Toward Developing a Systematic Approach to Generate Benchmark Android Malware Datasets and Classification

By Arash Habibi Lashkari, A. A. Kadir, Laya Taheri, Ali Akbar Ghorbani. International Carnahan Conference on Security Technology, 2018

327 citations recorded by the source corpus.

Malware detection is one of the most important factors in the security of smartphones. Academic researchers have extensively studied Android malware detection problems. Machine learning methods proposed in previous work typically reported high detection performance and fast prediction times on fixed and defective datasets. Therefore, based on these shortcomings most datasets are not suitable for real-world deployment. The main goal of this paper is to propose a systematic approach to generate Android malware datasets using real smartphones instead of emulators and develop a new dataset, namely CI-CAndMal2017, which covers all the shortcomings and limitations of previous datasets. Also, we offer 80 traffic features to select the best feature sets for detecting and classifying the malicious families just by traffic analysis. The proposed method showed an average precision of 85% and recall of 88% for three classifiers, namely Random Forest(RF), K-Nearest Neighbor (KNN), and Decision Tree (DT).

Subfields: Computer Networks and Communications, Software, Signal Processing

View Paper: https://www.semanticscholar.org/paper/d5b23497b138a5781c3d8eb87b01522bce0f159b

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Signal Processing

Citations in the corpus

Explainable Artificial Intelligence Applications in Cyber Security: State-of-the-Art in Research (2022, methodology): “[100] CICAndMal201 7 2018 143 Created a new dataset called CI-CAndMal2017 and provide a methodical method to build Android malware datasets using actual smartphones as opposed to emulators.”
Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study (2020, unknown): “Android malware dataset 2018 [118] [119] 1”
InSDN: A Novel SDN Intrusion Dataset (2020, background): “In addition to datasets described above, many data repositories have been published to cover various security domains, such as botnets [22], [23], Malware [24], [25], Port”