Abstract:Android malware has been in an increasing trend in recent years due to the pervasiveness of Android operating system. Android malware is installed and run on the smartphones without explicitly prompting the users or without the user's permission, and it poses great threats to users such as the leakage of personal information and advanced fraud. To address these threats, various techniques are proposed by researchers and practitioners. Static analysis is one of these techniques, which is widely applied to Android malware detection and can detect malware quickly and prohibit malware before installation. To provide a clarified overview of the latest work in Android malware detection using static analysis, we perform a systematic literature review by identifying 98 studies from January 2014 to March 2020. Based on the features of applications, we first divide static analysis in Android malware detection into four categories, which include Android characteristic-based method, opcode-based method, program graph-based method, and symbolic execution-based method. Then we assess the malware detection capability of static analysis, and we compare the performance of different models in Android malware detection by analyzing the results of empirical evidence. Finally, it is concluded that static analysis is effective to detect Android malware. Moreover, there is a preliminary result that neural network model outperforms the non-neural network model in Android malware detection. However, static analysis still faces many challenges. Thus, it is necessary to derive some novel techniques for improving Android malware detection based on the current research community. Moreover, it is essential to establish a unified platform that is used to evaluate the performance of a series of techniques in Android malware detection fairly.

Incorporating Android Code Smells into Java Static Code Metrics for Security Risk Prediction of Android Applications

Security-based Code Smell Definition, Detection, and Impact Quantification in Android

Security Smells in Android

Security Code Smells in Android ICC

Security Analysis for Android Applications Using Sensitive Path Identification

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Android Code Smells: From Introduction to Refactoring

An Informative and Comprehensive Behavioral Characteristics Analysis Methodology of Android Application for Data Security in Brain-Machine Interfacing

Generating Summary Risk Scores for Mobile Applications

SAMLDroid: A Static Taint Analysis and Machine Learning Combined High-Accuracy Method for Identifying Android Apps with Location Privacy Leakage Risks

A Systematic Literature Review of Android Malware Detection Using Static Analysis

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

Study of the Influence of Anti-analysis Techniques on the Security of Android Ecosystem

A Severity-Based Classification Assessment of Code Smells in Kotlin and Java Application

Android malware detection: a survey

A Deep Learning Method for Android Application Classification Using Semantic Features

Code smells analysis for android applications and a solution for less battery consumption

Two Effective Methods to Detect Mobile Malware

DynAMICS: A tool-based method for the specification and dynamic detection of Android behavioural code smells

Towards Automated Risk Assessment and Mitigation of Mobile Applications