返回
DroidRL: Feature selection for android malware detection with reinforcement learning
DOI:10.1016/j.cose.2023.103126.png)
摘要
En 中文
Due to the completely open-source nature of Android, the exploitable vulnerability of malware attacks is increasing. Machine learning, leading to a great evolution in Android malware detection in recent years, is typically applied in the classification phase. Since the correlation between features is ignored in some traditional ranking-based feature selection algorithms, applying wrapper-based feature selection models is a topic worth investigating. Though considering the correlation between features, wrapper-based ap-proaches are time-consuming for exploring all possible valid feature subsets when processing a large number of Android features. To reduce the computational expense of wrapper-based feature selection, a framework named DroidRL is proposed. The framework deploys DDQN algorithm to obtain a subset of features which can be used for effective malware classification. To select a valid subset of features over a larger range, the exploration-exploitation policy is applied in the model training phase. The recurrent neural network (RNN) is used as the decision network of DDQN to give the framework the ability to sequentially select features. Word embedding is applied for feature representation to enhance the frame-work's ability to find the semantic relevance of features. The framework's feature selection exhibits high performance without any human intervention and can be ported to other feature selection tasks with mi-nor changes. The experiment results show a significant effect when using the Random Forest as DroidRL's classifier, which reaches 95.6% accuracy with only 24 features selected.(c) 2023 Elsevier Ltd. All rights reserved.
Keyword:
Reinforcement learning
Android malware detection
Feature selection
RNN
Sequence processing
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Study of bi-directional buck-boost converter topologies for application in electrical vehicle motor drives应用于电动汽车电机驱动的双向buck-boost变换器拓扑研究
MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models (Extended Version)MaMaDroid: 通过构建行为模型的马尔可夫链来检测Android恶意软件 (扩展版本)
DroidDet: Effective and robust detection of android malware using static analysis along with rotation forest modelDroidDet: 使用静态分析和旋转森林模型对android恶意软件进行有效而强大的检测
NEUROCOMPUTING
IF6.5
23 SV40 oncoproteins and p53 deficiency impair stress-induced mesothelial cell senescence
Lung Cancer
IF0

