Hybrid Android Malware Detection and Classification Using Deep Neural Networks

被引:0
作者
Rashid, Muhammad Umar [1 ]
Qureshi, Shahnawaz [2 ]
Abid, Abdullah [1 ]
Alqahtany, Saad Said [3 ]
Alqazzaz, Ali [4 ]
Hassan, Mahmood ul [5 ]
Reshan, Mana Saleh Al [6 ,7 ]
Shaikh, Asadullah [6 ,7 ]
机构
[1] Natl Univ Comp & Emerging Sci, H 11, Islamabad 44000, Pakistan
[2] Pak Austria Fachhochschule Inst Appl Sci & Technol, Sino Pak Ctr Artificial Intelligence, Sch Comp, Haripur 22650, Pakistan
[3] Islamic Univ Madinah, Fac Comp & Informat Syst, Madinah 42351, Saudi Arabia
[4] Univ Bisha, Coll Comp & Informat Technol, Bisha 61922, Saudi Arabia
[5] Najran Univ, Dept Comp Skills, Deanship Preparatory Year, Najran 61441, Saudi Arabia
[6] Najran Univ, Coll Comp Sci & Informat Syst, Dept Informat Syst, Najran 61441, Saudi Arabia
[7] Najran Univ, Coll Comp Sci & Informat Syst, Emerging Technol Res Lab ETRL, Najran 61441, Saudi Arabia
关键词
Malware; Android malware; Artificial neural networks; Machine learning; FRAMEWORK;
D O I
10.1007/s44196-025-00783-x
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
This paper presents a deep learning-based framework for Android malware detection that addresses critical limitations in existing methods, particularly in handling obfuscation and scalability under rapid mobile app development cycles. Unlike prior approaches, the proposed system integrates a multi-dimensional analysis of Android permissions, intents, and API calls, enabling robust feature extraction even under reverse engineering constraints. Experimental results demonstrate state-of-the-art performance, achieving 98.2% accuracy (a 7.5% improvement over DeepAMD) on a cross-dataset evaluation spanning 15 malware families and 45,000 apps. The framework's novel architecture enhances explainability by mapping detection outcomes to specific behavioral patterns while rigorous benchmarking across five public datasets (including Drebin, AndroZoo, and VirusShare) mitigates dataset bias and validates generalization. By outperforming existing techniques in accuracy, adaptability, and interpretability, this work advances the practicality of deep learning for real-world Android malware defense in evolving threat landscapes.
引用
收藏
页数:26
相关论文
共 43 条
  • [1] A Subash, 2023, 2023 5th International Conference on Inventive Research in Computing Applications (ICIRCA), P1241, DOI 10.1109/ICIRCA57980.2023.10220934
  • [2] Abuthawabeh MKA, 2019, INT ARAB CONF INF TE, P42, DOI [10.1109/ACIT47987.2019.8991114, 10.1109/acit47987.2019.8991114]
  • [3] Malware Dynamic Analysis Evasion Techniques: A Survey
    Afianian, Amir
    Niksefat, Salman
    Sadeghiyan, Babak
    Baptiste, David
    [J]. ACM COMPUTING SURVEYS, 2020, 52 (06)
  • [4] Alsmadi Tibra, 2021, 2021 International Conference on Information Technology (ICIT), P371, DOI 10.1109/ICIT52682.2021.9491765
  • [5] [Anonymous], 2017, Android malware dataset (CIC-AndMal2017)
  • [6] [Anonymous], 2020, Investigation of the android malware (cicinvesandmal2019)
  • [7] Drebin: Effective and Explainable Detection of Android Malware in Your Pocket
    Arp, Daniel
    Spreitzenbarth, Michael
    Huebner, Malte
    Gascon, Hugo
    Rieck, Konrad
    [J]. 21ST ANNUAL NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM (NDSS 2014), 2014,
  • [8] RealMalSol: real-time optimized model for Android malware detection using efficient neural networks and model quantization
    Chaudhary, Maham
    Masood, Ammar
    [J]. NEURAL COMPUTING & APPLICATIONS, 2023, 35 (15) : 11373 - 11388
  • [9] Chen Menglong, 2022, 2022 IEEE International Conference on Artificial Intelligence and Computer Applications (ICAICA), P187, DOI 10.1109/ICAICA54878.2022.9844642
  • [10] Android Malware Category and Family Classification Using Static Analysis
    Cong-Danh Nguyen
    Nghi Hoang Khoa
    Khoa Nguyen-Dang Doan
    Nguyen Tan Cam
    [J]. 2023 INTERNATIONAL CONFERENCE ON INFORMATION NETWORKING, ICOIN, 2023, : 162 - 167