Abstract:According to the recent report, 12 000 new Android malware samples will be generated every day. Efficient identification of evolving malware is an urgent challenge. Traditional methods based on structured features such as permissions and sensitive application programming interface (API) calls lack high-level behavioral semantics to detect evolving malware. The methods based on call graphs (CG) are good at behavioral semantic analysis but face the problem of huge time and space consumption, which leads to low detection efficiency. In this paper, we propose a novel Android malware detection method based on the method-level correlation relationship of application's abstracted API calls. First, we split each Android application's source code into separate function methods and just keep the abstracted API calls of them to form a set of abstracted API calls transactions. And then, we calculate the confidence of association rules between the abstracted API calls, which forms behavioral semantics to describe an application. Finally, we combine machine learning to identify the different behavioral patterns of malicious and benign apps to build the detection system. The results of our empirical evaluation show our system is competitive in terms of classification accuracy and detection efficiency. At dataset Drebin (benign 5.9K and malware 5.6K) and AMD (benign 20.5K and malware 20.8K), our system has achieved 96% and 98% detection results both in accuracy and F-measure. Compared with the state-of-the-art system in detecting evolving malware called MaMaDroid on the dataset of 6.0K benign and 20.5K malicious samples spanning from 2010 to 2017, our system achieves higher accuracy while improving detection efficiency by 15 times (2.9 s versus 45.7 s per sample).

A Novel Android Malware Detection Method Based on Visible User Interface.

An Android Malware Detection Method Using Deep Learning Based on API Calls

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

An Android Mutation Malware Detection Based on Deep Learning Using Visualization of Importance from Codes

A Detection Method and System Implementation for Android Malware

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

Detecting Android Malware by Visualizing App Behaviors from Multiple Complementary Views

ImageDroid: Using Deep Learning to Efficiently Detect Android Malware and Automatically Mark Malicious Features

From Image to Code: Executable Adversarial Examples of Android Applications.

Research of Malware Detection Approach for Android

Android malware detection: a survey

An Android Behavior-Based Malware Detection Method Using Machine Learning

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.

Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection

Droid-Sec: Deep Learning In Android Malware Detection

A novel method of detecting malware on Android mobile devices with explainable artificial intelligence

Droiddetector: Android Malware Characterization and Detection Using Deep Learning

Poster : An Efficient Solution for Detecting UI-Mimicking Android Applications