Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

Application of Deep Belief Networks for opcode based malware detection

Malware detection based on deep learning algorithm

Malware Analysis Using Machine Learning and Deep Learning Techniques

Detecting Malware with an Ensemble Method Based on Deep Neural Network

Opcode Sequence Analysis of Android Malware by a Convolutional Neural Network.

Android Malware Detection Based on a Hybrid Deep Learning Model

DeepSign: Deep Learning for Automatic Malware Signature Generation and Classification

Deep learning-aided runtime opcode-based Windows malware detection

Deep Android Malware Detection

Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Features

New Era of Deeplearning-Based Malware Intrusion Detection: The Malware Detection and Prediction Based On Deep Learning

DeepDetector: Android Malware Detection using Deep Neural Network

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

Intelligent Malware Detection Based on Graph Convolutional Network

Behavioral Malware Detection Using Deep Graph Convolutional Neural Networks

Performance evaluation of deep neural network on malware detection: visual feature approach

Detecting Malware Using Graph Embedding and DNN

Detection of Malicious Code Variants Based on Deep Learning

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

A Natural Language Processing Approach to Malware Classification

A Hybrid Deep Network Framework for Android Malware Detection