MalDozer: Automatic framework for android malware detection using deep learning

By E. Karbab, Mourad Debbabi, Abdelouahid Derhab, D. Mouheb. Digital Investigation. The International Journal of Digital Forensics and Incident Response, 2018

361 citations recorded by the source corpus.

Abstract Android OS experiences a blazing popularity since the last few years. This predominant platform has established itself not only in the mobile world but also in the Internet of Things (IoT) devices. This popularity, however, comes at the expense of security, as it has become a tempting target of malicious apps. Hence, there is an increasing need for sophisticated, automatic, and portable malware detection solutions. In this paper, we propose MalDozer, an automatic Android malware detection and family attribution framework that relies on sequences classification using deep learning techniques. Starting from the raw sequence of the app's API method calls, MalDozer automatically extracts and learns the malicious and the benign patterns from the actual samples to detect Android malware. MalDozer can serve as a ubiquitous malware detection system that is not only deployed on servers, but also on mobile and even IoT devices. We evaluate MalDozer on multiple Android malware datasets ranging from 1 K to 33 K malware apps, and 38 K benign apps. The results show that MalDozer can correctly detect malware and attribute them to their actual families with an F1-Score of 96%–99% and a false positive rate of 0.06%–2%, under all tested datasets and settings.

View Paper: https://www.semanticscholar.org/paper/8d46caf790a53ebe1e64aaf6a8053db54291705d

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

  1. Junyang Qiu
  2. Jun Zhang
  3. Wei Luo
  4. Yang Xiang
  5. Lei Pan
  6. Surya Nepal

Citations in the corpus