Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

An Android Malware Detection and Classification Approach Based on Contrastive Lerning

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

Continuous Learning for Android Malware Detection

An Android Malware Detection Method Using Deep Learning Based on API Calls

Multi-label Classification for Android Malware Based on Active Learning

A Systematic Overview of Android Malware Detection

A Novel Approach for Mobile Malware Classification and Detection in Android Systems.

A Review of Android Malware Detection Approaches Based on Machine Learning

A Hybrid Deep Network Framework for Android Malware Detection

Contrastive Learning for Robust Android Malware Familial Classification

MalWhiteout: Reducing Label Errors in Android Malware Detection.

Android Malware Detection Based on System Call Sequences and LSTM

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

Research of Malware Detection Approach for Android

Unraveling the Key of Machine Learning Solutions for Android Malware Detection

Android Malware Classification Approach Based on Host-Level Encrypted Traffic Shaping

Android Malware Detection Based on a Hybrid Deep Learning Model

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

Adaptive and Scalable Android Malware Detection through Online Learning

Semi-supervised classification for dynamic Android malware detection