arrow
Return

A Hybrid Deep Network Framework for Android Malware Detection

delete2022-12-01
delete19
PRE
AI
H
Huijuan Zhu
王良民 cover
王良民 (Liangmin Wang) *
S
Sheng Zhong
Y
Yang Li
V
Victor S. Sheng *
DOI:10.1109/TKDE.2021.3067658delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.
Keywords:
Malware
Feature extraction
Smart phones
Deep learning
Static analysis
Learning systems
Support vector machines
Feature extraction or construction
machine learning
modeling and prediction
neural nets
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Knowledge and Data Engineering cover
IEEE Transactions on Knowledge and Data Engineering
IF:
10.4
Papers:
6.7K
Citations:
3.2W

Organization

Texas Tech University System cover
Texas Tech University System
Scholars:
1.5W
Papers: 1.3W
Citations: 15
T
Texas Tech University
Scholars:
7.0K
Papers: 5.8K
Citations: 1.5W
N
nanjing university
Scholars:
7.7W
Papers: 5.6W
Citations: 87
researcher View more organizations