Deep learning for image-based mobile malware detection

被引:69
作者
Mercaldo, Francesco [1 ,2 ]
Santone, Antonella [2 ]
机构
[1] CNR, Ist Informat & Telemat, Pisa, Italy
[2] Univ Molise, Dept Biosci & Terr, Pesche, IS, Italy
关键词
Malware; Android; Apple; Security; Machine learning; Deep learning; Artificial intelligence; Image; Classification; MODEL CHECKING;
D O I
10.1007/s11416-019-00346-7
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Current anti-malware technologies in last years demonstrated their evident weaknesses due to the signature-based approach adoption. Many alternative solutions were provided by the current state of art literature, but in general they suffer of a high false positive ratio and are usually ineffective when obfuscation techniques are applied. In this paper we propose a method aimed to discriminate between malicious and legitimate samples in mobile environment and to identify the belonging malware family and the variant inside the family. We obtain gray-scale images directly from executable samples and we gather a set of features from each image to build several classifiers. We experiment the proposed solution on a data-set of 50,000 Android (24,553 malicious among 71 families and 25,447 legitimate) and 230 Apple (115 samples belonging to 10 families) real-world samples, obtaining promising results.
引用
收藏
页码:157 / 171
页数:15
相关论文
共 66 条
  • [1] [Anonymous], 2005, P 22 INT C MACHINE L, DOI DOI 10.1145/1102351.1102422
  • [2] [Anonymous], 2011, DIGITAL TRENDS
  • [3] [Anonymous], 2019, ARXIV190311551
  • [4] [Anonymous], 2018, DROID JACK
  • [5] [Anonymous], [No title captured]
  • [6] [Anonymous], P 1 ACM WORKSH SEC P
  • [7] [Anonymous], 2015, Google Play
  • [8] Arzt S, 2014, ACM SIGPLAN NOTICES, V49, P259, DOI [10.1145/2666356.2594299, 10.1145/2594291.2594299]
  • [9] Reduced models for efficient CCS verification
    Barbuti, R
    Francesco, N
    Santone, A
    Vaglini, G
    [J]. FORMAL METHODS IN SYSTEM DESIGN, 2005, 26 (03) : 319 - 350
  • [10] Brunese L., 2019, P 2019 INT JOINT C N, P1