Abstract:The focus of a large amount of research on malware detection is currently working on proposing and improving neural network structures, but with the constant updates of Android, the proposed detection methods are more like a race against time. Through the analysis of these methods, we found that the basic processes of these detection methods are roughly the same, and these methods rely on professional reverse engineering tools for malware analysis and feature extraction. These tools generally have problems such as high time-space cost consumption, difficulty in achieving concurrent analysis of a large number of Apk, and the output results are not convenient for feature extraction. Is it possible to propose a general malware detection process implementation platform that optimizes each process of existing malware detection methods while being able to efficiently extract various features on malware datasets with a large number of APK? To solve this problem, we propose an automated platform, AmandaSystem, that highly integrates the various processes of deep learning-based malware detection methods. At the same time, the problem of over privilege due to the openness of Android system and thus the problem of excessive privileges has always required the accurate construction of mapping relationships between privileges and API calls, while the current methods based on function call graphs suffer from inefficiency and low accuracy. To solve this problem, we propose a new bottom-up static analysis method based on AmandaSystem to achieve an efficient and complete tool for mapping relationships between Android permissions and API calls, PerApTool. Finally, we conducted tests on three publicly available malware datasets, CICMalAnal2017, CIC-AAGM2017, and CIC-InvesAndMal2019, to evaluate the performance of AmandaSystem in terms of time efficiency of APK parsing, space occupancy, and comprehensiveness of extracted features, respectively, compared with existing methods were compared.

Design and Implementation of an Automated Malware Dynamic Analysis System

Design and Implementation of Malware Automated Analysis Tool Based on Behavior Analysis

Dynamic Analysis of Malicious Code

Mwsandbox: On Improving The Efficiency Of Automated Coarse-Grained Dynamic Malware Analysis

Unmasking the Shadows: Pinpoint the Implementations of Anti-Dynamic Analysis Techniques in Malware Using LLM

Malware Analysis Using Machine Learning and Deep Learning Techniques

A malware detection framework based on kolmogorov complexity

Analysis and Evaluation of Dynamic Feature-Based Malware Detection Methods

Malware detection system based on static and dynamic analysis and using machine learning

Hybrid Dynamic Analysis for Android Malware Protected by Anti-Analysis Techniques with DOOLDA

AMCAS: an Automatic Malicious Code Analysis System

Detective: Automatically Identify and Analyze Malware Processes in Forensic Scenarios Via DLLs

AmandaSystem: A new framework for static and dynamic Android malware analysis

Development of Windows Malware Detection System Based on Expert System

Enhanced Dynamic Analysis for Malware Detection With Gradient Attack

Automatically identifying technology in malware based on mass samples

DATDroid: Dynamic Analysis Technique in Android Malware Detection

MLxPack: Investigating the Effects of Packers on ML-based Malware Detection Systems Using Static and Dynamic Traits

Efficient and Robust Malware Detection Based on Control Flow Traces Using Deep Neural Networks

Method of Malware Behavior Analysis in Disassembly Level

Malware Dynamic Analysis Evasion Techniques: A Survey