Web-Based Android Malicious Software Detection and Classification System
Source abstract
Abstract
Android is the most used operating system (OS) by mobile devices. Since applications uploaded to Google Play and other stores are not analyzed comprehensively, it is not known whether the applications are malicious software or not. Therefore, there is an urgent need to analyze these applications regarding malicious software. Moreover, mobile devices have limited resources to analyze the applications. In this study, a malicious detection system named “Web-Based Android Malicious Software Detection and Classification System” was developed. The system is based on client-server architecture, static analysis and web-scraping methods. The proposed system overcomes the resource restriction issue, as well as providing third-party service support by means of client-server architecture. Based on the performance evaluation conducted in this research, the developed system’s success rate is 97.62% on benign and malicious datasets.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Advanced Malware Detection Techniques · Network Security and Intrusion Detection · Software Testing and Debugging Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Engineering, Gazi University Faculty of Technology, Teknikokullar Ankara 06500, Turkey
References (51)
Show source-provided references
1. IDC (2018, August 20). Smartphone OS. Available online: https://www.idc.com/promo/smartphone-market-share/os.
2. G DATA (2018, August 20). G DATA Mobile Malware Report H1 2016. Available online: https://file.gdatasoftware.com/web/en/documents/whitepaper/G_DATA_Mobile_Malware_Report_H1_2016_EN.pdf.
3. Cunningham, E. (2018, August 20). Keeping You Safe with Google Play Protect. Available online: https://blog.google/products/android/google-play-protect/.
4. Android (2018, August 20). Google Play Protect. Available online: https://www.android.com/play-protect/.
5. (2018, August 20). Google Play. Available online: https://play.google.com/store.
6. Android Developers (2018, August 20). Distribution Dashboard. Available online: https://developer.android.com/about/dashboards/index.html.
7. Wu, D.J., Mao, C.H., Wei, T.E., Lee, H.M., and Wu, K.P. (2012, January 9–10). Droidmat: Android malware detection through manifest and api calls tracing. Proceedings of the Seventh Asia Joint Conference on Information Security, Tokyo, Japan.10.1109/AsiaJCIS.2012.18 ↗
8. Apktool (2018, August 20). A Tool for Reverse Engineering Android Apk Files. Available online: https://ibotpeaches.github.io/Apktool/.
9. Arp, D., Spreitzenbarth, M., Hubner, M., Gascon, H., and Rieck, K. (2014, January 23–26). DREBIN: Effective and Explainable Detection of Android Malware in Your Pocket. Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, USA.10.14722/ndss.2014.23247 ↗
10. DroidChain: A novel Android malware detection method based on behaviour chains10.1016/j.pmcj.2016.06.018 ↗
11. APK Auditor: Permission-based Android malware detection system10.1016/j.diin.2015.01.001 ↗
12. Android Malware Detection Systems Review
13. Narayanan, A., Liu, Y., Chen, L., and Liu, J. (2016, January 24–29). Adaptive and Scalable Android Malware Detection through Online Learning. Proceedings of the International Joint Conference on Neural Networks (IJCNN), Vancouver, BC, Canada.10.1109/IJCNN.2016.7727508 ↗
14. An integrated static detection and analysis framework for android10.1016/j.pmcj.2016.03.003 ↗
15. Detecting android malicious apps and categorizing benign apps with ensemble of classifiers10.1016/j.future.2017.01.019 ↗
16. Android Application Classification and Anomaly Detection with Graph-based Permission Patterns10.1016/j.dss.2016.09.006 ↗
17. Anwar, S., Zain, J.M., Inayat, Z., Karim, A., Haq, R.U., and Jabir, A.N. (2016, January 11–12). A Static Approach towards Mobile Botnet Detection. Proceedings of the 3rd International Conference on Electronic Design (ICED), Phuket, Thailand.10.1109/ICED.2016.7804708 ↗
18. Permisson Comparison Based Malware Detection System for Android Mobile Applications
19. Dex2jar (2018, August 20). Tools to Work with Android .dex and java .class Files. Available online: https://github.com/pxb1988/dex2jar.
20. AndroDialysis: Analysis of Android Intent Effectiveness in Malware Detection10.1016/j.cose.2016.11.007 ↗
21. Kang, H., Jang, J.-W., Mohaisen, A., and Kim, H.K. (2015). Detecting and Classifying Android Malware Using Static Analysis along with Creator Information. Int. J. Distrib. Sens. Netw., 1–9.10.1155/2015/479174 ↗
22. Goyal, R., Spognardi, A., Dragoni, N., and Argyriou, M. (2016, January 4–6). SafeDroid: A Distributed Malware Detection Service for Android. Proceedings of the IEEE 9th International Conference on Service-Oriented Computing and Applications (SOCA), Macau, China.10.1109/SOCA.2016.14 ↗
23. Permission based Detection System for Android Malware
24. Atici, M.A., Sagiroglu, S., and Dogru, I.A. (2016, January 25–27). Android malware analysis approach based on control flow graphs and machine learning algorithms. Proceedings of the 4th International Symposium on Digital Forensic and Security (ISDFS), Little Rock, AR, USA.10.1109/ISDFS.2016.7473512 ↗
25. Mobile malware detection through analysis of deviations in application network behavior10.1016/j.cose.2014.02.009 ↗
26. Heuser, S., Negro, M., Pendyala, P.K., and Sadeghi, A.-R. (2016, January 26). DroidAuditor: Forensic Analysis of Application-Layer Privilege Escalation Attacks on Android. Proceedings of the Financial Cryptography and Data Security (FC 2016), Christ Church, Barbados.10.1007/978-3-662-54970-4_15 ↗
27. Detecting and classifying method based on similarity matching of Android malware behavior with profile10.1186/s40064-016-1861-x ↗
28. Network-based detection of Android malicious apps10.1007/s10207-016-0343-z ↗
29. Chang, W.-L., Sun, H.-M., and Wu, W. (2016, January 5–8). An Android Behavior-Based Malware Detection Method using Machine Learning. Proceedings of the 2016 IEEE International Conference on Signal Processing, Communications and Computing (ICSPCC), Hong Kong, China.
30. Lantz, P. (2011). An Android application sandbox for dynamic analysis. [Bachelor’s Thesis, Department of Electrics and Information Technologies, Lund University].
31. Shi, Y., You, W., Qian, K., Bhattacharya, P., and Qian, Y. (2016, January 20–22). A Hybrid Analysis for Mobile Security Threat Detection. Proceedings of the IEEE 7th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON 2016), New York, NY, USA.10.1109/UEMCON.2016.7777821 ↗
32. Cole, Y., Zhang, H., Ge, L., Wei, S., Yu, W., Lu, C., Chen, G., Shen, D., Blasch, E., and Pham, K.D. (2015, January 9–12). ScanMe Mobile: A Local and Cloud Hybrid Service for Analyzing APKs. Proceedings of the Research in Adaptive and Convergent Systems (RACS 2015), Prague, Czech Republic.10.1145/2811411.2811483 ↗
33. Singh, S., Mishra, B., and Singh, S. (2015, January 14–16). Detecting Intelligent Malware on Dynamic Android Analysis Environments. Proceedings of the 10th International Conference for Internet Technology and Secured Transactions (ICITST 2015), London, UK.10.1109/ICITST.2015.7412132 ↗
34. Wang, H., Guo, Y., Tang, Z., Bai, G., and Chen, X. (2015, January 6–10). Re-evaluating Android Permission Gaps with Static and Dynamic Analysis. Proceedings of the IEEE Global Communications Conference (GLOBECOM 2015), San Diego, CA, USA.10.1109/GLOCOM.2015.7417621 ↗
35. (2018, August 20). Apkpure. Available online: https://apkpure.com/.
36. (2018, August 20). The Drebin Dataset. Available online: https://www.sec.cs.tu-bs.de/~danarp/drebin/.
37. Kayabasi, G. (2016). Classification of Android Applications through Permission Based Static Analysis. [Bachelor’s Thesis, Gazi University, Institute of Science].
38. VirusTotal (2018, August 20). VirusTotal Public API v2.0. Available online: https://www.virustotal.com/en/documentation/public-api.
39. Kang, B., Yerima, S.Y., McLaughlin, K., and Sezer, S. (2016, January 13–14). N-opcode Analysis for Android Malware Classification and Categorization. Proceedings of the International Conference on Cyber Security and Protection of Digital Services (Cyber Security 2016), London, UK.10.1109/CyberSecPODS.2016.7502343 ↗
40. Ma, L., Wang, X., Yang, Y., and He, J. (2016, January 8–10). Ultra-lightweight Malware Detection of Android Using 2-level Machine Learning. Proceedings of the 3rd International Conference on Information Science and Control Engineering (ICISCE 2016), Beijing, China.10.1109/ICISCE.2016.161 ↗
41. ICCDetector: ICC-Based Malware Detection on Android10.1109/TIFS.2016.2523912 ↗
42. Shehu, Z., Ciccotelli, C., Ucci, D., Aniello, L., and Baldoni, R. (2016, January 24–26). Towards the Usage of Invariant-based App Behavioral Fingerprinting for the Detection of Obfuscated Versions of Known Malware. Proceedings of the 10th International Conference on Next Generation Mobile Applications, Security and Technologies (NGMAST 2016), Cardiff, UK.10.1109/NGMAST.2016.16 ↗
43. Ban, T., Takahashi, T., Guo, S., Inoue, D., and Nakao, K. (2016, January 4–5). Integration of Multi-modal Features for Android Malware Detection Using Linear SVM. Proceedings of the 11th Asia Joint Conference on Information Security (AsiaJCIS 2016), Fukuoka, Japan.10.1109/AsiaJCIS.2016.29 ↗
44. (2018, August 20). VirusTotal, About VirusTotal. Available online: https://virustotal.com/en/about/.
45. Mobile-Sandbox: Combining static and dynamic analysis with machine-learning techniques10.1007/s10207-014-0250-0 ↗
46. Operation Characteristics Curve and Comparison of Regions under Curve10.5835/jecm.omu.27.02.008 ↗
47. University of Nebraska Medical Center (2018, August 20). The Area under an ROC Curve. Available online: http://gim.unmc.edu/dxtests/roc3.htm.
48. Accord.NET Framework (2018, August 20). Accord.Statistics.Analysis Namespace. Available online: http://accord-framework.net/docs/html/N_Accord_Statistics_Analysis.htm.
49. (2018, August 20). Apkleecher.com. Available online: http://apkleecher.com/.
50. (2018, August 20). APKBucket. Available online: https://apkbucket.net/.
51. Effective Detection of Android Malware Based on the Usage of Data Flow APIs and Machine Learning10.1016/j.infsof.2016.03.004 ↗