MAMA: Manifest analysis for malware detection in android

Cybernetics and Systems

Volumn 44, Issue 6-7, 2013, Pages 469-488

  Sanz, Borja ^a   Santos, Igor ^a   Laorden, Carlos ^a   Ugarte Pedrero, Xabier ^a   Nieves, Javier ^a   Bringas, Pablo G ^a   Marañón, Gonzalo Álvarez ^b  

^a UNIVERSITY OF DEUSTO   (Spain)

^b Consejo Superior de Investigaciones Científicas   (Spain)

Author keywords

Android; Machine learning; Malware

Indexed keywords

ANDROID; ANDROID MARKETS; LEARNING CLASSIFIERS; MALICIOUS CODES; MALWARE DETECTION; MALWARE WRITERS; MALWARES;

COMPUTER CRIME; LEARNING SYSTEMS; MOBILE DEVICES; PERSONAL COMPUTERS;

ROBOTS;

EID: 84887945501     PISSN: 01969722     EISSN: 10876553     Source Type: Journal    
DOI: 10.1080/01969722.2013.803889     Document Type: Article

References (36)

1. Amari, S. and S. Wu. "Improving Support Vector Machine Classifiers by Modifying Kernel Functions." Neural Networks 12, no. 6 (1999): 783-89.
2. Android Developers. 2013a. Manifest.permission j Android Developers. Available at: http://developer.android.com/reference/android/Manifest. permission.html (accessed 23 July 2013).
3. Android Developers. 2013b. j Android Developers. Available at: http://developer.android.com/guide/topics/manifest/uses-feature- element.html (accessed 23 July 2013).
4. Android Developers. 2013c. j Android Developers. Available at: http://developer.android.com/guide/topics/manifest/uses- permission-element. html (accessed 23 July 2013).
5. Android-market-api. 2013. Android Market for all developers! Google Project Hosting. Available at: https://code.google.com/p/android-market-api/ (accessed 23 July 2013).
6. Bishop, C. M. Pattern Recognition and Machine Learning. New York: Springer, 2006.
7. Blasing, T., L. Batyuk, A. D. Schmidt, S. A. Camtepe, and S. Albayrak. "An Android Application Sandbox System for Suspicious Software Detection." 2010 5th IEEE International Conference on Malicious and Unwanted Software (MALWARE), Nancy, France, October 19-20, 2010.
8. Breiman, L. "Random Forests." Machine Learning 45, no. 1 (2001): 5-32.
9. Burguera, I., U. Zurutuza, and S. Nadjm-Tehrani. "Crowdroid: Behavior-Based Malware Detection System for Android." Paper presented at the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, Chicago, IL, October 17-21, 2011.
10. Castillo, E., J. M. Gutiérrez, and A. S. Hadi. Expert Systems and Probabilistic Network Models. Berlin, Germany: Springer Verlag, 1997.
11. Devesa, J., I. Santos, X. Cantero, Y. K. Penya, and P. G. Bringas. "Automatic Behaviour-Based Analysis and Classification System for Malware Detection." Paper presented at the 12th International Conference on Enterprise Information Systems (ICEIS), Madeira, Portugal, June 8-12, 2010.
12. Devijver, P. A. and J. Kittler. Pattern Recognition: A Statistical Approach. Upper Saddle River, NJ: Prentice/Hall International, 1982.
13. Federal Communications Commission (FCC). 2013. "Letter to Apple regarding Google Voice and related iPhone applications." Available at: http://www.fcc.gov/document/letter-apple-regarding-google-voice-and-related- iphone-applications (accessed 23 July 2013).
14. Fix, E. and J. L. Hodges, Jr. Discriminatory Analysis-Nonparametric Discrimination: Small Sample Performance. Alabama: Air University, USAF School of Aviation Medicine, Maxwell Field, 1952.
15. Garner, S. R. "Weka: The Waikato Environment for Knowledge Analysis." Paper presented at the 1995 New Zealand Computer Science Research Students Conference, 1995.
16. Kohavi, R. "A Study of Cross-Validation and Bootstrap for Accuracy Estimation and Model Selection." International Joint Conference on Artificial Intelligence 14, (1995): 1137-45.
17. Lookout Mobile Security. 2013. Available at: https://www.lookout.com/ resources/reports/mobile-threat-report (accessed 23 July 2013).
18. Oberheide, J. and J. Miller. Dissecting the Android Bouncer. Summercon 2012, Brooklyn, NY, June 8-10, 2012.
19. Pearl, J. "Reverend Bayes on Inference Engines: A Distributed Hierarchical Approach." Paper presented at the Second National Conference on Artificial Intelligence (AAAI-82), Pittsburgh, PA, August 18-20, 1982.
20. Peng, H., C. Gates, B. Sarma, N. Li, Y. Qi, R. Potharaju, C. Nita-Rotaru, and I. Molloy. "Using Probabilistic Generative Models for Ranking Risks of Android Apps." Paper presented at the 19th ACM Conference on Computer and Communications Security, Raleigh, NC, October 16-18, 2012.
21. Quinlan, J. R. "Induction of Decision Trees." Machine Learning 1, no. 1 (1986): 81-106.
22. Quinlan, J. R. C4.5: Programs for Machine Learning. San Francisco, CA: Morgan Kaufmann, 1993.
23. Rieck, K., T. Holz, C. Willems, P. Düssel, and P. Laskov. "Learning and Classification of Malware Behavior." Paper presented at 5th International Conference, DIMVA 2008, Paris, France, July 10-11, 2008.
24. Santos, I., F. Brezo, X. Ugarte-Pedrero, and P. García Bringas. "Opcode Sequences as Representation of Executables for Data-Mining-Based Unknown Malware Detection." Information Sciences 231 (2011): 64-82.
25. Santos, I., C. Laorden, and P. G. Bringas. "Collective Classification for Unknown Malware Detection." Paper presented at the 6th International Conference on Security and Cryptography (SECRYPT), Seville, Spain, July 18-21, 2011.
26. Santos, I., J. Nieves, and P. G. Bringas. "Semi-supervised Learning for Unknown Malware Detection." Paper presented at the 4th International Symposium on Distributed Computing and Artificial Intelligence (DCAI) and 9th International Conference on Practical Applications of Agents and Multi-Agent Systems (PAAMS), University of Salamanca, Spain, April 6-8, 2011.
27. Schmidt, A. D., A. Camtepe, and S. Albayrak. "Static Smartphone Malware Detection." Paper presented at the 5th Security Research Conference (Future Security 2010), Berlin, Germany, September 7-9, 2010.
28. Schultz, M. G., E. Eskin, F. Zadok, and S. J. Stolfo. "Data Mining Methods for Detection of New Malicious Executables." Paper presented at the 2001 IEEE Symposium on Security and Privacy, Oakland, CA, May 14-16, 2001.
29. Shabtai, A. and Y. Elovici. "Applying Behavioral Detection on Android-Based Devices." Mobile Wireless Middleware, Operating Systems, and Applications 48 (2010): 235-49.
30. Shabtai, A., Y. Fledel, and Y. Elovici. "Automated Static Code Analysis for Classifying Android Applications Using Machine Learning." Paper presented at the 2010 International Conference on Computational Intelligence and Security, Nanning, Guangxi Zhuang Autonomous Region, China, December 11-14, 2010.
31. Singh, Y., A. Kaur, and R. Malhotra. "Comparative Analysis of Regression and Machine Learning Methods for Predicting Fault Proneness Models." International Journal of Computer Applications in Technology 35, no. 2 (2009): 183-93.
32. Tian, R., L. Batten, R. Islam, and S. Versteeg. "An Automated Classification System Based on the Strings of Trojan and Virus Families." 2009 4th International Conference on Malicious and Unwanted Software (MALWARE), Montréal, Quebec, Canada, October 13-14, 2009.
33. Vapnik, V. N. The Nature of Statistical Learning Theory. New York: Springer, 2000.
34. VirusTotal. 2013. VirusTotal - Free Online Virus, Malware and URL Scanner. Available at: http://www.virustotal.com (accessed 23 July 2013).
35. Weka 3. 2013. Weka 3 - Data Mining with Open Source Machine Learning Software in Java. Available at: http://www.cs.waikato.ac.nz/ml/weka/ (accessed 23 July 2013).
36. Zhou, Y. and X. Jiang. "Dissecting Android Malware: Characterization and Evolution." Paper presented at the 33rd IEEE Symposium on Security and Privacy (S&P 2012), San Francisco, CA, May 20-23, 2012.