Abstract:Android is the most widely used mobile platform, making it a prime target for malicious attacks. Therefore, it is imperative to effectively circumvent these attacks. Recently, machine learning has been a promising solution for malware detection, which relies on distinguishing features. While machine learning-based malware scanners have a large number of features, adversaries can avoid detection by using feature-related expertise. Therefore, one of the main tasks of the Android security industry is to consistently propose cutting-edge features that can detect suspicious activity. This study presents a novel feature representation approach for malware detection that combines API-Call Graphs (ACGs) with byte-level image representation. First, the reverse engineering procedure is used to obtain the Java programming codes and Dalvik Executable (DEX) file from Android Package Kit (APK). Second, to depict Android apps with high-level features, we develop ACGs by mining API-Calls and API sequences from Control Flow Graph (CFG). The ACGs can act as a digital fingerprint of the actions taken by Android apps. Next, the multi-head attention-based transfer learning method is used to extract trained features vector from ACGs. Third, the DEX file is converted to a malware image, and the texture features are extracted and highlighted using a combination of FAST (Features from Accelerated Segment Test) and BRIEF (Binary Robust Independent Elementary Features). Finally, the ACGs and texture features are combined for effective malware detection and classification. The proposed method uses a customized dataset prepared from the CIC-InvesAndMal2019 dataset and outperforms state-of-the-art methods with 99.27% accuracy.

An Android Mutation Malware Detection Based on Deep Learning Using Visualization of Importance from Codes

An Android Mutation Malware Detection Based on Deep Learning Using Visualization of Importance from Codes

Dissecting Android Malware: Characterization and Evolution

Learning-Based Detection for Malicious Android Application Using Code Vectorization

An Android Malware Detection Method Using Deep Learning Based on API Calls

A Review on The Use of Deep Learning in Android Malware Detection

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

Effective Android Malware Detection Based on Deep Learning

Droid-Sec: Deep Learning In Android Malware Detection

From Image to Code: Executable Adversarial Examples of Android Applications.

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

A Deep Feature Fusion Method for Android Malware Detection

Research of Malware Detection Approach for Android

MVVDroid: Android Malware Detection Based on Multi-View Visualization

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

Android Malware Detection Based on a Novel Mixed Bytecode Image Combined with Attention Mechanism

Deep learning guided Android malware and anomaly detection

A Detection Method and System Implementation for Android Malware

Android malware detection method based on bytecode image

Detecting Android Malware by Visualizing App Behaviors from Multiple Complementary Views

Android Malware Detection Based on a Hybrid Deep Learning Model