and Measuring Data Exposure in VSCode Extensionscited by 1
- 2025VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learningcited by 1
- 2022Malceiver: Perceiver with Hierarchical and Multi-modal Features for Android Malware Detectioncited by 0
- 2025Evaluating the robustness of adversarial defenses in malware detection systemscited by 0
- 2025MeLeMaD: Adaptive Malware Detection via Chunk-wise Feature Selection and Meta-Learningcited by 0
- 2026HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learningcited by 0
- 2026HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning22 Sep 2026
- 2025MeLeMaD: Adaptive Malware Detection via Chunk-wise Feature Selection and Meta-Learning30 Dec 2025
- 2025VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learning6 Jul 2025
- 2025Evaluating the robustness of adversarial defenses in malware detection systems14 May 2025
- 2025Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems23 Jan 2025
- 2024Protect Your Secrets: Understanding and Measuring Data Exposure in VSCode Extensions1 Dec 2024
- 2024MASKDROID: Robust Android Malware Detection with Masked Graph Representations29 Sep 2024
- 2024Reinforcement Learning for an Efficient and Effective Malware Investigation during Cyber Incident Response4 Aug 2024
- 2024Investigating White-Box Attacks for On-Device Models8 Feb 2024
- 2023Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting5 Sep 2023
- 2023Large Language Models for Software Engineering: A Systematic Literature Review21 Aug 2023
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness17 Mar 2023
6 more
- 2023PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks22 Feb 2023
- 2022Towards Using Data-Influence Methods to Detect Noisy Samples in Source Code Corpora25 May 2022
- 2022A two-steps approach to improve the performance of Android malware detectors17 May 2022
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trends16 May 2022
- 2022Malceiver: Perceiver with Hierarchical and Multi-modal Features for Android Malware Detection12 Apr 2022
- 2021Energy-bounded Learning for Robust Models of Code20 Dec 2021
- 2023Large Language Models for Software Engineering: A Systematic Literature Reviewcited by 399
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 89
- 2023Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Settingcited by 10
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2024Investigating White-Box Attacks for On-Device Modelscited by 6
- 2023PAD: Towards Principled Adversarial Malware Detection Against Evasion Attackscited by 5
- 2022Towards Using Data-Influence Methods to Detect Noisy Samples in Source Code Corporacited by 4
- 2022A two-steps approach to improve the performance of Android malware detectorscited by 2
- 2025Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systemscited by 2
- 2021Energy-bounded Learning for Robust Models of Codecited by 1
- 2024MASKDROID: Robust Android Malware Detection with Masked Graph Representationscited by 1
- 2024Protect Your Secrets: Understanding and Measuring Data Exposure in VSCode Extensionscited by 1
12 most cited of 17 All 17 (JSON)
- 2026HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning22 Sep 2026
- 2025MeLeMaD: Adaptive Malware Detection via Chunk-wise Feature Selection and Meta-Learning30 Dec 2025
- 2025VOLTRON: Detecting Unknown Malware Using Graph-Based Zero-Shot Learning6 Jul 2025
- 2025Evaluating the robustness of adversarial defenses in malware detection systems14 May 2025
- 2025Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems23 Jan 2025
- 2024Protect Your Secrets: Understanding and Measuring Data Exposure in VSCode Extensions1 Dec 2024
- 2024MASKDROID: Robust Android Malware Detection with Masked Graph Representations29 Sep 2024
- 2024Investigating White-Box Attacks for On-Device Models8 Feb 2024
- 2023Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting5 Sep 2023
- 2023Large Language Models for Software Engineering: A Systematic Literature Review21 Aug 2023
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness17 Mar 2023
- 2023PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks22 Feb 2023
12 newest of 17 All 17 (JSON)