Machine Learning-based Malicious Application Detection of Android

In this paper, we propose a machine learning based approach to detect malicious mobile malware Android applications. Our work is able to capture instantaneous attacks that cannot be effectively detected in past work. Based on the proposed approach, we implemented a malicious app detection tool, named Androidetect. First, we analyze the relationship between system functions, sensitive permissions and sensitive APIs. The combination of system functions has been used to describe the application behaviors and construct eigenvectors. Subsequently, based on the eigenvectors, we compare the methodologies of naive Bayesian, J48 decision tree and application functions decision algorithm (AFDA) regarding effective detection of malicious Android applications. Androidetect is then applied to test sample programs and real world applications. The experimental results prove that Androidetect can better detect malicious applications of Android by using a combination of system functions compared with previous work.

Keywords

Machine learning, Malicious applications of Android, System function

DOI

10.1109/ACCESS.2017.2771470

Citation

Wei, L, Luo, W, Weng, J, Zhong, Y, Zhang, X & Yan, Z 2017, ' Machine Learning-based Malicious Application Detection of Android ', IEEE Access, vol. 5, pp. 25591-25601 . https://doi.org/10.1109/ACCESS.2017.2771470

Permanent link to this item

https://urn.fi/URN:NBN:fi:aalto-201802091330

Collections

[article-cris] Sähkötekniikan korkeakoulu / ELEC

Show all metadata

Machine Learning-based Malicious Application Detection of Android

Access rights

URL

Journal Title

Journal ISSN

Volume Title

Authors

Date

Department

Major/Subject

Mcode

Degree programme

Language

Pages

Series

Abstract

Description

Keywords

Other note

DOI

Citation

Permanent link to this item

Collections