Abstract:Due to the openness of an Android system, many Internet of Things (IoT) devices are running the Android system and Android devices have become a common control terminal for IoT devices because of various sensors on them. With the popularity of IoT devices, malware on Android-based IoT devices is also increasing. People's lives and privacy security are threatened. To reduce such threat, many researchers have proposed new methods to detect Android malware. Currently, most malware detection products on the market are based on malware signatures, which have a fast detection speed and normally a low false alarm rate for known malware families. However, they cannot detect unknown malware and are easily evaded by malware that is confused or packaged. Many new solutions use syntactic features and machine learning techniques to classify Android malware. It has been known that analysis of the Function Call Graph (FCG) can capture behavioral features of malware well. This paper presents a new approach to classifying Android malware based on deep learning and OpCode-level FCG. The FCG is obtained through static analysis of Operation Code (OpCode), and the deep learning model we used is the Long Short-Term Memory (LSTM). We conducted experiments on a dataset with 1796 Android malware samples classified into two categories (obtained from Virusshare and AndroZoo) and 1000 benign Android apps. Our experimental results showed that our proposed approach with an accuracy of 97 % outperforms the state-of-the-art methods such as those proposed by Nikola et al. and Hou et al. (IJCAI-18) with the accuracy of 97 % and 91 % , respectively. The time consumption of our proposed approach is less than the other two methods.

Android Malware Detection Based on System Call Sequences and LSTM

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

An Android Malware Detection Method Using Deep Learning Based on API Calls

Identifying Android Malware with System Call Co‐occurrence Matrices

A Deep Learning Based Android Malware Detection System with Static Analysis

Droidetec: Android Malware Detection and Malicious Code Localization through Deep Learning

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

Back-propagation Neural Network on Markov Chains from System Call Sequences: a New Approach for Detecting Android Malware with System Call Sequences.

Deep Android Malware Detection

A novel pattern recognition system for detecting Android malware by analyzing suspicious boot sequences

Deep learning guided Android malware and anomaly detection

Two Effective Methods to Detect Mobile Malware

Android Malware Detection Based on a Hybrid Deep Learning Model

Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence

Opcode Sequence Analysis of Android Malware by a Convolutional Neural Network.

Analysis, Detection, and Classification of Android Malware using System Calls

Android Malware Detection using Deep Learning on API Method Sequences

ConvDroid: Lightweight Neural Network Based Andoird Malware Detection.

DeepDetector: Android Malware Detection using Deep Neural Network

DL-Droid: Deep learning based android malware detection using real devices

Malware Detection Approach for Android systems Using System Call Logs