Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

A danger feature based negative selection algorithm

Improvement of Negative Selection Algorithm Based on Hamming Distance

D-DAE: Defense-Penetrating Model Extraction Attacks.

A Malware Detection Model Based on a Negative Selection Algorithm with Penalty Factor

A Real Negative Selection Algorithm with Evolutionary Preference for Anomaly Detection

An Improved Real-Valued Negative Selection Algorithm Based on the Constant Detector for Anomaly Detection

NNS:A novel neighborhood negative selection algorithm

A Negative Selection Algorithm Hole Improvement Method Based on MHC

Genetic Algorithms-Based Detector Generation in Negative Selection Algorithm

DGA-PSO: An improved detector generation algorithm based on particle swarm optimization in negative selection

A Neural Networks-Based Negative Selection Algorithm in Fault Diagnosis

Anomaly Detection Using Neighborhood Negative Selection

Multi-Level Optimization of Negative Selection Algorithm Detectors with Application in Motor Fault Detection

A Novel Negative Selection Algorithm with an Array of Partial Matching Lengths for Each Detector

A Hybrid Deep Network Framework for Android Malware Detection

Hardening Malware Detection Systems Against Cyber Maneuvers: An Adversarial Machine Learning Approach.

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

HD-NSA: A real-valued negative selection algorithm based on hierarchy division

A study of feature selection methods for android malware detection

KFFPDet: Android malicious application detection system with assisted detection of adversarial samples

MalCertain: Enhancing Deep Neural Network Based Android Malware Detection by Tackling Prediction Uncertainty