Learning Android Malware

被引:4
作者
Khanh-Huu-The Dam [1 ,2 ]
Touili, Tayssir [3 ,4 ]
机构
[1] Univ Paris Diderot, Paris, France
[2] LIPN, Villetaneuse, France
[3] CNRS, LIPN, Paris, France
[4] Univ Paris 13, Paris, France
来源
PROCEEDINGS OF THE 12TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY (ARES 2017) | 2017年
关键词
Android malware; static analysis; API call graphs; learning graphs;
D O I
10.1145/3098954.3105826
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The number of Android malware is increasing every day. Thus Android malware detection is nowadays a big challenge. One of the most tedious tasks in malware detection is the extraction of malicious behaviors. This task is usually done manually and requires a huge effort of engineering. To avoid this step, we propose in this paper to use machine learning techniques for malware detection. Unlike the existing learning based approaches, we propose to use API call graphs to represent the behaviors of Android applications. Then, given a set of malicious applications and a set of benign applications, we apply well-known learning techniques based on Random Walk Graph Kernel (combined with Support Vector Machines). We can achieve a high detection rate with only few false alarms (98.76% for detection rate with 0.24% of false alarms).
引用
收藏
页数:9
相关论文
共 29 条
[1]  
Aafer Y, 2013, L N INST COMP SCI SO, V127, P86
[2]  
[Anonymous], TOOL REV ENG ANDR AP
[3]  
[Anonymous], 2016, SYST PERM
[4]  
[Anonymous], 2016, Internet security threat report
[5]  
[Anonymous], 2011, Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices
[6]  
[Anonymous], 1999, Tech. Rep.
[7]  
Barla A., 2003, ICIP 2003
[8]   A tutorial on Support Vector Machines for pattern recognition [J].
Burges, CJC .
DATA MINING AND KNOWLEDGE DISCOVERY, 1998, 2 (02) :121-167
[9]  
Canfora Gerardo, 2015, Detecting Android malware using sequences of system calls, P13, DOI [10.1145/2804345.2804349, DOI 10.1145/2804345.2804349]
[10]   LIBSVM: A Library for Support Vector Machines [J].
Chang, Chih-Chung ;
Lin, Chih-Jen .
ACM TRANSACTIONS ON INTELLIGENT SYSTEMS AND TECHNOLOGY, 2011, 2 (03)