Analyzing and Recognizing Android Malware via Semantic-Based Malware Gene
Jin Han, Rongcai Zhao, Zhen Shan, Fudong Liu, Zhao Bingling, Meng Xi, Wang Hongyan
Abstract
Jin Han, Rongcai Zhao, Zhen Shan, Fudong Liu, Zhao Bingling, Meng Xi, Wang Hongyan
Abstract
With the popularity of mobile platform, users' sensitive information and financial security are connecting closely to smartphones. An increasing number of malware samples appear in Android since it is the most popular operating system. However, there are no systematic methods to analyze and recognize those malware samples. Malware is labeled and classified in different standards. In this paper, Android malware gene is defined and extracted to recognize Android malware systematically. A malware gene is the minimum subsequence of statements to result in the functional information and it commonly occurs in a malware family. Moreover, a clustering via K-means is utilized to validate the identification effect of Android malware gene. Experimental results show that it is effective to recognize and analyze Android malware by means of malware gene.
OpenAlex reports 6 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
With the popularity of mobile platform, users' sensitive information and financial security are connecting closely to smartphones. An increasing number of malware samples appear in Android since it is the most popular operating system. However, there are no systematic methods to analyze and recognize those malware samples. Malware is labeled and classified in different standards. In this paper, Android malware gene is defined and extracted to recognize Android malware systematically. A malware gene is the minimum subsequence of statements to result in the functional information and it commonly occurs in a malware family. Moreover, a clustering via K-means is utilized to validate the identification effect of Android malware gene. Experimental results show that it is effective to recognize and analyze Android malware by means of malware gene.
Key concepts: Malware, Android malware, Android (operating system), Cryptovirology, Computer science, Mobile malware, Popularity, Computer security