.png){kind=icon}
返回
GHGDroid: Global heterogeneous graph-based android malware detection
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2024.103846.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
As the most popular mobile platform, Android has become the major attack target of malware, and thus there is an urgent need to effectively thwart them. Recently, the graph-based technique has been a promising solution for malware detection, which highly depends on graph structures to capture behaviors separating the malware from the benign apps. However, existing graph-based malware detection approaches still suffer from high computation cost in constructing or updating a graph for APK under detection, high false negative and false positive. To cope with these issues, we propose a novel global heterogeneous graph-based Android malware detection approach, named GHGDroid. A global heterogeneous graph (GHG) with a good updatability is first built on large-scale Android applications to characterize complex relationships among APKs and sensitive APIs. And then, using the GHG, a multi-layer graph convolutional network based embedding method is proposed to learn APK embeddings for well capturing behaviors that can separate malware from benign. Finally, using APK embeddings as well their labels, a malware classifier is trained. Experiments on real -world Android applications show that GHGDroid achieves 99.17 % F1 -score, which outperforms the state -of -the -art approaches. Moreover, GHGDroid spends about 8 s on detecting an APK, which shows that it has a good potential as a practical tool for the Android malware detection task.
Keyword:
Malware detection
Semantic information
Heterogeneous subgraph
Deep learning
Graph convolutional network
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
暂无机构信息
引用论文
S3Feature: A static sensitive subgraph-based feature for android malware detectionS3Feature: 基于静态敏感子图的android恶意软件检测功能.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏A survey of malware detection in Android apps: Recommendations and perspectives for future researchAndroid应用程序中恶意软件检测的调查: 未来研究的建议和观点COMPUTER SCIENCE REVIEW
COMPUTER SCIENCE REVIEWIF12.7
PREAI
分享收藏GDroid: Android malware detection and classification with graph convolutional networkGDroid: 使用图卷积网络进行Android恶意软件检测和分类COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models (Extended Version)MaMaDroid: 通过构建行为模型的马尔可夫链来检测Android恶意软件 (扩展版本)
PREAI
分享收藏AndroDialysis: Analysis of Android Intent Effectiveness in Malware DetectionAndrodalysis: Android意图在恶意软件检测中的有效性分析COMPUTERS & SECURITY
OAAI
COMPUTERS & SECURITYIF5.4
OAAI分享收藏
查看更多内容