Abstract:Smartphones are intricately connected to the modern society. The two widely used mobile phone operating systems, iOS and Android, profoundly affect the lives of millions of people. Android presently holds a market share of close to 71% among these two. As a result, if personal information is not securely protected, it is at tremendous risk. On the other hand, mobile malware has seen a year-on-year increase of more than 42% globally in 2022 mid-year. Any group of human professionals would have a very tough time detecting and removing all of this malware. For this reason, deep learning in particular has been used recently to overcome this problem. Deep learning models, however, were primarily created for picture analysis. Despite the fact that these models have shown promising findings in the field of vision, it has been challenging to fully comprehend what the characteristics recovered by deep learning models are in the area of malware. Furthermore, the actual potential of deep learning for malware analysis has not yet been fully realized due to the translation invariance trait of well-known models based on CNN. In this paper, we present ViTDroid, a novel model based on vision transformers for the deep learning-based analysis of opcode sequences of Android malware samples from large real-world datasets. We have been able to achieve a false positive rate of 0.0019 as compared to the previous best of 0.0021. However, this incremental improvement is not the major contribution of our work. Our model aims to make explainable predictions, i.e., it not only performs the classification of malware with high accuracy, but it also provides insights into the reasons for this classification. The model is able to pinpoint the malicious behavior-causing instructions in the malware samples. This means that our model can actually aid in the field of malware analysis itself by providing insights to human experts, thus leading to further improvements in this field.

The Revolution and Vision of Explainable AI for Android Malware Detection and Protection

Dissecting Android Malware: Characterization and Evolution

XAI and Android Malware Models

A novel method of detecting malware on Android mobile devices with explainable artificial intelligence

Unraveling the Key of Machine Learning Solutions for Android Malware Detection

A Comprehensive Analysis of Explainable AI for Malware Hunting

Artificial Intelligence Algorithms for Malware Detection in Android-Operated Mobile Devices

Why an Android App Is Classified as Malware

ViTDroid: Vision Transformers for Efficient, Explainable Attention to Malicious Behavior in Android Binaries

Cyber Code Intelligence for Android Malware Detection

Why an Android App is Classified as Malware? Towards Malware Classification Interpretation

A Systematic Overview of Android Malware Detection

Explainability in AI-based Behavioral Malware Detection Systems

A malware detection system using a hybrid approach of multi-heads attention-based control flow traces and image visualization

Can We Trust Your Explanations? Sanity Checks for Interpreters in Android Malware Analysis.

A Review of Android Malware Detection Approaches Based on Machine Learning

Mobile based Malware Detection using Artificial Intelligence Techniques a review

Enhancing android malware detection explainability through function call graph APIs

A Survey of Android Malware Detection with Deep Neural Models

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

Why an Android App is Classified As Malware: Toward Malware Classification Interpretation