arrow
Return

Meta-Learning for Multi-Family Android Malware Classification

delete2024-08-26
delete0
delete
OA
AI
Y
Yao Li
D
Dawei Yuan
T
Tao Zhang *
H
Haipeng Cai
D
David Lo
C
Cuiyun Gao
X
Xiapu Luo
H
He Jiang
DOI:10.1145/3664806delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
With the emergence of smartphones, Android has become a widely used mobile operating system. However, it is vulnerable when encountering various types of attacks. Every day, new malware threatens the security of users' devices and private data. Many methods have been proposed to classify malicious applications, utilizing static or dynamic analysis for classification. However, previous methods still suffer from unsatisfactory performance due to two challenges. First, they are unable to address the imbalanced data distribution problem, leading to poor performance for malware families with few members. Second, they are unable to address the zero-day malware (zero-day malware refers to malicious applications that exploit unknown vulnerabilities) classification problem. In this article, we introduce an innovative meta-learning approach for multi-family Android malware classification named Meta-MAMC, which uses meta-learning technology to learn meta-knowledge (i.e., the similarities and differences among different malware families) of few-family samples and combines new sampling algorithms to solve the above challenges. Meta-MAMC integrates (i) the meta-knowledge contained within the dataset to guide models in learning to identify unknown malware; and (ii) more accurate and diverse tasks based on novel sampling strategies, as well as directly adapting metalearning to a new few-sample and zero-sample task to classify families. We have evaluated Meta-MAMC on two popular datasets and a corpus of real-world Android applications. The results demonstrate its efficacy in accurately classifying malicious applications belonging to certain malware families, even achieving 100% classification in some families.
Keywords:
Android
malware family
meta-learning
classification

Journal

A
ACM Transactions on Software Engineering and Methodology
IF:
6.2
Papers:
1.2K
Citations:
3.4K

Organization

H
harbin institute of technology
Scholars:
8.0W
Papers: 6.6W
Citations: 66
H
hong kong polytechnic university
Scholars:
3.0W
Papers: 4.1W
Citations: 921
S
Singapore Management University
Scholars:
1.5K
Papers: 2.5K
Citations: 3.5K
D
Dalian University of Technology
Scholars:
6.0W
Papers: 4.4W
Citations: 5.5W
W
washington state university
Scholars:
1.8W
Papers: 1.6W
Citations: 114
researcher View more organizations
Cited Papers

Cited Papers

Patterns of cerebral cortex mRNA expression
err2004-10-11
err0
PREAI
errJ. Bernal; M. Godbout; K. W. Hasel; G. H. Travis; J. G. Sutcliffe
errShare
errSave
errShare
errSave
PINCH: More than just an adaptor protein in cellular response
err2011-01-25
err0
errOAAI
errJane Kovalevich; Brittany Tracy; Dianne Langford
errShare
errSave
errShare
errSave
errShare
errSave
Fingerprinting Android malware families
err2018-06-30
err32
PREAI
errXie, Nannan; Wang, Xing; Wang, Wei; Liu, Jiqiang
errShare
errSave
Genomewide Analysis of mRNA Processing in Yeast Using Splicing-Specific Microarrays
err2002-05-03
err0
PREAI
errTyson A. Clark; Charles W. Sugnet; Manuel Ares
errShare
errSave
researcher View more