Abstract:According to the recent report, 12 000 new Android malware samples will be generated every day. Efficient identification of evolving malware is an urgent challenge. Traditional methods based on structured features such as permissions and sensitive application programming interface (API) calls lack high-level behavioral semantics to detect evolving malware. The methods based on call graphs (CG) are good at behavioral semantic analysis but face the problem of huge time and space consumption, which leads to low detection efficiency. In this paper, we propose a novel Android malware detection method based on the method-level correlation relationship of application's abstracted API calls. First, we split each Android application's source code into separate function methods and just keep the abstracted API calls of them to form a set of abstracted API calls transactions. And then, we calculate the confidence of association rules between the abstracted API calls, which forms behavioral semantics to describe an application. Finally, we combine machine learning to identify the different behavioral patterns of malicious and benign apps to build the detection system. The results of our empirical evaluation show our system is competitive in terms of classification accuracy and detection efficiency. At dataset Drebin (benign 5.9K and malware 5.6K) and AMD (benign 20.5K and malware 20.8K), our system has achieved 96% and 98% detection results both in accuracy and F-measure. Compared with the state-of-the-art system in detecting evolving malware called MaMaDroid on the dataset of 6.0K benign and 20.5K malicious samples spanning from 2010 to 2017, our system achieves higher accuracy while improving detection efficiency by 15 times (2.9 s versus 45.7 s per sample).

Android malware detection method based on system calls

Android Malware Detection of Calls Tracing with AndroidManifest and API

Android Malware Detection Based on System Call Sequences and LSTM

A Detection Method and System Implementation for Android Malware

Research of Malware Detection Approach for Android

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.

Malware Detection Approach for Android systems Using System Call Logs

Identifying Android Malware with System Call Co‐occurrence Matrices

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

An Android Malware Detection Method Using Deep Learning Based on API Calls

A System Call-based Android Malware Detection Approach with Homogeneous & Heterogeneous Ensemble Machine Learning

Analysis, Detection, and Classification of Android Malware using System Calls

Android Malware Detection Based on Sensitive Patterns

Android malware detection method based on function call graphs

Malware Detection Approach Based on Non-User Operating Sequence

Android Malware Detection Method Based on Permission Complement and API Calls

Accurate mobile malware detection and classification in the cloud

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

Two Effective Methods to Detect Mobile Malware

Cscdroid: Accurately Detect Android Malware Via Contribution-Level-Based System Call Categorization