arrow
返回

SWORD: Semantic aWare andrOid malwaRe Detector

delete2018-10-01
delete33
PRE
AI
S
Shweta Bhandari *
R
Rekha Panihar
S
Smita Naval
V
Vijay Laxmi
A
Akka Zemmari
M
Manoj Singh Gaur
DOI:10.1016/j.jisa.2018.07.003delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Malicious android applications have become more advanced and severe threat to user privacy, confidentiality, integrity, money, and device. The process of malware evolution mainly consists of modifications to existing malware using repackaging of apps employing polymorphism, metamorphism and injecting malicious code. The existing dynamic approaches can handle polymorphism, metamorphism and repacking of apps but failed to address code injection at runtime, as it modifies the control/data flow. In this paper, we present a semantic aware dynamic malware detection tool, SWORD. It encapsulates the semantics of Android apps in such a way that makes it resilient towards injection-based evasion techniques. The intuition behind specifying the semantics of apps lies in applying Asymptotic Equipartition Property (AEP) inherited from information theory domain. The semantics of the app are captured using a sequence of system-calls. To assess the efficacy of SWORD, we carried out comprehensive experiments on 60 0 0 execution traces of 20 0 0 applications (10 0 0 malware apps belonging to 119 different families and 10 0 0 benign apps, selected randomly from 12,0 0 0 Google Play store apps). We obtain a detection accuracy of 94.2%. Moreover, we show that SWORD can cope with the code injection based evasion techniques. (c) 2018 Elsevier Ltd. All rights reserved.
Keyword:
Android
Malware analysis
Semantic analysis
Information leakage
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Information Security and Applications 封面图
Journal of Information Security and Applications
IF:
3.7
论文数:
2.0K
被引数:
4.9K

机构

M
malaviya national institute of technology jaipur
学者数:
1.3K
论文数: 1.3K
被引数: 2
N
national institute of technology (nit system)
学者数:
4.0W
论文数: 3.7W
被引数: 31
N
National Institute of Technology Warangal
学者数:
1.3K
论文数: 1.1K
被引数: 2.3K
学者 查看更多机构
引用论文

引用论文

DAPASA: Detecting Android Piggybacked Apps Through Sensitive Subgraph Analysis
err2017-08-01
err110
PREAI
errFan, Ming; Liu, Jun; Wang, Wei; Li, Haifei; Tian, Zhenzhou; Liu, Ting
err分享
err收藏
SneakLeak+: Large-scale klepto apps analysis
err2020-08-01
err4
PREAI
errBhandari, Shweta; Herbreteau, Frederic; Laxmi, Vijay; Zemmari, Akka; Gaur, Manoj Singh; Roop, Partha S.
err分享
err收藏
WGRID-49 GMLC Project Report: Understanding the Role of Short-Term Energy Storage and Large Motor Loads for Active Power Controls by Wind Power
err
IF0
err2019-08-20
err0
errOAAI
errVahan Gevorgian; Przemyslaw Koralewicz; Hugo Nestor Villegas Pico; Shahil Shah; Robert Wallen; David Corbus; Jonathan Keller; R. Hovsapian; M. Mohanpurkar; R. Kadavi; M. Pnawar; J. Leonard; M. Richwine; N. Miller; D. Gao; W. Yan; W. Gao
err分享
err收藏
Runtime Defense against Code Injection Attacks Using Replicated Execution
err2011-07-01
err38
PREAI
errSalamat, Babak; Jackson, Todd; Wagner, Gregor; Wimmer, Christian; Franz, Michael
err分享
err收藏
Employing Program Semantics for Malware Detection利用程序语义进行恶意软件检测
err2015-12-01
err81
PREAI
errNaval, Smita; Laxmi, Vijay; Rajarajan, Muttukrishnan; Gaur, Manoj Singh; Conti, Mauro
err分享
err收藏
学者 查看更多内容