.png){kind=icon}
返回
ASDroid: Resisting Evolving Android Malware With API Clusters Derived From Source Code
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2025.3536280.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Machine learning-based Android malware detection has consistently demonstrated superior results. However, with the continual evolution of the Android framework, the efficacy of the deployed models declines markedly. Existing solutions necessitate frequent and expensive model retraining to resist the constant evolution of malware accompanying Android framework updates. To address this, we introduce a solution called ASDroid, which generalizes specific APIs into similar API clusters to counteract evolving Android malware threats. One primary challenge lies in identifying analogous API clusters that correspond to specific APIs. Our approach involves extracting semantic information from open-source API source code to construct a heterogeneous information graph, and utilizing embedding algorithms to obtain semantic vector representations of APIs. APIs that are close in embedding distance are presumed to have similar semantics. Our dataset encompasses Android applications spanning nine years from 2011 to 2019. In comparison to existing Android malware detection model aging mitigation solutions like APIGraph, SDAC and MaMaDroid, ASDroid demonstrates greater accuracy and more effective at resisting continuously evolving malware.
Keyword:
Source coding
Prevention and mitigation
Semantics
Clustering algorithms
Resists
Aging
Malware
Vectors
Data mining
Resilience
Mobile security
android malware detection
model aging
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
The rise of obfuscated Android malware and impacts on detection methods混淆Android恶意软件的兴起及其对检测方法的影响
OAAI
OAAI分享收藏Design and Integrated Analysis of a Flexible Support Microstructure with a Honeycomb Sandwich for the Optical Window of a Hypersonic Remote Sensor.png)
Sensors
OAAI
SensorsIF0
OAAI分享收藏GDroid: Android malware detection and classification with graph convolutional networkGDroid: 使用图卷积网络进行Android恶意软件检测和分类COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏On the effectiveness of system API-related information for Android ransomware detection关于系统API相关信息对Android勒索软件检测的有效性COMPUTERS & SECURITYOAAI
COMPUTERS & SECURITYIF5.4
OAAI分享收藏
查看更多内容