Benchmarking Android Malware Analysis Tools

Javier Bermejo Higuera,Javier Morales Moreno,Juan Ramón Bermejo Higuera,Juan Antonio Sicilia Montalvo,Gustavo Javier Barreiro Martillo,Tomas Miguel Sureda Riera

DOI: https://doi.org/10.3390/electronics13112103

IF: 2.9

2024-05-29

Electronics

Abstract:Today, malware is arguably one of the biggest challenges organisations face from a cybersecurity standpoint, regardless of the types of devices used in the organisation. One of the most malware-attacked mobile operating systems today is Android. In response to this threat, this paper presents research on the functionalities and performance of different malicious Android application package analysis tools, including one that uses machine learning techniques. In addition, it investigates how these tools streamline the detection, classification, and analysis of malicious Android Application Packages (APKs) for Android operating system devices. As a result of the research included in this article, it can be highlighted that the AndroPytool, a tool that uses machine learning (ML) techniques, obtained the best results with an accuracy of 0.986, so it can be affirmed that the tools that use artificial intelligence techniques used in this study are more efficient in terms of detection capacity. On the other hand, of the online tools analysed, Virustotal and Pithus obtained the best results. Based on the above, new approaches can be suggested in the specification, design, and development of new tools that help to analyse, from a cybersecurity point of view, the code of applications developed for this environment.

engineering, electrical & electronic,physics, applied,computer science, information systems

What problem does this paper attempt to address?

The main problem this paper attempts to address is the evaluation and comparison of the functionalities and performance of different malicious Android application package (APK) analysis tools, especially those that use machine learning techniques. As the Android system has become one of the most frequently targeted operating systems by malware on mobile devices, the research aims to explore how these tools can improve the efficiency of detecting, classifying, and analyzing malicious Android application packages. Through experimental research, the paper hopes to demonstrate that tools using machine learning techniques are more efficient in detection capabilities and provide a reference for the future development of new analysis tools. Specifically, the goals of the paper include: 1. Designing a research methodology to evaluate the effectiveness of tools, with or without the use of machine learning techniques, in detecting and classifying malware on Android devices. 2. Comparing the performance of different tools in detecting malicious code in Android applications based on defined metrics. 3. Determining whether methods using machine learning techniques for malicious code detection yield better results, advantages, or disadvantages. 4. Providing the necessary foundation for establishing a systematic process for analyzing malware in Android applications, emphasizing the need for more comprehensive tools. Through these objectives, the paper hopes to advance the field of Android malware analysis, particularly in improving detection efficiency using artificial intelligence technologies.

Benchmarking Android Malware Analysis Tools

Dissecting Android Malware: Characterization and Evolution

Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART.

RiskRanker: scalable and accurate zero-day android malware detection.

Android malware analysis and detection: A systematic review

A Comprehensive Review of Android Security: Threats, Vulnerabilities, Malware Detection, and Analysis

Android malware detection: a survey

DroidMD: an Efficient and Scalable Android Malware Detection Approach at Source Code Level

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

A State of Art Survey for Understanding Malware Detection Approaches in Android Operating System

Pragmatic Evidence on Android Malware Analysis Techniques: A Systematic Literature Review

A New Android Malware Detection Approach Using Bayesian Classification

Detection and Prevention of Malware in Android Operating System

Don't Pick the Cherry: An Evaluation Methodology for Android Malware Detection Methods

AmandaSystem: A new framework for static and dynamic Android malware analysis

Security Analysis for Android Applications Using Sensitive Path Identification

Andro-profiler: Detecting and Classifying Android Malware based on Behavioral Profiles

Analysis of Bayesian Classification based Approaches for Android Malware Detection

Android Malware Detection Techniques: A Literature Review

Droid Analytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware

A Review: Static Analysis of Android Malware and Detection Technique