arrow
返回

A mobile malware detection method using behavior features in network traffic

delete2019-05-01
delete77
PRE
AI
S
Shanshan Wang
陈
陈贞翔 (Zhenxiang Chen) *
Q
Qiben Yan
B
Bo Yang
L
Lizhi Peng
DOI:10.1016/j.jnca.2018.12.014delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Android has become the most popular mobile platform due to its openness and flexibility. Meanwhile, it has also become the main target of massive mobile malware. This phenomenon drives a pressing need for malware detection. In this paper, we propose a lightweight framework for Android malware identification. Network traffic generated by mobile app is mirrored from the wireless access point to the server for data analysis. All data analysis and malware detection are performed on the server side, which consumes minimum resources on mobile devices with minimum impacts to user experience. Due to the difficulty in identifying disparate malicious behaviors of malware from the network traffic, our method performs a multi-level network traffic analysis, gathering as many features of network traffic as necessary. The proposed method combines network traffic analysis with machine learning algorithm (C4.5) that is capable of identifying Android malware with high accuracy. In an evaluation with 8,312 benign apps and 5,560 malware samples, our method performs better than other state-of-the-art approaches, and especially when combining two detection mechanisms, it achieves a detection rate of 97.89%. In addition, for the benefit of user, this framework not only displays the final detection results, but also analyzes the behind-the-curtain reason of malicious results. The result explanation also reveals insightful behavioral characteristics of mobile malware.
Keyword:
Android malware detection
Network traffic
Machine learning
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Network and Computer Applications 封面图
Journal of Network and Computer Applications
IF:
8
论文数:
3.7K
被引数:
1.1W

机构

U
University of Jinan
学者数:
1.6W
论文数: 1.1W
被引数: 1.4W
University of Nebraska System 封面图
University of Nebraska System
学者数:
2.7W
论文数: 2.3W
被引数: 58
引用论文

引用论文

err分享
err收藏
Flexible neural trees based early stage identification for IP traffic
err2015-10-26
err24
PREAI
errChen, Zhenxiang; Peng, Lizhi; Gao, Chongzhi; Yang, Bo; Chen, Yuehui; Li, Jin
err分享
err收藏
HMMPayl: An intrusion detection system based on Hidden Markov Models
err2011-06-01
err91
errOAAI
errAriu, Davide; Tronci, Roberto; Giacinto, Giorgio
err分享
err收藏
Evidence that the large loss of glutathione observed in ischemia/reperfusion of the small intestine is not due to oxidation to glutathione disulfide
err1993-04-01
err0
PREAI
errDonald D. Gibson; Daniel J. Brackett; Ronald A. Squires; AndreaK. Balla; Megan R. Lerner; Paul B. McCay; Larry R. Pennington
err分享
err收藏
err分享
err收藏
学者 查看更多内容