Low-Resource Footprint, Data-Driven Malware Detection on Android

doi:10.1109/TSUSC.2017.2774184

Low-Resource Footprint, Data-Driven Malware Detection on Android

2020-04-01

13

PRE

AI

DOI：10.1109/TSUSC.2017.2774184

Original

Original request for help

Save

Abstract

En 中文

Resource-constrained systems are becoming more and more common as users migrate from PCs to mobile devices and as IoT systems enter the mainstream. At the same time, it is not acceptable to reduce the level of security hence it is necessary to accommodate the required security into the system-imposed resource constraints. This paper introduces BAdDroIds, a mobile application leveraging machine learning for detecting malware on resource constrained devices. BAdDroIds executes in background and transparently analyzes the applications as soon as they are installed, i.e., before infecting the device. BAdDroIds relies on static analysis techniques and features provided by the Android OS to build up sound and complete models of Android apps in terms of permissions and API invocations. It uses ad-hoc supervised classification techniques to allow resource-efficient malware detection. By exploiting the intrinsic nature of data, it has been possible to implement a state-of-the-art data-driven model which provides deep insights on the detection problem and can be efficiently executed on the device itself as it requires a very limited computational effort. Besides its limited resource footprint, BAdDroIds is extremely effective: An extensive experimental evaluation shows that it outperforms the currently available solutions in terms of accuracy, which is around 99 percent.

Keywords:

Malware

Androids

Humanoid robots

Computational modeling

Feature extraction

Security

Android security

malware analysis

supervised learning

data-driven models

model selection

feature ranking

Low-Resource Footprint, Data-Driven Malware Detection on Android

Abstract

AI Summary

Journal

Organization