Abstract:The focus of a large amount of research on malware detection is currently working on proposing and improving neural network structures, but with the constant updates of Android, the proposed detection methods are more like a race against time. Through the analysis of these methods, we found that the basic processes of these detection methods are roughly the same, and these methods rely on professional reverse engineering tools for malware analysis and feature extraction. These tools generally have problems such as high time-space cost consumption, difficulty in achieving concurrent analysis of a large number of Apk, and the output results are not convenient for feature extraction. Is it possible to propose a general malware detection process implementation platform that optimizes each process of existing malware detection methods while being able to efficiently extract various features on malware datasets with a large number of APK? To solve this problem, we propose an automated platform, AmandaSystem, that highly integrates the various processes of deep learning-based malware detection methods. At the same time, the problem of over privilege due to the openness of Android system and thus the problem of excessive privileges has always required the accurate construction of mapping relationships between privileges and API calls, while the current methods based on function call graphs suffer from inefficiency and low accuracy. To solve this problem, we propose a new bottom-up static analysis method based on AmandaSystem to achieve an efficient and complete tool for mapping relationships between Android permissions and API calls, PerApTool. Finally, we conducted tests on three publicly available malware datasets, CICMalAnal2017, CIC-AAGM2017, and CIC-InvesAndMal2019, to evaluate the performance of AmandaSystem in terms of time efficiency of APK parsing, space occupancy, and comprehensiveness of extracted features, respectively, compared with existing methods were compared.

APK-DFS: An Automatic Interaction System Based on Depth-First-Search for APK.

PackerGrind: An Adaptive Unpacking System for Android Apps.

An Automatic UI Interaction Script Generator for Android Applications Using Activity Call Graph Analysis

Happer - Unpacking Android Apps via a Hardware-Assisted Approach.

SmartDroid: an automatic system for revealing UI-based trigger conditions in android applications.

Improving Automated GUI Exploration of Android Apps Via Static Dependency Analysis.

AimDroid: Activity-Insulated Multi-level Automated Testing for Android Applications

DCDroid: An APK Static Identification Method Based on Naïve Bayes Classifier and Dual‐Centrality Analysis

Security Analysis for Android Applications Using Sensitive Path Identification

RepDroid: An Automated Tool for Android Application Repackaging Detection

Automatically Distilling Storyboard with Rich Features for Android Apps

App in the Middle

SPADE: Scalable App Digging with Binary Instrumentation and Automated Execution

DinoDroid: Testing Android Apps Using Deep Q-Networks

CHECKERDROID : Automated Quality Assurance for Smartphone Applications.

Real-Time Behavior Analysis and Identification for Android Application

DAPASA: Detecting Android Piggybacked Apps Through Sensitive Subgraph Analysis

A Detection Method and System Implementation for Android Malware

AmandaSystem: A new framework for static and dynamic Android malware analysis

AutoPatchDroid: A Framework for Patching Inter-App Vulnerabilities in Android Application

Analyzing Android Application in Real-Time at Kernel Level