DroidMD: an efficient and scalable Android malware detection approach at source code level. (9th July 2021)

• Record Type: Journal Article
• Authors: Akram, Junaid; Mumtaz, Majid; Jabeen, Gul; Luo, Ping
• Is Part Of: International journal of information and computer security. Volume 15:Number 2/3(2021)
• Page Start: 299
• Page End: 321
• Publication Date: 2021-07-09
• Subjects: mobile security -- Android software -- malware detection -- code clones -- Android apps re-usability -- Android evolution -- DroidMD; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1744-1765

Abstract

Security researchers and anti-virus industries have speckled stress on an Android malware, which can actually damage your phones and threatens the Android markets. In this paper, we propose and develop DroidMD, a scalable self-improvement based tool, based on auto optimisation of signature set, which detect malicious apps in the market at source code level. A prototype has been developed tested and implemented to detect malware in applications. We implement and evaluate our approach on almost 30, 000 applications including 27, 000 benign and 3, 670 malware applications. DroidMD detects malware in different applications at partial level and full level. It analyses only the applications code, which increase its reliability. Our evaluation of DroidMD demonstrates that our approach is very efficient in detecting malware at large scale with high accuracy of 95.5%.