Abstract:According to the recent report, 12 000 new Android malware samples will be generated every day. Efficient identification of evolving malware is an urgent challenge. Traditional methods based on structured features such as permissions and sensitive application programming interface (API) calls lack high-level behavioral semantics to detect evolving malware. The methods based on call graphs (CG) are good at behavioral semantic analysis but face the problem of huge time and space consumption, which leads to low detection efficiency. In this paper, we propose a novel Android malware detection method based on the method-level correlation relationship of application's abstracted API calls. First, we split each Android application's source code into separate function methods and just keep the abstracted API calls of them to form a set of abstracted API calls transactions. And then, we calculate the confidence of association rules between the abstracted API calls, which forms behavioral semantics to describe an application. Finally, we combine machine learning to identify the different behavioral patterns of malicious and benign apps to build the detection system. The results of our empirical evaluation show our system is competitive in terms of classification accuracy and detection efficiency. At dataset Drebin (benign 5.9K and malware 5.6K) and AMD (benign 20.5K and malware 20.8K), our system has achieved 96% and 98% detection results both in accuracy and F-measure. Compared with the state-of-the-art system in detecting evolving malware called MaMaDroid on the dataset of 6.0K benign and 20.5K malicious samples spanning from 2010 to 2017, our system achieves higher accuracy while improving detection efficiency by 15 times (2.9 s versus 45.7 s per sample).

Malware Detection in Smartphones Using Static Detection and Evaluation Model Based on Analytic Hierarchy Process

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Research of Malware Detection Approach for Android

A Detection Method and System Implementation for Android Malware

An Android Malware Detection Method Using Multi-Feature and MobileNet.

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

Android Malware Detection Based on Sensitive Patterns

A static Android malicious code detection method based on multi‐source fusion

A Hybrid Model for Android Malware Detection

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

Android malware detection: a survey

A New Android Malware Detection Approach Using Bayesian Classification

Two Effective Methods to Detect Mobile Malware

Accurate mobile malware detection and classification in the cloud

A Multi-Strategy Combination Framework for Android Malware Detection Based on Various Features

DroidDet: Effective and Robust Detection of Android Malware Using Static Analysis along with Rotation Forest Model.

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

Effective Android Malware Detection Based on Deep Learning

Android Malware Detection Method Based on Permission Complement and API Calls

Maldetector-Using Permission Combinations to Evaluate Malicious Features of Android App