Towards a Network-Based Framework for Android Malware Detection and Characterization

Mobile malware is so pernicious and on the rise, accordingly having a fast and reliable detection system is necessary for the users. In this research, a new detection and characterization system for detecting meaningful deviations in the network behavior of a smart-phone application is proposed. The...

Celý popis

Uložené v:
Podrobná bibliografia
Vydané v:2017 15th Annual Conference on Privacy, Security and Trust (PST) s. 233 - 23309
Hlavní autori: Lashkari, Arash Habibi, A.Kadir, Andi Fitriah, Gonzalez, Hugo, Mbah, Kenneth Fon, A. Ghorbani, Ali
Médium: Konferenčný príspevok..
Jazyk:English
Vydavateľské údaje: IEEE 01.08.2017
Predmet:
Adware detection
Android Malware
Androids
Feature extraction
Humanoid robots
Machine Learning
Malware
Malware Detection
Malware Family
Monitoring
Servers
Smart phones
On-line prístup:Získať plný text
Tagy: Pridať tag
Žiadne tagy, Buďte prvý, kto otaguje tento záznam!
Popis
Shrnutí:Mobile malware is so pernicious and on the rise, accordingly having a fast and reliable detection system is necessary for the users. In this research, a new detection and characterization system for detecting meaningful deviations in the network behavior of a smart-phone application is proposed. The main goal of the proposed system is to protect mobile device users and cellular infrastructure companies from malicious applications with just 9 traffic feature measurements. The proposed system is not only able to detect the malicious or masquerading apps, but can also identify them as general malware or specific malware (i.e. adware) on a mobile device. The proposed method showed the average accuracy (91.41%), precision (91.24%), and false positive (0.085) for five classifiers namely; Random Forest (RF), K-Nearest Neighbor (KNN), Decision Tree (DT), Random Tree (RT) and Regression (R). We also offer a labeled dataset of mobile malware traffic with 1900 applications includes benign and 12 different families of both adware and general malware.
DOI:10.1109/PST.2017.00035