.png){kind=icon}
Return
Malware Detection and Classification in Android Application Using Simhash-Based Feature Extraction and Machine Learning
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2024.3501277.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The need to detect and classify malware on Android devices has become crucial due to the widespread use of these devices daily. This paper presents a method for detecting and classifying malware that uses static and dynamic features. Specifically, we extract permissions and intent filters from static analysis files and APK API data from dynamic analysis files. Then, we use Simhash to encode the selected parts of the analysis files to create feature vectors. These vectors are then used to train different Machine Learning algorithms for detecting and classifying malware. We conducted several experiments to evaluate the effectiveness of our approach on a dataset of 38,355 labeled Android apps and tested various hash functions and tokenizing methods in the Simhash algorithm. Our results showed that using Random Forest as a classifier, SHA-512 the hash function and 2-WORD tokenization led to high accuracy with reduced time and memory requirements for training, validating, and testing. This indicates a highly accurate model for detecting and classifying malware into 24 families.
Keywords:
Malware
Feature extraction
Operating systems
Static analysis
Accuracy
Filters
Heuristic algorithms
Machine learning algorithms
Machine learning
Codes
Android
malware
family classification
Simhash feature extraction
static analysis
dynamic analysis
hybrid analysis
Journal
IF:
3.6
Papers:
9.8W
Citations:
29.4W
Organization
No organization information available
Cited Papers
.png){kind=icon}
ShareSaveShareSaveShareSave
View more