Machine learning-assisted signature and heuristic-based detection of malwares in Android devices. (July 2018)

• Record Type: Journal Article
• Authors: Rehman, Zahoor-Ur; Khan, Sidra Nasim; Muhammad, Khan; Lee, Jong Weon; Lv, Zhihan; Baik, Sung Wook; Shah, Peer Azmat; Awan, Khalid; Mehmood, Irfan
• Is Part Of: Computers & electrical engineering. Volume 69(2018)
• Page Start: 828
• Page End: 841
• Publication Date: 2018-07
• Subjects: Malware detection -- Hybrid approach -- Android applications -- Security -- Heuristic analysis; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2017.11.028
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: Malware detection is an important factor in the security of the smart devices. However, currently utilized signature-based methods cannot provide accurate detection of zero-day attacks and polymorphic viruses. In this context, an efficient hybrid framework is presented for detection of malware in Android Apps. The proposed framework considers both signature and heuristic-based analysis for Android Apps. We have reverse engineered the Android Apps to extract manifest files, and binaries, and employed state-of-the-art machine learning algorithms to efficiently detect malwares. For this purpose, a rigorous set of experiments are performed using various classifiers such as SVM, Decision Tree, W-J48 and KNN. It has been observed that SVM in case of binaries and KNN in case of manifest.xml files are the most suitable options in robustly detecting the malware in Android devices. The proposed framework is tested on benchmark datasets and results show improved accuracy in malware detection.