Effective detection of android malware based on the usage of data flow APIs and machine learning

Information and Software Technology

Volumn 75, Issue , 2016, Pages 17-25

  Wu, Songyang ^a   Wang, Pan ^a   Li, Xun ^a   Zhang, Yong ^a  

^a INSTITUTE OF FORENSIC SCIENCE   (China)

Author keywords

Android security; Malware detection; Privacy leakage

Indexed keywords

ANDROID (OPERATING SYSTEM); APPLICATION PROGRAMMING INTERFACES (API); APPLICATION PROGRAMS; ARTIFICIAL INTELLIGENCE; CLASSIFICATION (OF INFORMATION); COMPUTER CRIME; DATA COMMUNICATION SYSTEMS; DATA FLOW ANALYSIS; DATA TRANSFER; LEARNING SYSTEMS; MALWARE; NEAREST NEIGHBOR SEARCH;

ANDROID SECURITIES; APPLICATION PROGRAM INTERFACES; CLASSIFICATION FEATURES; CLASSIFICATION MODELS; MACHINE LEARNING APPROACHES; MALWARE DETECTION; PRIVACY LEAKAGES; STATIC DATA-FLOW ANALYSIS;

MOBILE SECURITY;

EID: 84961588444     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2016.03.004     Document Type: Article

References (30)

1. M. La Polla, F. Martinelli, and D. Sgandurra A survey on security for mobile devices IEEE Commun. Surv. Tut. 15 1 2013 446 471
2. Y. Zhou, and X. Jiang Dissecting android malware: Characterization and evolution Security and Privacy (SP), 2012 IEEE Symposium on 2012 95 109
3. L. Li, A. Bartel, T.F. Bissyandé, J. Klein, Y. Le Traon, S. Arzt, S. Rasthofer, E. Bodden, D. Octeau, and P. McDaniel Iccta: Detecting inter-component privacy leaks in android apps Proceedings of the 37th International Conference on Software Engineering - Volume 1 ICSE '15 2015 IEEE Press Piscataway, NJ, USA 280 291
4. A.P. Felt, M. Finifter, E. Chin, S. Hanna, and D. Wagner A survey of mobile malware in the wild Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices SPSM '11 2011 ACM New York, USA 3 14
5. A.P. Felt, E. Chin, S. Hanna, D. Song, and D. Wagner Android permissions demystified Proceedings of the 18th ACM Conference on Computer and Communications Security CCS '11 2011 ACM New York, USA 627 638
6. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall These aren't the droids you're looking for: Retrofitting android to protect data from imperious applications Proceedings of the 18th ACM Conference on Computer and Communications Security CCS '11 2011 ACM New York, USA 639 652
7. Z. Yang, M. Yang, Y. Zhang, G. Gu, P. Ning, and X.S. Wang Appintent: Analyzing sensitive data transmission in android for privacy leakage detection Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security CCS '13 2013 ACM New York, USA 1043 1054
8. S. Arzt, S. Rasthofer, C. Fritz, E. Bodden, A. Bartel, J. Klein, Y. Le Traon, D. Octeau, and P. McDaniel Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps SIGPLAN Not. 49 6 2014 259 269
9. F. Wei, S. Roy, X. Ou, and Robby Amandroid: A precise and general inter-component data flow analysis framework for security vetting of android apps Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security CCS '14 2014 ACM New York, USA 1329 1341
10. W. Enck, P. Gilbert, B.-G. Chun, L.P. Cox, J. Jung, P. McDaniel, and A.N. Sheth Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation OSDI'10 2010 USENIX Association Berkeley, CA, USA 1 6
11. Z. Yang, and M. Yang Leakminer: Detect information leakage on android with static taint analysis Proceedings of the 2012 Third World Congress on Software Engineering WCSE '12 2012 IEEE Computer Society Washington, DC, USA 101 104
12. M. Zhang, and H. Yin Efficient, context-aware privacy leakage confinement for android applications without firmware modding Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security ASIA CCS '14 2014 ACM New York, USA 259 270
13. A. Lanzi, D. Balzarotti, C. Kruegel, M. Christodorescu, and E. Kirda Accessminer: Using system-centric models for malware protection Proceedings of the 17th ACM Conference on Computer and Communications Security CCS '10 2010 ACM New York, USA 399 412
14. I. Burguera, U. Zurutuza, and S. Nadjm-Tehrani Crowdroid: Behavior-based malware detection system for android Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices SPSM '11 2011 ACM New York, USA 15 26
15. H. Peng, C. Gates, B. Sarma, N. Li, Y. Qi, R. Potharaju, C. Nita-Rotaru, and I. Molloy Using probabilistic generative models for ranking risks of android apps Proceedings of the 2012 ACM Conference on Computer and Communications Security CCS '12 2012 ACM New York, USA 241 252
16. Y. Aafer, W. Du, and H. Yin Droidapiminer: Mining api-level features for robust malware detection in android Security and Privacy in Communication Networks Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 127 2013 Springer International Publishing 86 103
17. D. Arp, M. Spreitzenbarth, M. Hübner, H. Gascon, K. Rieck, and C. Siemens Drebin: Effective and explainable detection of android malware in your pocket Proceedings of the Annual Symposium on Network and Distributed System Security NDSS'14 2014
18. K.O. Elish, X. Shu, D.D. Yao, B.G. Ryder, and X. Jiang Profiling user-trigger dependence for android malware detection Computers & Security 49 0 2015 255 273
19. S. Arzt, S. Rasthofer, and E. Bodden Instrumenting android and java applications as easy as abc Runtime Verification Lecture Notes in Computer Science 8174 2013 Springer Berlin Heidelberg 364 381
20. P. Lam, E. Bodden, O. Lhoták, and L. Hendren The soot framework for java program analysis: a retrospective Cetus Users and Compiler Infastructure Workshop CETUS'11 2011
21. A. Bartel, J. Klein, Y. Le Traon, and M. Monperrus Dexpler: Converting android dalvik bytecode to jimple for static analysis with soot Proceedings of the ACM SIGPLAN International Workshop on State of the Art in Java Program Analysis SOAP '12 2012 ACM New York, USA 27 38
22. W. Enck, D. Octeau, P. McDaniel, and S. Chaudhuri A study of android application security Proceedings of the 20th USENIX Conference on Security SEC'11 2011 USENIX Association Berkeley, CA, USA 21-21
23. D. Aha, D. Kibler, and M. Albert Instance-based learning algorithms Mach. Learn. 6 1 1991 37 66
24. J. Neter, M.H. Kutner, C.J. Nachtsheim, and W. Wasserman Applied Linear Statistical Models 1996 Chicago: Irwin McGraw-Hill
25. N. Friedman, D. Geiger, and M. Goldszmidt Bayesian network classifiers Mach. Learn. 29 2-3 1997 131 163
26. S.R. Steven Arzt, and E. Bodden SuSi: A Tool for the Fully Automated Classification and Categorization of Android Sources and Sinks EC SPRIDE Technical Report TUD-CS-2013-0114 2013
27. Android.spy.49 (ibanking), 2014, URL http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3166.
28. R.D. Maesschalck, D. Jouan-Rimbaud, and D. Massart The mahalanobis distance Chemometr. Intell. Lab. 50 1 2000 1 18
29. R. Kohavi, A study of cross-validation and bootstrap for accuracy estimation and model selection, in: Proceeding of the 14th International Joint Conference on Artificial Intelligence, 1995.
30. M. Shepperd, and S. MacDonell Evaluating prediction systems in software project estimation Inform. Software Tech. 54 8 2012 820 827