Abstract:Currently, Android malware detection is mostly performed on server side against the increasing number of malware. Powerful computing resource provides more exhaustive protection for app markets than maintaining detection by a single user. However, apart from the applications provided by the official market, apps from unofficial markets and third-party resources are always causing serious security threats to end-users. Meanwhile, it is a time-consuming task if the app is downloaded first and then uploaded to the server side for detection, because the network transmission has a lot of overhead. In addition, the uploading process also suffers from the security threats of attackers. Consequently, a last line of defense on mobile devices is necessary and much-needed. In this paper, we propose an effective Android malware detection system, MobiTive, leveraging customized deep neural networks to provide a real-time and responsive detection environment on mobile devices. MobiTive is a preinstalled solution rather than an app scanning and monitoring engine using after installation, which is more practical and secure. Original deep learning models cannot be directly deployed and executed on mobile devices due to various performance limitations, such as computation power, memory size, and energy. Therefore, we evaluate and investigate the following key points:(1) the performance of different feature extraction methods based on source code or binary code;(2) the performance of different feature type selections for deep learning on mobile devices;(3) the detection accuracy of different deep neural networks on mobile devices;(4) the real-time detection performance and accuracy on different mobile devices;(5) the potential based on the evolution trend of mobile devices' specifications; and finally we further propose a practical solution (MobiTive) to detect Android malware on mobile devices.

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

An Android Malware Detection Method Using Deep Learning Based on API Calls

Android Malware Detection Based on System Call Sequences and LSTM

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Deep learning guided Android malware and anomaly detection

Droid-Sec: Deep Learning In Android Malware Detection

A Deep Learning Based Android Malware Detection System with Static Analysis

DeepDetector: Android Malware Detection using Deep Neural Network

A Deep Learning Method for Android Application Classification Using Semantic Features

A Performance-Sensitive Malware Detection System Using Deep Learning on Mobile Devices

Strengthening LLM ecosystem security: Preventing mobile malware from manipulating LLM-based applications

Droiddetector: Android Malware Characterization and Detection Using Deep Learning

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

An Android Behavior-Based Malware Detection Method Using Machine Learning

A Hybrid Deep Network Framework for Android Malware Detection

A Two-Layer Deep Learning Method for Android Malware Detection Using Network Traffic.

Android Malware Detection Based on a Hybrid Deep Learning Model

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

Droidetec: Android Malware Detection and Malicious Code Localization through Deep Learning

A Hybrid Deep Learning Model for Malicious Behavior Detection

Two Effective Methods to Detect Mobile Malware