Affiliation:
1. Centro de Investigación en Computación (CIC), Instituto Politécnico Nacional (IPN), Av. Juan de Dios Batiz, s/n, Mexico City 07320, Mexico
Abstract
The proliferation of Android-based devices has brought about an unprecedented surge in mobile application usage, making the Android ecosystem a prime target for cybercriminals. In this paper, a new method for Android malware classification is proposed. The method implements a convolutional neural network for malware classification using images. The research presents a novel approach to transforming the Android Application Package (APK) into a grayscale image. The image creation utilizes natural language processing techniques for text cleaning, extraction, and fuzzy hashing to represent the decompiled code from the APK in a set of hashes after preprocessing, where the image is composed of n fuzzy hashes that represent an APK. The method was tested on an Android malware dataset with 15,493 samples of five malware types. The proposed method showed an increase in accuracy compared to others in the literature, achieving up to 98.24% in the classification task.
Funder
Mexican Government
Secretaría de Investigación y Posgrado of the Instituto Politécnico Nacional, Mexico
Subject
Artificial Intelligence,Engineering (miscellaneous)
Reference36 articles.
1. Google (2023, September 09). Secure an Android Device|Android Open Source Project. Available online: https://source.android.com/docs/security/overview.
2. (2023, September 09). It Threat Evolution in q3 2022. Mobile Statistics|Securelist. Available online: https://securelist.com/it-threat-evolution-in-q3-2022-mobile-statistics/107978/.
3. Sarantinos, N., Benzaïd, C., Arabiat, O., and Al-Nemrat, A. (2016, January 23–26). Forensic Malware Analysis: The Value of Fuzzy Hashing Algorithms in Identifying Similarities. Proceedings of the 2016 IEEE Trustcom/BigDataSE/ISPA, Tianjin, China.
4. Chow, K.P., and Shenoi, S. (2010). IFIP Advances in Information and Communication Technology, Springer. Advances in Digital Forensics VI. DigitalForensics 2010.
5. An evaluation of forensic similarity hashes;Roussev;Digit. Investig.,2011