.png){kind=icon}
返回
Cyber Code Intelligence for Android Malware Detection
.png){kind=icon}
PRE
AI
DOI：10.1109/TCYB.2022.3164625.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Evolving Android malware poses a severe security threat to mobile users, and machine-learning (ML)-based defense techniques attract active research. Due to the lack of knowledge, many zero-day families' malware may remain undetected until the classifier gains specialized knowledge. The most existing ML-based methods will take a long time to learn new malware families in the latest malware family landscape. Existing ML-based Android malware detection and classification methods struggle with the fast evolution of the malware landscape, particularly in terms of the emergence of zero-day malware families and limited representation of single-view features. In this article, a new multiview feature intelligence (MFI) framework is developed to learn the representation of a targeted capability from known malware families for recognizing unknown and evolving malware with the same capability. The new framework performs reverse engineering to extract multiview heterogeneous features, including semantic string features, API call graph features, and smali opcode sequential features. It can learn the representation of a targeted capability from known malware families through a series of processes of feature analysis, selection, aggregation, and encoding, to detect unknown Android malware with shared target capability. We create a new dataset with ground-truth information regarding capability. Many experiments are conducted on the new dataset to evaluate the performance and effectiveness of the new method. The results demonstrate that the new method outperforms three state-of-the-art methods, including: 1) Drebin; 2) MaMaDroid; and 3) N-opcode, when detecting unknown Android malware with targeted capabilities.
Keyword:
Malware
Feature extraction
Smart phones
Labeling
Deep learning
Cybernetics
Australia
Android malware
deep neural network
multiview features
security
privacy-related capability
static analysis
期刊
IF:
10.5
论文数:
1.1W
被引数:
5.0W
机构
引用论文
A Combination Method for Android Malware Detection Based on Control Flow Graphs and Machine Learning Algorithms.png)
IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏On the Impact of Sample Duplication in Machine-Learning-Based Android Malware Detection基于机器学习的Android恶意软件检测中样本复制的影响OAAI
OAAI分享收藏分享收藏
查看更多内容