Identifying unknown android malware with feature extractions and classification techniques

Proceedings - 14th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2015

Volumn 1, Issue , 2015, Pages 182-189

  Apvrille, Ludovic ^a   Apvrille, Axelle ^b  

^a INSTITUT TELECOM   (France)

^b Fortinet Technologies   (France)

Author keywords

Android; Classification; Malware; Privacy; Security; Static analysis

Indexed keywords

ANDROID (OPERATING SYSTEM); CLASSIFICATION (OF INFORMATION); COMMERCE; COMPUTER CRIME; DATA PRIVACY; STATIC ANALYSIS;

ANDROID; ANDROID MALWARE; ANTI VIRUS; CLASSIFICATION ALGORITHM; CLASSIFICATION TECHNIQUE; CLASSIFICATION TOOL; MOST LIKELY; SECURITY;

MALWARE;

EID: 84966731106     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/Trustcom.2015.373     Document Type: Conference Paper

References (34)

1. D. Harley and A. Lee, "Heuristic Analysis-Detecting Unknown Viruses," March 2007.
2. L. Seltzer, "Lessons of the McAfee False Positive Fiasco," April 2010, http://securitywatch.pcmag.com/malware/ 283982-lessons-of-The-mcafee-false-positive-fiasco.
3. B. Popa, "AVG Anti-Virus Breaks Down Windows XP Due To False Positive," March 2013, http://news.softpedia.com/news/ AVG-Anti-Virus-Breaks-Down-Windows-XP-Due-to-False\-Positive-337395.shtml.
4. G. Dini, F. Martinelli, A. Saracino, and D. Sgandurra, "MADAM: A Multi-level Anomaly Detector for Android Malware," in Computer Network Security-6th International Conference on Mathematical Methods, Models and Architectures for Computer Network Security, MMM-ACNS, ser. Lecture Notes in Computer Science, vol. 7531. St. Petersburg, Russia: Springer, "October" 2012, pp. 240-253.
5. L. Xie, X. Zhang, J.-P. Seifert, and S. Zhu, "pBMDS: a behaviorbased malware detection system for cellphone devices," in Proceedings of the third ACM conference on Wireless network security, ser. WiSec '10. New York, NY, USA: ACM, 2010, pp. 37-48.
6. I. Burguera, U. Zurutuza, and S. Nadjm-Tehrani, "Crowdroid: Behavior-based Malware Detection System for Android," in Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, ser. SPSM '11. New York, NY, USA: ACM, 2011, pp. 15-26.
7. M. e. a. Lindorfer, "AndRadar: fast discovery of android applications in alternative markets," in Proceedings of the 11th Conf. on Detection of Intrusions and Malware &Vulnerability Assessment (DIMVA), 2014.
8. M. L. et al., "Andrubis-1,000,000 Apps Later: A View on Current Android Malware Behaviors," in Proceedings of the the 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS), 2014.
9. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth, "Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones," in Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, ser. OSDI'10. Berkeley, CA, USA: USENIX Association, 2010, pp. 1-6. [Online]. Available: http://dl.acm.org/citation.cfm?id=1924943.1924971
10. N. Viennot, E. Garcia, and J. Nieh, "A measurement study of google play," in The 2014 ACM International Conference on Measurement and Modeling of Computer Systems, ser. SIGMETRICS '14. New York, NY, USA: ACM, 2014, pp. 221-233.
11. Y. Zhang, M. Yang, Z. Yang, G. Gu, P. Ning, and B. Zang, "Permission use analysis for vetting undesirable behaviors in android apps," Information Forensics and Security, IEEE Transactions on, vol. 9, no. 11, pp. 1828-1842, Nov 2014.
12. T. Shen, Y. Zhongyang, Z. Xin, B. Mao, and H. Huang, "Detect android malware variants using component based topology graph," in Trust, Security and Privacy in Computing and Communications (TrustCom), 2014 IEEE 13th International Conference on, Sept 2014, pp. 406-413.
13. L.-K. Yan and H. Yin, "Droidscope: Seamlessly reconstructing the os and dalvik semantic views for dynamic android malware analysis," in USENIX Security Symposium, 2012, pp. 569-584.
14. Z. Aung and W. Zaw, ""permission-based android malware detection"," International Journal of Scientific and Technology reseach, vol. 2, Mar. 2013.
15. T. Blasing, A.-D. Schmidt, L. Batyuk, S. A. Camtepe, and S. Albayrak, "An Android Application Sandbox System for Suspicious Software Detection," in 5th International Conference on Malicious and Unwanted Software (MALWARE'2010), Nancy, France,, 2010.
16. A. Shabtai, U. Kanonov, Y. Elovici, C. Glezer, and Y. Weiss, "Andromaly: a behavioral malware detection framework for android devices," J. Intell. Inf. Syst., vol. 38, no. 1, pp. 161-190, Feb. 2012.
17. Arp, Daniel and Spreitzenbarth, Michael and Habner, Malte and Gascon, Hugo and Rieck, Konrad, "Drebin: Efficient and Explainable Detection of Android Malware in Your Pocket," in Proceedings of the 17th Network and Distributed System Security Symposium (NDSS), February 2014.
18. V. Rastogi, Y. Chen, and W. Enck, "Appsplayground: Automatic security analysis of smartphone applications," in Proceedings of the Third ACM Conference on Data and Application Security and Privacy, ser. CODASPY '13. New York, NY, USA: ACM, 2013, pp. 209-220.
19. Y. Zhou, Z. Wang, W. Zhou, and X. Jiang, "Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets," in Proceedings of the 19th Network and Distributed System Security Symposium (NDSS 2012), San Diego, CA, USA, Feb 2012.
20. S. Chakradeo, B. Reaves, P. Traynor, and W. Enck, "MAST: Triage for Market-scale Mobile Malware Analysis," in Proc. 6th WiSec, 2013.
21. S. Zhao, X. Li, G. Xu, L. Zhang, and Z. Feng, "Attack tree based android malware detection with hybrid analysis," in Trust, Security and Privacy in Computing and Communications (TrustCom), 2014 IEEE 13th International Conference on, Sept 2014, pp. 380-387.
22. J. Chandraiah, "Fake anti-virus: The journey from Trojan to a persistent threat," May 2012, https://sophosnews.files.wordpress. com/2012/05/fakeav-image-adjust1.pdf.
23. M. Mas'ud, S. Sahib, M. Abdollah, S. Selamat, and R. Yusof, "Analysis of features selection and machine learning classifier in android malware detection," in Information Science and Applications (ICISA), 2014 Int. Conf. on, May 2014, pp. 1-5.
24. B. Sanz, I. Santos, C. Laorden, X. Ugarte-Pedrero, P. G. Bringas, and G. A. Maranon, "Puma: Permission usage to detect malware in android." ser. Advances in Intelligent Systems and Computing, A. e. a. Herrero, Ed., vol. 189. Springer, 2012, pp. 289-298.
25. M. Zhao, T. Zhang, F. Ge, and Z. Yuan, "Robotdroid: A lightweight malware detection framework on smartphones," Journal of Networks, vol. 7, no. 4, 2012. [Online]. Available: http://ojs. academypublisher.com/index.php/jnw/article/view/jnw0704715722
26. A. Apvrille and L. Apvrille, "Sherlockdroid, an inspector for android marketplaces," in Hack.lu, Luxembourg, Oct. 2014.
27. Patrick Schulz, "Dalvik Bytecode Obfuscation on Android," July 2012, http://www.dexlabs.org/blog/bytecode-obfuscation.
28. Fortiguard Center, "Android/RuSMS.AO," 2013, fortiguard Encyclopedia, http://www.fortiguard.com/encyclopedia/virus/#id= 5897642.
29. L. Apvrille, "Alligator: AnaLyzing maLware wIth partitioninG and probAbiliTy-based algORithms," 2014, http://http://perso. telecom-paristech.fr/~apvrille/alligator.html.
30. L. Apvrille and A. Apvrille, "Pre-filtering Mobile Malware with Heuristic Techniques," in GreHack, November 2013, pp. 43-59, grenoble, France.
31. C.-C. Chang and C.-J. Lin, "LIBSVM: A library for support vector machines," ACM Transactions on Intelligent Systems and Technology, vol. 2, pp. 27:1-27:27, 2011, software available at http://www.csie.ntu.edu.tw/~cjlin/libsvm.
32. R. E. Schapire and Y. Singer, "Improved boosting algorithms using confidence-rated predictions," in Machine Learning, 1999, pp. 80-91.
33. N. Kose, L. Apvrille, and J.-L. Dugelay, "Facial Makeup Detection Technique Based on Texture and Shape Analysis ," in 11th IEEE International Conference on Automatic Face and Gesture Recognition (FG 2015), May 2015, ljubljana, Slovenia.
34. D. Soergel, "Efficient training of Support Vector Machines in Java," 2014, https://github.com/davidsoergel/jlibsvm.