Abstract:Android is a growing target for malicious software (malware) because of its popularity and functionality. Malware poses a serious threat to users' privacy, money, equipment and file integrity. A series of data-driven malware detection methods were proposed. However, there exist two key challenges for these methods: (1) how to learn effective feature representation from raw data; (2) how to reduce the dependence on the prior knowledge or human labors in feature learning. Inspired by the success of deep learning methods in the feature representation learning community, we propose a malware detection framework which starts with learning rich-features by a novel unsupervised feature learning algorithm Merged Sparse Auto-Encoder (MSAE). In order to extract more compact and discriminative feature from the rich-features to further boost the malware detection capability, a hybrid deep network learning algorithm Stacked Hybrid Learning MSAE and SDAE (SHLMD) is established by further incorporating a classical deep learning method Stacked Denoising Auto-encoders (SDAE). After that, we feed the feature learned by MSAE and SHLMD respectively to classification algorithms, e.g., Support Vector Machine (SVM) or K-NearestNeighbor (KNN), to train a malware detection model. Evaluation results on two real-world datasets demonstrate that SHLMD achieves 94.46 and 90.57 percent accuracy respectively, which outperforms the classical unsupervised feature representation learning Sparse Auto-encoder (SAE). MSAE performs similarly to SAE. SHLMD can further improve the performance of MSAE and the supervised fine-tuned method SDAE. Besides, we compare the performance of our methods with that of state-of-the-art detection approaches, including classical deep-learning-based methods. Extensive experiments show that our proposed methods are effective enough to detect Android malware.

Android Malware Detection Method Based on CNN and DNN Bybrid Mechanism

A Two-Layer Deep Learning Method for Android Malware Detection Using Network Traffic.

An Android Malware Detection Method Using Deep Learning Based on API Calls

Android Malware Detection Based on a Hybrid Deep Learning Model

A Hybrid Deep Network Framework for Android Malware Detection

NMal-Droid: network-based android malware detection system using transfer learning and CNN-BiGRU ensemble

Automatic Detection of Android Malware via Hybrid Graph Neural Network

An effective attention and residual network for malware detection

Deep Android Malware Detection

ConvDroid: Lightweight Neural Network Based Andoird Malware Detection.

DeepImageDroid: A Hybrid Framework Leveraging Visual Transformers and Convolutional Neural Networks for Robust Android Malware Detection

Droid-Sec: Deep Learning In Android Malware Detection

Convolution neural network with batch normalization and inception-residual modules for Android malware classification

DeepDetector: Android Malware Detection using Deep Neural Network

Android Security: Malware Detection with Convolutional Neural Network and Feature Analysis

An efficient combined deep neural network based malware detection framework in 5G environment

Deep learning feature exploration for Android malware detection

A novel method of detecting malware on Android mobile devices with explainable artificial intelligence

DCEL: Classifier Fusion Model for Android Malware Detection

Droidetec: Android Malware Detection and Malicious Code Localization through Deep Learning

Android Malware Detection Approach Using Stacked AutoEncoder and Convolutional Neural Networks