Journal article Open Access

A Static Android Malware Detection Based on Actual Used Permissions Combination and API Calls

Xiaoqing Wang; Junfeng Wang; Xiaolan Zhu


JSON-LD (schema.org) Export

{
  "inLanguage": {
    "alternateName": "eng", 
    "@type": "Language", 
    "name": "English"
  }, 
  "description": "Android operating system has been recognized by most application developers because of its good open-source and compatibility, which enriches the categories of applications greatly. However, it has become the target of malware attackers due to the lack of strict security supervision mechanisms, which leads to the rapid growth of malware, thus bringing serious safety hazards to users. Therefore, it is critical to detect Android malware effectively. Generally, the permissions declared in the AndroidManifest.xml can reflect the function and behavior of the application to a large extent. Since current Android system has not any restrictions to the number of permissions that an application can request, developers tend to apply more than actually needed permissions in order to ensure the successful running of the application, which results in the abuse of permissions. However, some traditional detection methods only consider the requested permissions and ignore whether it is actually used, which leads to incorrect identification of some malwares. Therefore, a machine learning detection method based on the actually used permissions combination and API calls was put forward in this paper. Meanwhile, several experiments are conducted to evaluate our methodology. The result shows that it can detect unknown malware effectively with higher true positive rate and accuracy while maintaining a low false positive rate. Consequently, the AdaboostM1 (J48) classification algorithm based on information gain feature selection algorithm has the best detection result, which can achieve an accuracy of 99.8%, a true positive rate of 99.6% and a lowest false positive rate of 0.", 
  "license": "https://creativecommons.org/licenses/by/4.0/legalcode", 
  "creator": [
    {
      "@type": "Person", 
      "name": "Xiaoqing Wang"
    }, 
    {
      "@type": "Person", 
      "name": "Junfeng Wang"
    }, 
    {
      "@type": "Person", 
      "name": "Xiaolan Zhu"
    }
  ], 
  "headline": "A Static Android Malware Detection Based on Actual Used Permissions Combination and API Calls", 
  "image": "https://zenodo.org/static/img/logos/zenodo-gradient-round.svg", 
  "datePublished": "2016-08-04", 
  "url": "https://zenodo.org/record/1126780", 
  "version": "10005499", 
  "keywords": [
    "Android", 
    "permissions combination", 
    "API calls", 
    "machine learning."
  ], 
  "@context": "https://schema.org/", 
  "identifier": "https://doi.org/10.5281/zenodo.1126780", 
  "@id": "https://doi.org/10.5281/zenodo.1126780", 
  "@type": "ScholarlyArticle", 
  "name": "A Static Android Malware Detection Based on Actual Used Permissions Combination and API Calls"
}
36
29
views
downloads
All versions This version
Views 3636
Downloads 2929
Data volume 22.6 MB22.6 MB
Unique views 3535
Unique downloads 2727

Share

Cite as