Deep learning for image-based mobile malware detection

被引:70
作者
Mercaldo, Francesco [1 ,2 ]
Santone, Antonella [2 ]
机构
[1] CNR, Ist Informat & Telemat, Pisa, Italy
[2] Univ Molise, Dept Biosci & Terr, Pesche, IS, Italy
基金
英国科研创新办公室;
关键词
Malware; Android; Apple; Security; Machine learning; Deep learning; Artificial intelligence; Image; Classification; MODEL CHECKING;
D O I
10.1007/s11416-019-00346-7
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Current anti-malware technologies in last years demonstrated their evident weaknesses due to the signature-based approach adoption. Many alternative solutions were provided by the current state of art literature, but in general they suffer of a high false positive ratio and are usually ineffective when obfuscation techniques are applied. In this paper we propose a method aimed to discriminate between malicious and legitimate samples in mobile environment and to identify the belonging malware family and the variant inside the family. We obtain gray-scale images directly from executable samples and we gather a set of features from each image to build several classifiers. We experiment the proposed solution on a data-set of 50,000 Android (24,553 malicious among 71 families and 25,447 legitimate) and 230 Apple (115 samples belonging to 10 families) real-world samples, obtaining promising results.
引用
收藏
页码:157 / 171
页数:15
相关论文
共 66 条
[1]  
[Anonymous], 2011, DIGITAL TRENDS
[2]  
[Anonymous], 2019, ARXIV190311551
[3]  
[Anonymous], 2014, 7 EUR WORKSH SYST SE
[4]  
[Anonymous], 2018, DROID JACK
[5]  
[Anonymous], [No title captured]
[6]  
[Anonymous], P 1 ACM WORKSH SEC P
[7]  
[Anonymous], 2015, Google Play
[8]  
Arzt S, 2014, ACM SIGPLAN NOTICES, V49, P259, DOI [10.1145/2594291.2594299, 10.1145/2666356.2594299]
[9]   Reduced models for efficient CCS verification [J].
Barbuti, R ;
Francesco, N ;
Santone, A ;
Vaglini, G .
FORMAL METHODS IN SYSTEM DESIGN, 2005, 26 (03) :319-350
[10]  
Brunese L., 2019, 2019 INT JOINT C NEU, P1