A Review of Android Malware Detection Approaches Based on Machine Learning

被引:163
作者
Liu, Kaijun [1 ,2 ]
Xu, Shengwei [3 ]
Xu, Guoai [1 ,2 ]
Zhang, Miao [1 ,2 ]
Sun, Dawei [4 ]
Liu, Haifeng [5 ]
机构
[1] Beijing Univ Posts & Telecommun, Sch Cyberspace Secur, Beijing 100876, Peoples R China
[2] Beijing Univ Posts & Telecommun, Natl Engn Lab Mobile Network Secur, Beijing 100876, Peoples R China
[3] Beijing Elect Sci & Technol Inst, Informat Secur Res Inst, Beijing 100070, Peoples R China
[4] Beijing Softsec Technol Co Ltd, Res Ctr Intelligent Software Secur, Beijing 100876, Peoples R China
[5] Beijing Informat Secur Test & Evaluat Ctr, Beijing 100101, Peoples R China
基金
中国国家自然科学基金;
关键词
Android security; malware detection; machine learning; feature extraction; classifier evaluation; STATIC ANALYSIS; PATTERN-RECOGNITION; FEATURE-SELECTION; MODEL; CLASSIFICATION; ACCURACY; FEATURES; USAGE; APPS; RISK;
D O I
10.1109/ACCESS.2020.3006143
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Android applications are developing rapidly across the mobile ecosystem, but Android malware is also emerging in an endless stream. Many researchers have studied the problem of Android malware detection and have put forward theories and methods from different perspectives. Existing research suggests that machine learning is an effective and promising way to detect Android malware. Notwithstanding, there exist reviews that have surveyed different issues related to Android malware detection based on machine learning. We believe our work complements the previous reviews by surveying a wider range of aspects of the topic. This paper presents a comprehensive survey of Android malware detection approaches based on machine learning. We briefly introduce some background on Android applications, including the Android system architecture, security mechanisms, and classification of Android malware. Then, taking machine learning as the focus, we analyze and summarize the research status from key perspectives such as sample acquisition, data preprocessing, feature selection, machine learning models, algorithms, and the evaluation of detection effectiveness. Finally, we assess the future prospects for research into Android malware detection based on machine learning. This review will help academics gain a full picture of Android malware detection based on machine learning. It could then serve as a basis for subsequent researchers to start new work and help to guide research in the field more generally.
引用
收藏
页码:124579 / 124607
页数:29
相关论文
共 291 条
[1]  
Aafer Y, 2013, L N INST COMP SCI SO, V127, P86
[2]   Intelligent Approach for Android Malware Detection [J].
Abdulla, Shubair ;
Altaher, Altyeb .
KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS, 2015, 9 (08) :2964-2983
[3]  
Ade R. R., 2013, Int. J. Data Mining Knowl. Manage. Process, V3, P119, DOI DOI 10.5121/IJDKP.2013.3408
[4]   Identifying Android malware using dynamically obtained features [J].
Afonso, Vitor Monte ;
de Amorim, Matheus Favero ;
Abed Gregio, Andre Ricardo ;
Junquera, Glauco Barroso ;
de Geus, Paulo Licio .
JOURNAL OF COMPUTER VIROLOGY AND HACKING TECHNIQUES, 2015, 11 (01) :9-17
[5]  
Ahvanooey MT, 2017, INT J ADV COMPUT SC, V8, P30, DOI 10.14569/IJACSA.2017.081005
[6]  
Allix K, 2016, 13TH WORKING CONFERENCE ON MINING SOFTWARE REPOSITORIES (MSR 2016), P468, DOI [10.1109/MSR.2016.056, 10.1145/2901739.2903508]
[7]   Empirical assessment of machine learning-based malware detectors for Android Measuring the gap between in-the-lab and in-the-wild validation scenarios [J].
Allix, Kevin ;
Bissyande, Tegawende F. ;
Jerome, Quentin ;
Klein, Jacques ;
State, Radu ;
Le Traon, Yves .
EMPIRICAL SOFTWARE ENGINEERING, 2016, 21 (01) :183-211
[8]   A Novel Approach to Detect Android Malware [J].
Almin, Shaikh Bushra ;
Chatterjee, Madhumita .
INTERNATIONAL CONFERENCE ON ADVANCED COMPUTING TECHNOLOGIES AND APPLICATIONS (ICACTA), 2015, 45 :407-417
[9]  
Almuallim H., 1991, AAAI-91. Proceedings Ninth National Conference on Artificial Intelligence, P547
[10]  
Alpaydin E., 2020, INTRO MACHINE LEARNI