.png){kind=icon}
返回
MDADroid: A novel malware detection method by constructing functionality-API mapping
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2024.104061.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
As the Android ecosystem develops, malware also evolves to adapt to the changes. Consequently, malware remains a significant threat, posing a challenge in developing a low-resource consumption malware detection method that can adjust to updates in the Android API versions. We propose a novel method called MDADroid, which detects malware based on self-built Functionality-API mapping. We start by building a set of permission- related APIs using open-source knowledge. Then, we construct a Functionality-App-API heterogeneous graph based on collected data and establish a Functionality-API mapping from it. Finally, MDADroid transforms app features from the API level to the functionality level for malware detection, ensuring model resilience to API changes. We also design an API similarity calculation method that updates the Functionality-API mapping at a low cost. We evaluate MDADroid on multiple datasets, and the results show that MDADroid achieves an accuracy of 95.22%, 96.23%, 98.77%, and 99.56% on the AndroZoo, CICAndMal 2017, CICMalDroid 2020, and Drebin datasets, respectively, with training and testing times of 2 s, 0.6188 s, 1.34 s, and 1.02 s. Moreover, our method demonstrates excellent performance in the tests for resilience capabilities.
Keyword:
Android malware detection
Model aging
Heterogeneous graph
Permission-related APIs
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Using multi-audio feature fusion for android malware detection使用多音频特征融合进行android恶意软件检测.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
A novel Android malware detection method with API semantics extraction一种基于API语义提取的Android恶意软件检测方法COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏GDroid: Android malware detection and classification with graph convolutional networkGDroid: 使用图卷积网络进行Android恶意软件检测和分类COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models (Extended Version)MaMaDroid: 通过构建行为模型的马尔可夫链来检测Android恶意软件 (扩展版本)
PREAI
分享收藏分享收藏
查看更多内容