Abstract:Android is the most widely used mobile platform, making it a prime target for malicious attacks. Therefore, it is imperative to effectively circumvent these attacks. Recently, machine learning has been a promising solution for malware detection, which relies on distinguishing features. While machine learning-based malware scanners have a large number of features, adversaries can avoid detection by using feature-related expertise. Therefore, one of the main tasks of the Android security industry is to consistently propose cutting-edge features that can detect suspicious activity. This study presents a novel feature representation approach for malware detection that combines API-Call Graphs (ACGs) with byte-level image representation. First, the reverse engineering procedure is used to obtain the Java programming codes and Dalvik Executable (DEX) file from Android Package Kit (APK). Second, to depict Android apps with high-level features, we develop ACGs by mining API-Calls and API sequences from Control Flow Graph (CFG). The ACGs can act as a digital fingerprint of the actions taken by Android apps. Next, the multi-head attention-based transfer learning method is used to extract trained features vector from ACGs. Third, the DEX file is converted to a malware image, and the texture features are extracted and highlighted using a combination of FAST (Features from Accelerated Segment Test) and BRIEF (Binary Robust Independent Elementary Features). Finally, the ACGs and texture features are combined for effective malware detection and classification. The proposed method uses a customized dataset prepared from the CIC-InvesAndMal2019 dataset and outperforms state-of-the-art methods with 99.27% accuracy.

An Android Mutation Malware Detection Based on Deep Learning Using Visualization of Importance from Codes

An Android Mutation Malware Detection Based on Deep Learning Using Visualization of Importance from Codes

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

Dissecting Android Malware: Characterization and Evolution

Learning-Based Detection for Malicious Android Application Using Code Vectorization

An Android Malware Detection Method Using Deep Learning Based on API Calls

A Review on The Use of Deep Learning in Android Malware Detection

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

From Image to Code: Executable Adversarial Examples of Android Applications.

Android Malware Detection Based on a Novel Mixed Bytecode Image Combined with Attention Mechanism

Droid-Sec: Deep Learning In Android Malware Detection

Android Malware Detection Based on a Hybrid Deep Learning Model

Detecting Android Malware by Visualizing App Behaviors from Multiple Complementary Views

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

Deep learning guided Android malware and anomaly detection

Droiddetector: Android Malware Characterization and Detection Using Deep Learning

Deep Feature Extraction and Classification of Android Malware Images

Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection

Droidetec: Android Malware Detection and Malicious Code Localization through Deep Learning

Android Malware Detection Technology Based on Lightweight Convolutional Neural Networks

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning