High Accuracy Android Malware Detection Using Ensemble Learning

作者: Suleiman Y. Yerima , Igor Muttik , Sakir Sezer

DOI: 10.1049/IET-IFS.2014.0099

关键词: Artificial intelligenceData securityRandom forestMalwareAndroid (operating system)Static analysisComputer scienceVendorEnsemble learningMachine learningFeature vector

摘要: With over 50 billion downloads and more than 1.3 million apps in Google's official market, Android has continued to gain popularity among smartphone users worldwide. At the same time there been a rise malware targeting platform, with recent strains employing highly sophisticated detection avoidance techniques. As traditional signature-based methods become less potent detecting unknown malware, alternatives are needed for timely zero-day discovery. Thus, this study proposes an approach that utilises ensemble learning detection. It combines advantages of static analysis efficiency performance machine improve accuracy. The models built using large repository samples benign from leading antivirus vendor. Experimental results presented shows proposed method which uses feature space leverage power is capable 97.3-99% accuracy very low false positive rates.

参考文章(36)
Erika Chin, Adrienne Porter Felt, Kate Greenwood, David Wagner, Analyzing inter-application communication in Android Proceedings of the 9th international conference on Mobile systems, applications, and services - MobiSys '11. pp. 239- 252 ,(2011) , 10.1145/1999995.2000018
Thomas Bläsing, Leonid Batyuk, Aubrey-Derrick Schmidt, Seyit Ahmet Camtepe, Sahin Albayrak, An Android Application Sandbox system for suspicious software detection international conference on malicious and unwanted software. pp. 55- 62 ,(2010) , 10.1109/MALWARE.2010.5665792
Axelle Apvrille, Tim Strazzere, Reducing the window of opportunity for Android malware Gotta catch 'em all Journal of Computer Virology and Hacking Techniques. ,vol. 8, pp. 61- 71 ,(2012) , 10.1007/S11416-012-0162-3
Dong-Jie Wu, Ching-Hao Mao, Te-En Wei, Hahn-Ming Lee, Kuo-Ping Wu, DroidMat: Android Malware Detection through Manifest and API Calls Tracing information security. pp. 62- 69 ,(2012) , 10.1109/ASIAJCIS.2012.18
I. Santos, F. Brezo, B. Sanz, C. Laorden, P.G. Bringas, Using opcode sequences in single-class learning to detect unknown malware Iet Information Security. ,vol. 5, pp. 220- 227 ,(2011) , 10.1049/IET-IFS.2010.0180
Michael Grace, Yajin Zhou, Qiang Zhang, Shihong Zou, Xuxian Jiang, RiskRanker Proceedings of the 10th international conference on Mobile systems, applications, and services - MobiSys '12. pp. 281- 294 ,(2012) , 10.1145/2307636.2307663
Hao Peng, Chris Gates, Bhaskar Sarma, Ninghui Li, Yuan Qi, Rahul Potharaju, Cristina Nita-Rotaru, Ian Molloy, Using probabilistic generative models for ranking risks of Android apps Proceedings of the 2012 ACM conference on Computer and communications security - CCS '12. pp. 241- 252 ,(2012) , 10.1145/2382196.2382224
Justin Sahs, Latifur Khan, A Machine Learning Approach to Android Malware Detection european intelligence and security informatics conference. pp. 141- 147 ,(2012) , 10.1109/EISIC.2012.34
Patrick P.F. Chan, Lucas C.K. Hui, S. M. Yiu, DroidChecker: analyzing android applications for capability leak wireless network security. pp. 125- 136 ,(2012) , 10.1145/2185448.2185466
Yi Chen, Ajit Narayanan, Shaoning Pang, Ban Tao, Malicioius Software Detection Using Multiple Sequence Alignment and Data Mining 2012 IEEE 26th International Conference on Advanced Information Networking and Applications. pp. 8- 14 ,(2012) , 10.1109/AINA.2012.62