A two-layered permission-based android malware detection scheme

Proceedings - 2nd IEEE International Conference on Mobile Cloud Computing, Services, and Engineering, MobileCloud 2014

Volumn , Issue , 2014, Pages 142-148

  Liu, Xing ^a   Liu, Jiqiang ^a  

^a BEIJING JIAOTONG UNIVERSITY   (China)

Author keywords

Android permission; Machine learning; Malware detection

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTER CRIME; DETECTORS; LEARNING SYSTEMS; MALWARE; MOBILE CLOUD COMPUTING;

ACCESS CONTROL MECHANISM; ANDROID PERMISSION; ANDROID PLATFORMS; DEFENSE MECHANISM; DETECTION ACCURACY; HIGH DETECTION RATE; MALICIOUS ANDROID APPLICATIONS; MALWARE DETECTION;

ANDROID (OPERATING SYSTEM);

EID: 84903824874     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MobileCloud.2014.22     Document Type: Conference Paper

References (26)

1. Nielsen Company. (2013) Smartphone Switch: Three-Fourths of Recent Acquirers Chose Smartphones. [Online]. Available: http://www.nielsen.com/us/en/ newswire/2013/smartphone-switch-threefourths- of-recent-acquirers-chose-smart. html
2. Nielsen Company. (2013) Who's Winning the U.S. Smartphone Market. [Online]. Available: http://www.nielsen.com/us/en/newswire/2013/whos-winning- the-u-ssmartphone- market-.html
3. Y. Zhou, Z.Wang, W. Zhou and X. Jiang, "Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets, " Proc. 19th Annual Network and Distributed System Security Symposium, 2012.
4. Android. (2013) Android System Permissions. [Online]. Available: http://developer.android.com/guide/topics/security/permissions.html
5. A. P. Felt, E. Ha, S. Egelman, A. Haney, E. Chin and D. Wagner, "Android permissions: User attention, comprehension, and behavior, " Proc. Eighth Symposium on Usable Privacy and Security, ACM, 2012, p.3.
6. D. Barrera, H. G. Kayacik, P. C. van Oorschot, A. Somayaji, "A methodology for empirical analysis of permission-based security models and its application to android, " Proc. 17th ACM conference on Computer and communications security, ACM, 2010, pp.73-84.
7. A. P. Felt, K. Greenwood and D. Wagner, "The effectiveness of application permissions, " Proc. 2nd USENIX conference on Web application development, USENIX Association, 2011, pp.7-7.
8. A. p. Felt, E. Chin, S. Hanna, D. Song and D. Wagner, "Android permissions demystified, " Proc. 18th ACM conference on Computer and communications security, ACM, 2011, pp.627-638.
9. M. Frank, B. Dong, A. P. Felt and D. Song, "Mining Permission Request Patterns from Android and Facebook Applications, " 2012 IEEE 12th International Conference on Data Mining (ICDM), IEEE, 2012, pp.870- 875.
10. V. Moonsamy, J. Rong and S. Liu, "Mining permission patterns for contrasting clean and malicious android applications, " Future Generation Computer Systems, 2013.
11. K. W. Y. Au, Y. F. Zhou, Z. Huang and D. Lie, "Pscout: analyzing the android permission specification, " Proc. 2012 ACM conference on Computer and communications security, ACM, 2012, pp.217-228.
12. W. Enck, M. Ongtang and P. McDaniel, "On lightweight mobile phone application certification, " Proc. 16th ACM conference on Computer and communications security, ACM, 2009, pp.235-245.
13. B. P. Sarma, N. Li, C. Gates, R. Potharaju, C. Nita-Rotaru and I. Molloy, "Android permissions: a perspective combining risks and benefits, " Proc. 17th ACM symposium on Access Control Models and Technologies, ACM, 2012, pp.13-22.
14. H. Peng, C. Gates, B. Sarma, N. Li, Y. Qi, R. Potharaju et al, "Using probabilistic generative models for ranking risks of android apps, " Proc. 2012 ACM conference on Computer and communications security, ACM, 2012, pp.241-252.
15. B. Sanz, I. Santos, C. Laorden, X. Ugarte-Pedrero and P. G. Bringas, "On the automatic categorisation of android applications, " 2012 IEEE Consumer Communications and Networking Conference (CCNC), IEEE, 2012, pp.149-153.
16. B. Sanz, I. Santos, C. Laorden, X. Ugarte-Pedrero, P. G. Bringas and G. Alvarez, "PUMA: Permission Usage to Detect Malware in Android, " International Joint Conference CISIS12-ICEUTE 12-SOCO 12 Special Sessions, Springer Berlin Heidelberg, 2013, pp.289-298.
17. A. Shabtai, Y. Fledel and Y. Elovici, "Automated static code analysis for classifying android applications using machine learning, " 2010 IEEE International Conference on Computational Intelligence and Security (CIS), IEEE, 2010, pp.329-333.
18. C. Y. Huang, Y. T. Tsai and C. H. Hsu, "Performance Evaluation on PermissionBased Detection for Malware, " Advances in Intelligent Systems and Applications-Volume 2, Springer Berlin Heidelberg, 2013, pp.111-120.
19. S. Y. Yerima, S. Sezer, G. McWilliams and I. Muttik, "A New Android Malware Detection Approach Using Bayesian Classification, " 2013 IEEE 27th International Conference on Advanced Information Networking and Applications (AINA), IEEE, 2013, pp.121-128.
20. W. Enck, M. Ongtang and P. McDaniel, "Understanding android security, " Security & Privacy, IEEE, 2009, 7(1) pp.50-57.
21. Android. (2013) Android permissions. [Online]. Available: http://developer.android.com/reference/android/Manifest.permission.html
22. J. R. Quinlan, "C4. 5: programs for machine learning, " Morgan kaufmann, 1993.
23. WIKI. (2013) C4.5 algorithm. [Online]. Available: http://en.wikipedia. org/wiki/C4.5 algorithm
24. WEKA. (2013) Weka 3: Data Mining Software in Java. [Online]. Available: http://www.cs.waikato.ac.nz/ml/weka/
25. ApkTool. (2013) android-apktool:A tool for reverse engineering Android apk files. [Online]. Available: http://code.google.com/p/android-apktool/
26. Y. Zhou and X. Jiang, "Dissecting android malware: Characterization and evolution, " 2012 IEEE Symposium on Security and Privacy (SP), IEEE, 2012, pp.95-109