Abstract:With the advent of smart phones, the popularity of free Android applications has risen rapidly. This has led to malicious Android apps being involuntarily installed, which violate the user privacy or conduct attack. Malware detection on Android platforms therefore is a growing concern because of the undesirable similarity between malicious behavior and benign behavior, which can lead to slow detection, and allow compromises to persist for comparatively long periods of time in infected phones. The contributions of this paper are first a multiple dimensional, kernel feature-based framework and feature weight-based detection (WBD) designed to categorize and comprehend the characteristics of Android malware and benign apps. Furthermore, our software agent is orchestrated and implemented for the data collection and storage to scan thousands of benign and malicious apps automatically. We examine 112 kernel attributes of executing the task data structure in the Android system and evaluate the detection accuracy with a number of datasets of various dimensions. We find that memory-and signal-related features contribute to more precise classification than schedule-related and other descriptors of task states listed in our paper. Particularly, memory-related features provide fine-grain classification policies for preserving higher classification precision than the signal-related and others. Furthermore, we study and evaluate 80 newly infected attributes of the Android kernel task structure, prioritizing the 70 features of most significance based on dimensional reduction to optimize the efficiency of high-dimensional classification. Our second contribution is that our experiments demonstrate that, as compared to existing techniques with a short list of task structure features (16 or 32 features), our method can achieve 94%-98% accuracy and 2%-7% false positive rate, while detecting malware apps with reduced-dimensional features that adequately abbreviate online malware detections and advance offline malware inspections. (c) 2021 Elsevier B.V. All rights reserved.

Detection, Traceability, and Propagation of Mobile Malware Threats

Dissecting Android Malware: Characterization and Evolution

Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART.

A Hybrid Approach of Mobile Malware Detection in Android

Reviving Android Malware with DroidRide: and How Not To.

Android malware detection: a survey

Research on Android Malware Characteristic

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

Using Ontologies to Perform Threat Analysis and Develop Defensive Strategies for Mobile Security

Detecting Information Theft Based on Mobile Network Flows for Android Users

A novel approach for mobile malware classification and detection in Android systems

Detecting Android Malware Based on Dynamic Feature Sequence and Attention Mechanism

Research of Malware Detection Approach for Android

A Detection Method and System Implementation for Android Malware

Droid Analytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware

Real-Time Detection of Malicious Behavior in Android Apps

DroidAnalytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.

A State of Art Survey for Understanding Malware Detection Approaches in Android Operating System

Android Malware Detection Through Machine Learning on Kernel Task Structures.

Capturing and Characterizing Network Actions of Mobile Applications for Behavior Consistency