Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

SMASH: A Malware Detection Method Based on Multi-Feature Ensemble Learning

Malware Detection Using Machine Learning Based on the Combination of Dynamic and Static Features

Malware Detection Based on Multi-level and Dynamic Multi-feature Using Ensemble Learning at Hypervisor

Improving Malware Detection Using Multi-View Ensemble Learning.

A New Malware Classification Approach Based On Malware Dynamic Analysis

Ensemble Feature Selection With Discriminative And Representative Properties For Malware Detection

REMSF: A Robust Ensemble Model of Malware Detection Based on Semantic Feature Fusion

Detecting Malware with an Ensemble Method Based on Deep Neural Network

Ensemble dynamic behavior detection method for adversarial malware

A Novel Dynamic Android Malware Detection System with Ensemble Learning.

Multi-context Features for Detecting Malicious Programs

Based on Multi-features and Clustering Ensemble Method for Automatic Malware Categorization

A Deep Feature Fusion Method for Android Malware Detection

A Simhash-Based Integrative Features Extraction Algorithm for Malware Detection

Malicious Code Detection Method Based on Static Features and Ensemble Learning

An ensemble deep learning classifier stacked with fuzzy ARTMAP for malware detection

Malware Variants Detection Based on Feature Fusion

A Hybrid Deep Network Framework for Android Malware Detection

Malicious Codes Detection Based On Ensemble Learning

A Malware Detection Method Based on Sandbox, Binary Instrumentation and Multidimensional Feature Extraction

Fast and Efficient Malware Detection with Joint Static and Dynamic Features Through Transfer Learning