A Review of Android Malware Detection Approaches Based on Machine Learning

被引:163
作者
Liu, Kaijun [1 ,2 ]
Xu, Shengwei [3 ]
Xu, Guoai [1 ,2 ]
Zhang, Miao [1 ,2 ]
Sun, Dawei [4 ]
Liu, Haifeng [5 ]
机构
[1] Beijing Univ Posts & Telecommun, Sch Cyberspace Secur, Beijing 100876, Peoples R China
[2] Beijing Univ Posts & Telecommun, Natl Engn Lab Mobile Network Secur, Beijing 100876, Peoples R China
[3] Beijing Elect Sci & Technol Inst, Informat Secur Res Inst, Beijing 100070, Peoples R China
[4] Beijing Softsec Technol Co Ltd, Res Ctr Intelligent Software Secur, Beijing 100876, Peoples R China
[5] Beijing Informat Secur Test & Evaluat Ctr, Beijing 100101, Peoples R China
基金
中国国家自然科学基金;
关键词
Android security; malware detection; machine learning; feature extraction; classifier evaluation; STATIC ANALYSIS; PATTERN-RECOGNITION; FEATURE-SELECTION; MODEL; CLASSIFICATION; ACCURACY; FEATURES; USAGE; APPS; RISK;
D O I
10.1109/ACCESS.2020.3006143
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Android applications are developing rapidly across the mobile ecosystem, but Android malware is also emerging in an endless stream. Many researchers have studied the problem of Android malware detection and have put forward theories and methods from different perspectives. Existing research suggests that machine learning is an effective and promising way to detect Android malware. Notwithstanding, there exist reviews that have surveyed different issues related to Android malware detection based on machine learning. We believe our work complements the previous reviews by surveying a wider range of aspects of the topic. This paper presents a comprehensive survey of Android malware detection approaches based on machine learning. We briefly introduce some background on Android applications, including the Android system architecture, security mechanisms, and classification of Android malware. Then, taking machine learning as the focus, we analyze and summarize the research status from key perspectives such as sample acquisition, data preprocessing, feature selection, machine learning models, algorithms, and the evaluation of detection effectiveness. Finally, we assess the future prospects for research into Android malware detection based on machine learning. This review will help academics gain a full picture of Android malware detection based on machine learning. It could then serve as a basis for subsequent researchers to start new work and help to guide research in the field more generally.
引用
收藏
页码:124579 / 124607
页数:29
相关论文
共 291 条
[31]  
[Anonymous], 2014, ACM SIGCOMM COMP COM, DOI DOI 10.1145/2740070.2631434
[32]  
[Anonymous], 2011, PROC 1 ACM WORKSHOP, DOI DOI 10.1145/2046614.2046618
[33]  
[Anonymous], 2010, 9 USENIX S OP SYST D
[34]  
[Anonymous], 1988, LEARNING INTERNAL RE
[35]  
[Anonymous], 2017, Int. J. Adv. Res. Comput. Sci. Softw. Eng., DOI DOI 10.23956/IJARCSSE/V7I1/01113
[36]  
[Anonymous], 1997, Machine Learning
[37]   Malware Detection Using Network Traffic Analysis in Android Based Mobile Devices [J].
Arora, Anshul ;
Garg, Shree ;
Peddoju, Sateesh K. .
2014 EIGHTH INTERNATIONAL CONFERENCE ON NEXT GENERATION MOBILE APPS, SERVICES AND TECHNOLOGIES (NGMAST), 2014, :66-71
[38]   Drebin: Effective and Explainable Detection of Android Malware in Your Pocket [J].
Arp, Daniel ;
Spreitzenbarth, Michael ;
Huebner, Malte ;
Gascon, Hugo ;
Rieck, Konrad .
21ST ANNUAL NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM (NDSS 2014), 2014,
[39]   SAMADroid: A Novel 3-Level Hybrid Malware Detection Model for Android Operating System [J].
Arshad, Saba ;
Shah, Munam A. ;
Wahid, Abdul ;
Mehmood, Amjad ;
Song, Houbing ;
Yu, Hongnian .
IEEE ACCESS, 2018, 6 :4321-4339
[40]  
Arshad S, 2016, INT J ADV COMPUT SC, V7, P463