Abstract:Due to the openness of an Android system, many Internet of Things (IoT) devices are running the Android system and Android devices have become a common control terminal for IoT devices because of various sensors on them. With the popularity of IoT devices, malware on Android-based IoT devices is also increasing. People's lives and privacy security are threatened. To reduce such threat, many researchers have proposed new methods to detect Android malware. Currently, most malware detection products on the market are based on malware signatures, which have a fast detection speed and normally a low false alarm rate for known malware families. However, they cannot detect unknown malware and are easily evaded by malware that is confused or packaged. Many new solutions use syntactic features and machine learning techniques to classify Android malware. It has been known that analysis of the Function Call Graph (FCG) can capture behavioral features of malware well. This paper presents a new approach to classifying Android malware based on deep learning and OpCode-level FCG. The FCG is obtained through static analysis of Operation Code (OpCode), and the deep learning model we used is the Long Short-Term Memory (LSTM). We conducted experiments on a dataset with 1796 Android malware samples classified into two categories (obtained from Virusshare and AndroZoo) and 1000 benign Android apps. Our experimental results showed that our proposed approach with an accuracy of 97 % outperforms the state-of-the-art methods such as those proposed by Nikola et al. and Hou et al. (IJCAI-18) with the accuracy of 97 % and 91 % , respectively. The time consumption of our proposed approach is less than the other two methods.

END-TO-END ANDROID MALWARE CLASSIFICATION BASED ON PURE TRAFFIC IMAGES

Android Malware Classification Approach Based on Host-Level Encrypted Traffic Shaping

Android Malware Identification Based on Traffic Analysis.

A Two-Layer Deep Learning Method for Android Malware Detection Using Network Traffic.

Convolution neural network with batch normalization and inception-residual modules for Android malware classification

An End-to-end Model for Android Malware Detection

A Novel Android Malware Detection Approach Based on Convolutional Neural Network.

Self-attention based convolutional-LSTM for android malware detection using network traffics grayscale image

A Fast and Effective Detection of Mobile Malware Behavior Using Network Traffic.

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

Classifying Malware Traffic Using Images and Deep Convolutional Neural Network

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

Android Malware Detection Based on a Novel Mixed Bytecode Image Combined with Attention Mechanism

A Hybrid Modeling of Mobile App Dynamics on Serial Causality for Malware Detection

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

A novel method of detecting malware on Android mobile devices with explainable artificial intelligence

A Stacking-Based Classification Approach to Android Malware Using Host-Level Encrypted Traffic

Android Malware Detection Based on a Hybrid Deep Learning Model

Deep Feature Extraction and Classification of Android Malware Images

Android Malware Traffic Feature Analysis Technique Based on Improved Bayesian Model

ImageDroid: Using Deep Learning to Efficiently Detect Android Malware and Automatically Mark Malicious Features