Android Malware Detection with Contrasting Permission Patterns

doi:10.1109/CC.2014.6911083

Android Malware Detection with Contrasting Permission Patterns

2014-08-01

29

PRE

AI

DOI：10.1109/CC.2014.6911083

Original

Original request for help

Save

Abstract

En 中文

As the risk of malware is sharply increasing in Android platform, Android malware detection has become an important research topic. Existing works have demonstrated that required permissions of Android applications are valuable for malware analysis, but how to exploit those permission patterns for malware detection remains an open issue. In this paper, we introduce the contrasting permission patterns to characterize the essential differences between malwares and clean applications from the permission aspect. Then a framework based on contrasting permission patterns is presented for Android malware detection. According to the proposed framework, an ensemble classifier, Enclamald, is further developed to detect whether an application is potentially malicious. Every contrasting permission pattern is acting as a weak classifier in Enclamald, and the weighted predictions of involved weak classifiers are aggregated to the final result. Experiments on real-world applications validate that the proposed Enclamald classifier outperforms commonly used classifiers for Android Malware Detection.

Keywords:

malware detection

permission pattern

classification

contrast set

Android

Android Malware Detection with Contrasting Permission Patterns

Abstract

AI Summary

Journal

Organization