"Less Give More": Evaluate and zoning Android applications. (February 2019)

• Record Type: Journal Article
• Authors: Razak, Mohd Faizal Ab; Anuar, Nor Badrul; Salleh, Rosli; Firdaus, Ahmad; Faiz, Muhammad; Alamri, Hammoudeh S.
• Is Part Of: Measurement. Volume 133(2019)
• Page Start: 396
• Page End: 411
• Publication Date: 2019-02
• Subjects: Risk assessment -- Analytical hierarchy process (AHP) -- Mobile device -- Android -- EZADroid; Weights and measures -- Periodicals; Measurement -- Periodicals; Measurement; Weights and measures; Periodicals; 530.8
• DOI: 10.1016/j.measurement.2018.10.034
• Languages: English
• ISSNs: 0263-2241

Abstract

Highlights: Presents a multi-criteria decision making for evaluation. Presents a risk analysis of Android permissions. We discuss an approach to evaluate the zones of Android applications. Provides extensive experiments and validate with statistical analysis. Abstract: The Android security mechanism is the first approach to protect data, system resource as well as reduce the impact of malware. Past malware studies tend to investigate the novel approaches of preventing, detecting and responding to malware threats but little attention has been given to the area of risk assessment. This paper aims to fill that gap by presenting a risk assessment approach that evaluate the risk zone for an application. The permission-based approach is presented for evaluating and zoning the Android applications (EZADroid), based on risk assessment. The EZADroid applies the Analytic Hierarchy Process (AHP) as a decision factor to calculate the risk value. A total of 5000 benign and 5000 malware applications were drawn from the AndroZoo and Drebin datasets for evaluation. Results showed that the EZADroid had achieved 89.82% accuracy rate in classifying the application into a different level of risk zones (i.e. very low, low, medium, and high).