Abstract:The prevalence of smartphones is deeply embedded in modern society, impacting various aspects of our lives. Their versatility and functionalities have fundamentally changed how we communicate, work, seek entertainment, and access information. Among the many smartphones available, those operating on the Android platform dominate, being the most widely used type. This widespread adoption of the Android OS has significantly contributed to increased malware attacks targeting the Android ecosystem in recent years. Therefore, there is an urgent need to develop new methods for detecting Android malware. The literature contains numerous works related to Android malware detection. As far as our understanding extends, we are the first ones to identify dangerous combinations of permissions and system calls to uncover malicious behavior in Android applications. We introduce a novel methodology that pairs permissions and system calls to distinguish between benign and malicious samples. This approach combines the advantages of static and dynamic analysis, offering a more comprehensive understanding of an application’s behavior. We establish covalent bonds between permissions and system calls to assess their combined impact. We introduce a novel technique to determine these pairs’ Covalent Bond Strength Score. Each pair is assigned two scores, one for malicious behavior and another for benign behavior. These scores serve as the basis for classifying applications as benign or malicious. By correlating permissions with system calls, the study enables a detailed examination of how an app utilizes its requested permissions, aiding in differentiating legitimate and potentially harmful actions. This comprehensive analysis provides a robust framework for Android malware detection, marking a significant contribution to the field. The results of our experiments demonstrate a remarkable overall accuracy of 97.5%, surpassing various state-of-the-art detection techniques proposed in the current literature.

A Two-Layered Permission-Based Android Malware Detection Scheme

Permission-combination-based scheme for Android mobile malware detection

You Are What the Permissions Told Me! Android Malware Detection Based on Hybrid Tactics

Hey, You, Get off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets.

Maldetector-Using Permission Combinations to Evaluate Malicious Features of Android App

Multilevel Permission Extraction in Android Applications for Malware Detection.

Permission-Based Abnormal Application Detection for Android

Permission Sensitivity-Based Malicious Application Detection for Android

Android Malware Detection Method Based on Permission Complement and API Calls

A Two-Layer Deep Learning Method for Android Malware Detection Using Network Traffic.

A detection method for android application security based on TF-IDF and machine learning

Detection of Malicious Behavior in Android Apps Through API Calls and Permission Uses Analysis.

Static detection of Android malware by using permissions and API calls

Detecting Malware by Combining API and Permission Features

Android Malware Detection Method Based on Frequent Pattern and Weighted Naive Bayes

Covalent Bond Based Android Malware Detection Using Permission and System Call Pairs

Android Malware Detection using Permission Based Static Analysis

Towards a multilayered permission-based access control for extending Android security.

Two Effective Methods to Detect Mobile Malware

Malware Detection Technology Analysis and Applied Research of Android Platform

An Effective Online Scheme for Detecting Android Malware