Abstract:With the advent of smart phones, the popularity of free Android applications has risen rapidly. This has led to malicious Android apps being involuntarily installed, which violate the user privacy or conduct attack. Malware detection on Android platforms therefore is a growing concern because of the undesirable similarity between malicious behavior and benign behavior, which can lead to slow detection, and allow compromises to persist for comparatively long periods of time in infected phones. The contributions of this paper are first a multiple dimensional, kernel feature-based framework and feature weight-based detection (WBD) designed to categorize and comprehend the characteristics of Android malware and benign apps. Furthermore, our software agent is orchestrated and implemented for the data collection and storage to scan thousands of benign and malicious apps automatically. We examine 112 kernel attributes of executing the task data structure in the Android system and evaluate the detection accuracy with a number of datasets of various dimensions. We find that memory-and signal-related features contribute to more precise classification than schedule-related and other descriptors of task states listed in our paper. Particularly, memory-related features provide fine-grain classification policies for preserving higher classification precision than the signal-related and others. Furthermore, we study and evaluate 80 newly infected attributes of the Android kernel task structure, prioritizing the 70 features of most significance based on dimensional reduction to optimize the efficiency of high-dimensional classification. Our second contribution is that our experiments demonstrate that, as compared to existing techniques with a short list of task structure features (16 or 32 features), our method can achieve 94%-98% accuracy and 2%-7% false positive rate, while detecting malware apps with reduced-dimensional features that adequately abbreviate online malware detections and advance offline malware inspections. (c) 2021 Elsevier B.V. All rights reserved.

Android Malware Detection Method Based on Frequent Pattern and Weighted Naive Bayes

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

Android Malware Detection Based on Sensitive Patterns

Two Effective Methods to Detect Mobile Malware

You Are What the Permissions Told Me! Android Malware Detection Based on Hybrid Tactics

A detection method for android application security based on TF-IDF and machine learning

Research of Malware Detection Approach for Android

Android Malware Detection Method Based on Permission Complement and API Calls

Permission-Based Abnormal Application Detection for Android

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

Permission-combination-based scheme for Android mobile malware detection

API Sequences Based Malware Detection for Android.

Maldetector-Using Permission Combinations to Evaluate Malicious Features of Android App

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

MalPat: Mining Patterns of Malicious and Benign Android Apps Via Permission-Related APIs.

A Malicious Android Malware Detection System Based on Implicit Relationship Mining

Effective Android Malware Detection Based on Deep Learning

A Detection Method and System Implementation for Android Malware

Android Malware Detection using Permission Based Static Analysis

Android Malware Detection Through Machine Learning on Kernel Task Structures.

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.