arrow
Return

Android malware detection using time-aware machine learning approach

delete2024-06-15
delete7
PRE
AI
A
Anas Alsobeh *
K
Khalid Gaber *
M
Mahmoud Hammad *
M
Maryam Nuser
A
Amani Shatnawi
DOI:10.1007/s10586-024-04484-6delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
In today's rapidly evolving digital landscape, the surge in smartphone usage is paralleled by an increasing wave of cyberthreats, highlighting the limitations of existing signature-based malware detection methods. To address this problem, our research introduces a Time-Aware Machine Learning (TAML) framework specifically designed for Android malware detection. Our framework extracts the best time-correlated features and then it builds time-aware and time-agnostic machine learning (ML) models. The ML models are trained on the KronoDroid dataset, which contains more than 41,000 benign Android apps and more than 36,000 malicious apps developed between 2008 to 2020. Our experimental evaluation revealed that the Last Modification Date 'LastModDate' feature is a critical variable for time-aware classification. Moreover, our empirical analysis reveals that real-device detection outperforms emulator-based detection. Impressively, the time-correlated features boosts the detection performance and achieving an outstanding 99.98% F1 score in a time-agnostic setting. In addition, on each year, our time-aware experiments outperformed the traditional ML detection models. Our time-aware classifier achieved a 91% F1 score on average and a maximum F1 score of 99% of yearly chunk experiments over 12 years. These experimental results affirm the effectiveness of our proposed method in detecting Android malware.
Keywords:
Time-aware machine learning (TAML)
Android malware detection
Temporal intelligence
Cybersecurity
Temporal feature extraction
Concept drift
Binary classification
Multiclass classification
KronoDroid dataset
Mobile security
Temporal weighting
Real-device testing
Signature-based detection

Journal

C
Cluster Computing-The Journal of Networks Software Tools and Applications
IF:
4.1
Papers:
5.1K
Citations:
7.5K

Organization

Y
Yarmouk University
Scholars:
1.8K
Papers: 1.5K
Citations: 1.1K
Cited Papers

Cited Papers

errShare
errSave
A comprehensive survey on deep learning based malware detection techniques
err2023-02-01
err77
errOAAI
errGopinath, M.; Sethuraman, Sibi Chakkaravarthy
errShare
errSave
Malware Detection: A Framework for Reverse Engineered Android Applications Through Machine Learning Algorithms
err2022-01-01
err18
errOAAI
errUrooj, Beenish; Shah, Munam Ali; Maple, Carsten; Abbasi, Muhammad Kamran; Riasat, Sidra
errShare
errSave
The degree of housing damage model for a flood affected area
err2016-07-13
err0
errOAAI
errThuraiya Mohd; Mohamad Haizam Mohamed Saraf; Siti Fairuz Che Pin; Mohd Nasurudin Hasbullah; Tajul Edrus Nordin; Dzulkarnaen Ismail
errShare
errSave
Search for a light scalar top squark ine+e−reactions atEc.m.=58 GeV
err1994-05-23
err0
PREAI
errJ. Shirai; T. Ohmoto; K. Abe; K. Amako; Y. Arai; T. Arima; Y. Asano; M. Chiba; Y. Chiba; M. Daigo; M. Fukawa; Y. Fukushima; J. Haba; H. Hanai; Y. Hemmi; M. Higuchi; F. Hinode; T. Hirose; Y. Homma; N. Hosoda; N. Ishihara; Y. Iwata; N. Kanda; N. Kanematsu; J. Kanzaki; R. Kikuchi; T. Kondo; T. T. Korhonen; A. E. Krüger; H. Kurashige; J. MacNaughton; E. K. Matsuda; T. Matsui; M. Miura; K. Miyake; S. Mori; Y. Nagashima; Y. Nakagawa; T. Nakamura; I. Nakano; S. Odaka; K. Ogawa; T. Ohama; T. Ohsugi; H. Ohyama; A. Okamoto; A. Ono; T. Oyama; H. Sakamoto; M. Sakuda; M. Sato; N. Sato; M. Shioden; M. Shirakata; T. Sumiyoshi; A. Suzuki; Y. Takada; H. Takaki; F. Takasaki; M. Takita; N. Tamura; K. Tobimatsu; T. Tsuboyama; S. Uehara; Y. Unno; M. Utsumi; Y. Watase; F. Yabuki; Y. Yamada; T. Yamagata; Y. Yamamoto; Y. Yonezawa; H. Yoshida
errShare
errSave
Ureteropelvic Junction Obstruction with Renal Pelvic Calcification: A Case Report
err1993-12-01
err0
PREAI
errAkira Tsujimura; Tetsuo Imazu; Kenji Nishimura; Hideki Sugao; Toshitsugu Oka; Minato Takaha; Masashi Takeda; Akihiko Kurata
errShare
errSave
researcher View more