Algorithm to detect Android malicious behaviors

WANGZhiqiang,ZHANGYuqing,LIUQixu,HUANGTingpei
DOI: https://doi.org/10.3969/j.issn.1001-2400.2015.03.002
2015-01-01
Abstract:The paper presents a novel Android malware behavioral detection algorithm.The algorithm characterizes Android applications”behaviors by system call sequences and control flow sequences,trains a malware feature base and a threshold by analyzing known malware samples.Then,we calculate the similarities between the feature base and Android applications,and detect malware by comparing the similarities with the threshold.Finally,an Android malware detection system named SCADect is developed according to the algorithm.The detection accuracy of detecting 3 000 samples is up to 96.8%,and the detection rate of classifying 8-cluster obfuscated malware including 237 samples can reach 89%,obviously better than the tool Androguard.The results show that the SCADect is able to resist obfuscated and cryptographic attacks,improves the detection accuracy and reduces the false negative rate.
What problem does this paper attempt to address?