.png){kind=icon}
返回
Malware Detection and Classification in Android Application Using Simhash-Based Feature Extraction and Machine Learning
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2024.3501277.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The need to detect and classify malware on Android devices has become crucial due to the widespread use of these devices daily. This paper presents a method for detecting and classifying malware that uses static and dynamic features. Specifically, we extract permissions and intent filters from static analysis files and APK API data from dynamic analysis files. Then, we use Simhash to encode the selected parts of the analysis files to create feature vectors. These vectors are then used to train different Machine Learning algorithms for detecting and classifying malware. We conducted several experiments to evaluate the effectiveness of our approach on a dataset of 38,355 labeled Android apps and tested various hash functions and tokenizing methods in the Simhash algorithm. Our results showed that using Random Forest as a classifier, SHA-512 the hash function and 2-WORD tokenization led to high accuracy with reduced time and memory requirements for training, validating, and testing. This indicates a highly accurate model for detecting and classifying malware into 24 families.
Keyword:
Malware
Feature extraction
Operating systems
Static analysis
Accuracy
Filters
Heuristic algorithms
Machine learning algorithms
Machine learning
Codes
Android
malware
family classification
Simhash feature extraction
static analysis
dynamic analysis
hybrid analysis
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
暂无机构信息
引用论文
分享收藏Improvement of malware detection and classification using API call sequence alignment and visualization使用API调用序列比对和可视化改进恶意软件检测和分类
PREAI
分享收藏A malware detection method based on family behavior graph一种基于家族行为图的恶意软件检测方法.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容