Android Malware Detection Based on a Hybrid Deep Learning Model

被引:55
作者
Lu, Tianliang [1 ]
Du, Yanhui [1 ]
Ouyang, Li [1 ]
Chen, Qiuyu [1 ]
Wang, Xirui [1 ]
机构
[1] Peoples Publ Secur Univ China, Coll Informat & Network Secur, Beijing, Peoples R China
关键词
Signal detection - Android malware - Deep learning - Learning systems - Neural networks - Learning algorithms;
D O I
10.1155/2020/8863617
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
In recent years, the number of malware on the Android platform has been increasing, and with the widespread use of code obfuscation technology, the accuracy of antivirus software and traditional detection algorithms is low. Current state-of-the-art research shows that researchers started applying deep learning methods for malware detection. We proposed an Android malware detection algorithm based on a hybrid deep learning model which combines deep belief network (DBN) and gate recurrent unit (GRU). First of all, analyze the Android malware; in addition to extracting static features, dynamic behavioral features with strong antiobfuscation ability are also extracted. Then, build a hybrid deep learning model for Android malware detection. Because the static features are relatively independent, the DBN is used to process the static features. Because the dynamic features have temporal correlation, the GRU is used to process the dynamic feature sequence. Finally, the training results of DBN and GRU are input into the BP neural network, and the final classification results are output. Experimental results show that, compared with the traditional machine learning algorithms, the Android malware detection model based on hybrid deep learning algorithms has a higher detection accuracy, and it also has a better detection effect on obfuscated malware.
引用
收藏
页数:11
相关论文
共 36 条
[1]   Transfer Learning for Malware Multi-Classification [J].
Al Kadri, Mohamad ;
Nassar, Mohamed ;
Safa, Haidar .
IDEAS '19: PROCEEDINGS OF THE 23RD INTERNATIONAL DATABASE APPLICATIONS & ENGINEERING SYMPOSIUM (IDEAS 2019), 2019, :151-157
[2]  
Ali-Gombe A, 2019, PROCEEDINGS OF THE 22ND INTERNATIONAL SYMPOSIUM ON RESEARCH IN ATTACKS, INTRUSIONS AND DEFENSES, P547
[3]  
[Anonymous], 2020, VirusShare
[4]   PermPair: Android Malware Detection Using Permission Pairs [J].
Arora, Anshul ;
Peddoju, Sateesh K. ;
Conti, Mauro .
IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2020, 15 :1968-1982
[5]   Hybrid Android Malware Detection by Combining Supervised and Unsupervised Learning [J].
Arora, Anshul ;
Peddoju, Sateesh K. ;
Chouhan, Vikas ;
Chaudhary, Ajay .
MOBICOM'18: PROCEEDINGS OF THE 24TH ANNUAL INTERNATIONAL CONFERENCE ON MOBILE COMPUTING AND NETWORKING, 2018, :798-800
[6]   NTPDroid: A Hybrid Android Malware Detector using Network Traffic and System Permissions [J].
Arora, Anshul ;
Peddoju, Sateesh K. .
2018 17TH IEEE INTERNATIONAL CONFERENCE ON TRUST, SECURITY AND PRIVACY IN COMPUTING AND COMMUNICATIONS (IEEE TRUSTCOM) / 12TH IEEE INTERNATIONAL CONFERENCE ON BIG DATA SCIENCE AND ENGINEERING (IEEE BIGDATASE), 2018, :808-813
[7]  
Awad Y., 2018, P 2018 IEEE INT C CO, P1, DOI DOI 10.1109/ICC.2018.8422083
[8]  
Bakour K, 2018, 2018 3RD INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND ENGINEERING (UBMK), P586, DOI 10.1109/UBMK.2018.8566573
[9]   DroidCat: Effective Android Malware Detection and Categorization via App-Level Profiling [J].
Cai, Haipeng ;
Meng, Na ;
Ryder, Barbara ;
Yao, Daphne .
IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2019, 14 (06) :1455-1470
[10]  
Chan PPK, 2014, INT CONF MACH LEARN, P82, DOI 10.1109/ICMLC.2014.7009096