A New Android Malware Detection Approach Using Bayesian Classification
Authors:
- Suleiman Y. YerimaSYSuleiman Y. Yerima
- Sakir SezerSSSakir Sezer
- Gavin McWilliamsGMGavin McWilliams
- Igor MuttikIMIgor Muttik
- 1 March 2013
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 1550445X,p. 121-128
Abstract
Mobile malware has been growing in scale and complexity as smartphone usage continues to rise. Android has surpassed other mobile platforms as the most popular whilst also witnessing a dramatic increase in malware targeting the platform. A worrying trend that is emerging is the increasing sophistication of Android malware to evade detection by traditional signature-based scanners. As such, Android app marketplaces remain at risk of hosting malicious apps that could evade detection before being downloaded by unsuspecting users. Hence, in this paper we present an effective approach to alleviate this problem based on Bayesian classification models obtained from static code analysis. The models are built from a collection of code and app characteristics that provide indicators of potential malicious activities. The models are evaluated with real malware samples in the wild and results of experiments are presented to demonstrate the effectiveness of the proposed approach.Keywords
All Related Versions
This publication has 16 references indexed in Scilit:
- A Machine Learning Approach to Android Malware Detection2012
- RiskRanker2012
- Reducing the window of opportunity for Android malware Gotta catch ’em allJournal of Computer Virology and Hacking Techniques, 2012
- A framework for static detection of privacy leaks in android applications2012
- AndroidLeaks: Automatically Detecting Potential Privacy Leaks in Android Applications on a Large Scale2012
- Crowdroid2011
- Static Analysis of Executables for Collaborative Malware Detection on Android2009
- A Virus Prevention Model Based on Static Analysis and Data Mining Methods2008
- Monitoring Smartphones for Anomaly Detection2008
- Data mining methods for detection of new malicious executables2002