Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

A multi-objective sequential three-way decision approach for real-time malware detection

A malware detection framework based on kolmogorov complexity

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Artificial neural network for decision of software maliciousness

Evaluation of Machine Learning Algorithms for Malware Detection

A Novel Sequential Three-Way Decision Model for Medical Diagnosis

Enhancing Android Malware Detection: The Influence of ChatGPT on Decision-centric Task

A Malware Detection Model Based on a Negative Selection Algorithm with Penalty Factor

A Malware Detection Method Based on Sandbox, Binary Instrumentation and Multidimensional Feature Extraction

Malware Detection Based on Multi‐objective Convolution Restricted Boltzmann Machine Model and Constraint‐dividing Crossover Strategy Algorithm

Advanced Cybersecurity Enhancement through Mathematical Models: A Comprehensive Approach Using Statistical Methods, Cryptographic Techniques, and Machine Learning Algorithms (SVM, Random Forest, and Neural Networks) for Behavior-Based Malware Detection

Malware Analysis and Detection Using Machine Learning Algorithms

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

Artificial Intelligence-Based Malware Detection, Analysis, and Mitigation

Study of Malware Detection Based on Interactive Behavior

An ensemble framework for interpretable malicious code detection

Discovering Malicious Signatures in Software from Structural Interactions

Sequence-based malware detection using a single-bidirectional graph embedding and multi-task learning framework

A Hybrid Optimization Model for Efficient Detection and Classification of Malware in the Internet of Things

A Hybrid Deep Network Framework for Android Malware Detection

Malicious Code Detection Using Machine Learning