The revolution and vision of explainable AI for Android malware detection and protection

被引:1
|
作者
Ullah, Shamsher [1 ]
Li, Jianqiang [1 ]
Ullah, Farhan [2 ]
Chen, Jie [3 ]
Ali, Ikram [1 ]
Khan, Salabat [4 ]
Ahad, Abdul [2 ]
Leung, Victor C. M. [3 ,5 ]
机构
[1] Shenzhen Univ, Natl Engn Lab Big Data Syst Comp Technol, Shenzhen 518060, Peoples R China
[2] Northwestern Polytech Univ, Sch Software, Xian 710072, Shaanxi, Peoples R China
[3] Shenzhen Univ, Coll Comp Sci & Software Engn, Shenzhen 518060, Peoples R China
[4] Qilu Inst Technol, Sch Comp & Informat Engn, Jinan 250200, Shandong, Peoples R China
[5] Univ British Columbia, Dept Elect & Comp Engn, Vancouver, BC V6T 1Z4, Canada
基金
国家杰出青年科学基金; 中国国家自然科学基金;
关键词
Explainable AI; Machine learning; Android malware detection and prevention; Signature-based detection; Security awareness training; INTRUSION DETECTION; ATTACKS; FRAMEWORK; SECURITY; TAXONOMY; FEATURES; DEFENSE; THREAT;
D O I
10.1016/j.iot.2024.101320
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The rise and exponential growth in complexity and widespread use of Android mobile devices have resulted in corresponding detrimental consequences within the realm of cyber-attacks. The Android-based device platform is now facing significant challenges from several attack vectors, including but not limited to denial of service (DoS), botnets, phishing, social engineering, malware, and other forms of cyber threats. Among the many threats faced by users, it has been observed that instances of malware attacks against Android phones have become a frequent and regular phenomenon. In contrast to previous studies that concentrated on evaluating the detection skills of machine learning (ML) classifiers in determining the causes, our research is primarily focused on the revolution and vision of eXplainable AI (XAI) for Android malware detection and protection. The XAI that we have presented aims to investigate how machine learning-based models acquire knowledge during the training phase. Our proposed XAI main goal is to study and figure out what makes machine learning-based malware classifiers work so well in controlled lab settings that might not accurately reflect real-life situations. It has been observed that the presence of temporal sample irregularities within the training dataset leads to inflated classification performance, resulting in too optimistic F1 scores and accuracy rates of up to 96.11%, 90.24%, and 99.48% respectively.
引用
收藏
页数:36
相关论文
共 50 条
  • [41] A Machine Learning Approach for Real Time Android Malware Detection
    Ngoc C Le
    Tien-Manh Nguyen
    Trang Truong
    Ngoc-Dam Nguyen
    Tra Ngo
    2020 RIVF INTERNATIONAL CONFERENCE ON COMPUTING & COMMUNICATION TECHNOLOGIES (RIVF 2020), 2020, : 347 - 352
  • [42] Audio signal processing for Android malware detection and family identification
    Francesco Mercaldo
    Antonella Santone
    Journal of Computer Virology and Hacking Techniques, 2021, 17 : 139 - 152
  • [43] SOMDROID: android malware detection by artificial neural network trained using unsupervised learning
    Mahindru, Arvind
    Sangal, A. L.
    EVOLUTIONARY INTELLIGENCE, 2022, 15 (01) : 407 - 437
  • [44] DroidCat: Effective Android Malware Detection and Categorization via App-Level Profiling
    Cai, Haipeng
    Meng, Na
    Ryder, Barbara
    Yao, Daphne
    IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2019, 14 (06) : 1455 - 1470
  • [45] The Evolution of Permission as Feature for Android Malware Detection
    Gaviria de la Puerta, Jose
    Sanz, Borja
    Santos Grueiro, Igor
    Garcia Bringas, Pablo
    INTERNATIONAL JOINT CONFERENCE: CISIS'15 AND ICEUTE'15, 2015, 369 : 389 - 400
  • [46] Malware Detection with Confidence Guarantees on Android Devices
    Georgiou, Nestoras
    Konstantinidis, Andreas
    Papadopoulos, Harris
    ARTIFICIAL INTELLIGENCE APPLICATIONS AND INNOVATIONS, AIAI 2016, 2016, 475 : 407 - 418
  • [47] Android malware detection techniques: A literature review
    Dhalaria M.
    Gandotra E.
    Recent Patents on Engineering, 2021, 15 (02) : 225 - 245
  • [48] Explaining AI for Malware Detection: Analysis of Mechanisms of MalConv
    Bose, Shamik
    Barao, Timothy
    Liu, Xiuwen
    2020 INTERNATIONAL JOINT CONFERENCE ON NEURAL NETWORKS (IJCNN), 2020,
  • [49] Using Dalvik Opcodes for Malware Detection on Android
    Gaviria de la Puerta, Jose
    Sanz, Borja
    Santos, Igor
    Garcia Bringas, Pablo
    HYBRID ARTIFICIAL INTELLIGENT SYSTEMS (HAIS 2015), 2015, 9121 : 416 - 426
  • [50] Network Traffic Analysis for Android Malware Detection
    Gaviria de la Puerta, Jose
    Pastor-Lopez, Iker
    Sanz, Borja
    Bringas, Pablo G.
    HYBRID ARTIFICIAL INTELLIGENT SYSTEMS, HAIS 2019, 2019, 11734 : 468 - 479