A hybrid intelligent approach to detect Android Botnet using Smart Self-Adaptive Learning-based PSO-SVM

被引:30
作者
Moodi, Mahdi [1 ]
Ghazvini, Mahdieh [1 ]
Moodi, Hossein [2 ]
机构
[1] Shahid Bahonar Univ Kerman, Comp Engn Dept, Kerman, Iran
[2] Birjand Univ Technol, Comp Engn Dept, Birjand, Iran
关键词
PSO; Mobile botnet; Android Botnet; SVM; Smart Adaptive-PSO-SVM; Smart Self-Adaptive Learning-based; PSO-SVM; CLASSIFICATION; OPTIMIZATION; ALGORITHM;
D O I
10.1016/j.knosys.2021.106988
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
In recent years, extensive research has been conducted in the field of detecting Android botnet, but most of the approaches introduced can provide a good answer to a limited number of these datasets. Now the question is how to introduce an approach that offers a high detection rate on various Android botnets. To answer this question, we propose a Smart Self-Adaptive Learning Based Particle Swarm Optimization Support Vector Machine (SSLPSO-SVM) approach to identify Android botnet with high accuracy. The SSLPSO algorithm simultaneously uses five different strategies for scanning search space, which are based on the PSO algorithm. Instead of choosing strategies using the Roulette Wheel Selection method, SSLPSO uses a novel method called Smart Selection Strategies (SSS). This method determines the frequency of implementation and the priority of each strategy based on the number of changes created in the Personal best(Pbest) and Global best (Gbest) particles, at each stage of the execution. In other words, the strategy that has been able to make more changes in Pbest and Gbest in the previous step of the implementation; in the next step, not only will it be more priority, but it can update the particle location more often. As a result, By choosing the best strategies, SSLPSO can obtain the best optimal responses for SVM parameters (i.e., sigma parameter (sigma), penalty parameter (C) and the features available in the dataset), therefore that the SVM technique can accurately detect Android botnet. The results obtained from the SSLPSO-SVM approach showed the superiority of this technique not only in four different measures of Sensitivity, Specificity, Precision, and Accuracy but also at the time of implementation of the proposed model in comparison with the other three methods. Finally, the top 20 features of Android botnet are introduced using the best results from the 28 Android Botnet dataset outputs. (C) 2021 Elsevier B.V. All rights reserved.
引用
收藏
页数:17
相关论文
共 46 条
[1]  
ABDULLAH Z, 2017, ADV SCI LETT, V23, P4717, DOI DOI 10.1166/asl.2017.8994
[2]   Deep learning-based classification model for botnet attack detection [J].
Ahmed, Abdulghani Ali ;
Jabbar, Waheb A. ;
Sadiq, Ali Safaa ;
Patel, Hiran .
JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING, 2020, 13 (7) :3457-3466
[3]  
Alzahrani AJ., 2016, J CYBER SECUR MOBIL, V5, P47
[4]   New facets of mobile botnet: architecture and evaluation [J].
Anagnostopoulos, Marios ;
Kambourakis, Georgios ;
Gritzalis, Stefanos .
INTERNATIONAL JOURNAL OF INFORMATION SECURITY, 2016, 15 (05) :455-473
[5]  
Anwar S, 2018, PERTANIKA J SCI TECH, V26, P37
[6]   Symbian worm Yxes: towards mobile botnets? [J].
Apvrille, Axelle .
JOURNAL IN COMPUTER VIROLOGY AND HACKING TECHNIQUES, 2012, 8 (04) :117-131
[7]  
Arshad S, 2016, INT J ADV COMPUT SC, V7, P463
[8]   Detecting botnet by using particle swarm optimization algorithm based on voting system [J].
Asadi, Mehdi ;
Jamali, Mohammad Ali Jabraeil ;
Parsa, Saeed ;
Majidnezhad, Vahid .
FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE, 2020, 107 :95-111
[9]   Geost Botnet. Operational security failures of a new Android banking threat [J].
Botnet, Geost ;
Garcia, Sebastian ;
Jose Erquiaga, Maria ;
Shirokova, Anna ;
Garcia Garino, Carlos .
2019 4TH IEEE EUROPEAN SYMPOSIUM ON SECURITY AND PRIVACY WORKSHOPS (EUROS&PW), 2019, :406-409
[10]   LIBSVM: A Library for Support Vector Machines [J].
Chang, Chih-Chung ;
Lin, Chih-Jen .
ACM TRANSACTIONS ON INTELLIGENT SYSTEMS AND TECHNOLOGY, 2011, 2 (03)