arrow
返回

Android malware detection using time-aware machine learning approach

delete2024-06-15
delete7
PRE
AI
A
Anas Alsobeh *
K
Khalid Gaber *
M
Mahmoud Hammad *
M
Maryam Nuser
A
Amani Shatnawi
DOI:10.1007/s10586-024-04484-6delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
In today's rapidly evolving digital landscape, the surge in smartphone usage is paralleled by an increasing wave of cyberthreats, highlighting the limitations of existing signature-based malware detection methods. To address this problem, our research introduces a Time-Aware Machine Learning (TAML) framework specifically designed for Android malware detection. Our framework extracts the best time-correlated features and then it builds time-aware and time-agnostic machine learning (ML) models. The ML models are trained on the KronoDroid dataset, which contains more than 41,000 benign Android apps and more than 36,000 malicious apps developed between 2008 to 2020. Our experimental evaluation revealed that the Last Modification Date 'LastModDate' feature is a critical variable for time-aware classification. Moreover, our empirical analysis reveals that real-device detection outperforms emulator-based detection. Impressively, the time-correlated features boosts the detection performance and achieving an outstanding 99.98% F1 score in a time-agnostic setting. In addition, on each year, our time-aware experiments outperformed the traditional ML detection models. Our time-aware classifier achieved a 91% F1 score on average and a maximum F1 score of 99% of yearly chunk experiments over 12 years. These experimental results affirm the effectiveness of our proposed method in detecting Android malware.
Keyword:
Time-aware machine learning (TAML)
Android malware detection
Temporal intelligence
Cybersecurity
Temporal feature extraction
Concept drift
Binary classification
Multiclass classification
KronoDroid dataset
Mobile security
Temporal weighting
Real-device testing
Signature-based detection

期刊

C
Cluster Computing-The Journal of Networks Software Tools and Applications
IF:
4.1
论文数:
5.0K
被引数:
7.5K

机构

Y
Yarmouk University
学者数:
1.8K
论文数: 1.5K
被引数: 1.1K
引用论文

引用论文

The degree of housing damage model for a flood affected area
err2016-07-13
err0
errOAAI
errThuraiya Mohd; Mohamad Haizam Mohamed Saraf; Siti Fairuz Che Pin; Mohd Nasurudin Hasbullah; Tajul Edrus Nordin; Dzulkarnaen Ismail
err分享
err收藏
Search for a light scalar top squark ine+e−reactions atEc.m.=58 GeV在Ecm=58 GeV的e⁺e⁻反应中搜索轻标量顶 slepton
err1994-05-23
err0
PREAI
errJ. Shirai; T. Ohmoto; K. Abe; K. Amako; Y. Arai; T. Arima; Y. Asano; M. Chiba; Y. Chiba; M. Daigo; M. Fukawa; Y. Fukushima; J. Haba; H. Hanai; Y. Hemmi; M. Higuchi; F. Hinode; T. Hirose; Y. Homma; N. Hosoda; N. Ishihara; Y. Iwata; N. Kanda; N. Kanematsu; J. Kanzaki; R. Kikuchi; T. Kondo; T. T. Korhonen; A. E. Krüger; H. Kurashige; J. MacNaughton; E. K. Matsuda; T. Matsui; M. Miura; K. Miyake; S. Mori; Y. Nagashima; Y. Nakagawa; T. Nakamura; I. Nakano; S. Odaka; K. Ogawa; T. Ohama; T. Ohsugi; H. Ohyama; A. Okamoto; A. Ono; T. Oyama; H. Sakamoto; M. Sakuda; M. Sato; N. Sato; M. Shioden; M. Shirakata; T. Sumiyoshi; A. Suzuki; Y. Takada; H. Takaki; F. Takasaki; M. Takita; N. Tamura; K. Tobimatsu; T. Tsuboyama; S. Uehara; Y. Unno; M. Utsumi; Y. Watase; F. Yabuki; Y. Yamada; T. Yamagata; Y. Yamamoto; Y. Yonezawa; H. Yoshida
err分享
err收藏
Ureteropelvic Junction Obstruction with Renal Pelvic Calcification: A Case Report
err1993-12-01
err0
PREAI
errAkira Tsujimura; Tetsuo Imazu; Kenji Nishimura; Hideki Sugao; Toshitsugu Oka; Minato Takaha; Masashi Takeda; Akihiko Kurata
err分享
err收藏
学者 查看更多内容