返回
Runtime Classification of Mobile Malware for Resource-Constrained Devices
DOI:10.1007/978-3-319-67876-4_10.png)
摘要
En 中文
In the resource-constrained and battery-operated environment of mobile devices accurate detection of malware and discrimination between diverse types of existing malware are challenging tasks and most of the currently proposed solutions are focused on only one of the mentioned aspects. In this work, we propose a solution that is able to detect malware that appears at runtime and, at the same time, provides useful information to discriminate between diverse types of malware while taking into account limited resources of mobile devices. On device we monitor a set of the most representative features for presence of malware and use a detection algorithm of low complexity that provides an alarm if malware infection is observed. When the malware detection module raises an alarm, we analyse a set of previously stored information relevant for malware classification, in order to understand what type of malware is being executed. In order to achieve low consumption, we minimize the set of observed system parameters to only the most informative ones for both detection and classification and we offload part of the calculations related to discrimination between diverse types of malware to an external server. Our results show that dynamic features that we take into account ( memory, CPU, and network) reflect well the behavior of the observed system and can be used to detect malware executions on a mobile device and to perform its classification.
期刊
E
IF:
0
论文数:
1
被引数:
0
机构
引用论文
Physiological and behavioral responses to corticotropin-releasing factor administration: is CRF a mediator of anxiety or stress responses?促肾上腺皮质激素释放因子的生理和行为反应: CRF是焦虑或应激反应的中介物吗?

