Abstract:The continuous malicious attacks on Internet of Things devices pose a potential threat to the economic and private information security of end-users, especially on the dominant Android devices. Combining static analysis methods with deep Learning is a promising approach to defend against that. This kind of method has two limitations: the first is that the current single-permission mechanism is not insufficient to regulate interapplication resource acquisition; another problem is that current work on feature learning is dedicated to modifying a single network structure, which may result in a suboptimal solution. In this study, to solve the abovementioned problems, we propose a novel malware detection framework MFEMDroid, which combines multitype features analysis and ensemble modeling. The Provider feature, facilitating information requests between applications (apps) and serving as an indispensable data storage method, plays a vital role in characterizing app behavior. Hence, we extract permissions and Provider features to comprehensively characterize app behavior and probe potentially dangerous combinations between or within these features. To address oversparse datasets and reduce feature learning overhead, we employ an auto-encoder for feature dimensionality reduction. Furthermore, we design an ensemble network based on SENet, ResNet, and the evolutionary convolutional neural network Squeeze Excitation Residual Network (SEResNet) to explore the hidden associations between different types of features from multiple perspectives. We performed extensive experiments to evaluate its method performance on real-world samples. The evaluation results demonstrate that the proposed framework can detect malware with an accuracy of 95.38%, which is much better than state-of-the-art solutions. These promising experimental results show that MFEMDroid is an effective approach to detect Android malware.

Exploring Feature Extraction and ELM in Malware Detection for Android Devices.

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

Malware Detection Techniques by Mining Massive Behavioral Data of Mobile Apps

A Hybrid Deep Network Framework for Android Malware Detection

Large-scale Malware Automatic Detection Based on Multiclass Features and Machine Learning.

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

A Deep Feature Fusion Method for Android Malware Detection

An Android Malware Detection System Based on Machine Learning

Detecting Android Malware Based on Extreme Learning Machine.

Novel Android Malware Detection Method Based on Multi-dimensional Hybrid Features Extraction and Analysis

Detecting Android Malware with Intensive Feature Engineering

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

An Android Malware Detection Method Using Multi-Feature and MobileNet.

Android Malware Detection Using Local Binary Pattern and Principal Component Analysis.

Research of Malware Detection Approach for Android

A Novel Dynamic Android Malware Detection System with Ensemble Learning.

A Deep Learning Approach To Android Malware Feature Learning And Detection

MFEMDroid: A Novel Malware Detection Framework Using Combined Multitype Features and Ensemble Modeling

Detection of Android Malware Based on Deep Forest and Feature Enhancement