The revolution and vision of explainable AI for Android malware detection and protection

被引:1
|
作者
Ullah, Shamsher [1 ]
Li, Jianqiang [1 ]
Ullah, Farhan [2 ]
Chen, Jie [3 ]
Ali, Ikram [1 ]
Khan, Salabat [4 ]
Ahad, Abdul [2 ]
Leung, Victor C. M. [3 ,5 ]
机构
[1] Shenzhen Univ, Natl Engn Lab Big Data Syst Comp Technol, Shenzhen 518060, Peoples R China
[2] Northwestern Polytech Univ, Sch Software, Xian 710072, Shaanxi, Peoples R China
[3] Shenzhen Univ, Coll Comp Sci & Software Engn, Shenzhen 518060, Peoples R China
[4] Qilu Inst Technol, Sch Comp & Informat Engn, Jinan 250200, Shandong, Peoples R China
[5] Univ British Columbia, Dept Elect & Comp Engn, Vancouver, BC V6T 1Z4, Canada
基金
国家杰出青年科学基金; 中国国家自然科学基金;
关键词
Explainable AI; Machine learning; Android malware detection and prevention; Signature-based detection; Security awareness training; INTRUSION DETECTION; ATTACKS; FRAMEWORK; SECURITY; TAXONOMY; FEATURES; DEFENSE; THREAT;
D O I
10.1016/j.iot.2024.101320
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The rise and exponential growth in complexity and widespread use of Android mobile devices have resulted in corresponding detrimental consequences within the realm of cyber-attacks. The Android-based device platform is now facing significant challenges from several attack vectors, including but not limited to denial of service (DoS), botnets, phishing, social engineering, malware, and other forms of cyber threats. Among the many threats faced by users, it has been observed that instances of malware attacks against Android phones have become a frequent and regular phenomenon. In contrast to previous studies that concentrated on evaluating the detection skills of machine learning (ML) classifiers in determining the causes, our research is primarily focused on the revolution and vision of eXplainable AI (XAI) for Android malware detection and protection. The XAI that we have presented aims to investigate how machine learning-based models acquire knowledge during the training phase. Our proposed XAI main goal is to study and figure out what makes machine learning-based malware classifiers work so well in controlled lab settings that might not accurately reflect real-life situations. It has been observed that the presence of temporal sample irregularities within the training dataset leads to inflated classification performance, resulting in too optimistic F1 scores and accuracy rates of up to 96.11%, 90.24%, and 99.48% respectively.
引用
收藏
页数:36
相关论文
共 50 条
  • [11] An Overview of Techniques for Obfuscated Android Malware Detection
    Siddiqui S.
    Khan T.A.
    SN Computer Science, 5 (4)
  • [12] Android Fragmentation in Malware Detection
    Long Nguyen-Vu
    Ahn, Jinung
    Jung, Souhwan
    COMPUTERS & SECURITY, 2019, 87
  • [13] Recent Advances in Android Mobile Malware Detection: A Systematic Literature Review
    Alzubaidi, Abdulaziz
    IEEE ACCESS, 2021, 9 : 146318 - 146349
  • [14] PhilaeX: Explaining the Failure and Success of AI Models in Malware Detection
    Lu, Zhi
    Thing, Vrizlynn L. L.
    PROCEEDINGS OF THE 7TH INTERNATIONAL CONFERENCE ON INTERNET OF THINGS, BIG DATA AND SECURITY (IOTBDS), 2022, : 37 - 46
  • [15] Android Malware Detection Using Deep Learning Methods
    Lukas, Robert
    Kolaczek, Grzegorz
    2021 IEEE 30TH INTERNATIONAL CONFERENCE ON ENABLING TECHNOLOGIES: INFRASTRUCTURE FOR COLLABORATIVE ENTERPRISES (WETICE 2021), 2021, : 119 - 124
  • [16] “Andromaly”: a behavioral malware detection framework for android devices
    Asaf Shabtai
    Uri Kanonov
    Yuval Elovici
    Chanan Glezer
    Yael Weiss
    Journal of Intelligent Information Systems, 2012, 38 : 161 - 190
  • [17] "Andromaly": a behavioral malware detection framework for android devices
    Shabtai, Asaf
    Kanonov, Uri
    Elovici, Yuval
    Glezer, Chanan
    Weiss, Yael
    JOURNAL OF INTELLIGENT INFORMATION SYSTEMS, 2012, 38 (01) : 161 - 190
  • [18] A Novel Knowledge Search Structure for Android Malware Detection
    Zhu, Huijuan
    Xia, Mengzhen
    Wang, Liangmin
    Xu, Zhicheng
    Sheng, Victor S.
    IEEE TRANSACTIONS ON SERVICES COMPUTING, 2024, 17 (06) : 3052 - 3064
  • [19] A pragmatic android malware detection procedure
    Palumbo, Paolo
    Sayfullina, Luiza
    Komashinskiy, Dmitriy
    Eirola, Emil
    Karhunen, Juha
    COMPUTERS & SECURITY, 2017, 70 : 689 - 701
  • [20] Android malware detection: state of the art
    Muttoo S.K.
    Badhani S.
    International Journal of Information Technology, 2017, 9 (1) : 111 - 117