Ensemble Framework Combining Family Information for Android Malware Detection
Ensemble Framework Combining Family Information for Android Malware Detection
复制标题
Ensemble Framework 结合系列信息进行 Android 恶意软件检测
DOI：
10.1093/comjnl/bxac114
复制
发表时间：
2022-08
期刊：
影响因子：
--
通讯作者：
Lei Xue
中科院分区：
文献类型：
--
作者：
Yao Li;Zhi Xiong;Tao Zhang;Qinkun Zhang;Ming Fan;Lei Xue
Each malware application belongs to a specific malware family, and each family has unique characteristics. However, existing Android malware detection schemes do not pay attention to the use of malware family information. If the family information is exploited well, it could improve the accuracy of malware detection. In this paper, we propose a general Ensemble framework combining Family Information for Android Malware Detector, called EFIMDetector. First, eight categories of features are extracted from Android application packages. Then, we define the malware family with a large sample size as a prosperous family and construct a classifier for each prosperous family as a conspicuousness evaluator for the family characteristics. These conspicuousness evaluators are combined with a general classifier (which can be a base or ensemble classifier in itself), called the final classifier, to form a two-layer ensemble framework. For the samples of prosperous families with conspicuous family characteristics, the conspicuousness evaluators directly provide detection results. For other samples (including the samples of prosperous families with nonconspicuous family characteristics and the samples of nonprosperous families), the final classifier is responsible for detection. Seven common base classifiers and three common ensemble classifiers are used to detect malware in the experiment. The results show that the proposed ensemble framework can effectively improve the detection accuracy of these classifiers.
登录
查看更多内容
DOI：
10.3390/info11060326
发表时间：
2020-06
期刊：
Inf.
影响因子：
--
作者：
Luca Massarelli;Leonardo Aniello;Claudio Ciccotelli;Leonardo Querzoni;Daniele Ucci;R. Baldoni
通讯作者：
Luca Massarelli;Leonardo Aniello;Claudio Ciccotelli;Leonardo Querzoni;Daniele Ucci;R. Baldoni
DOI：
10.1016/j.future.2018.11.021
发表时间：
2019-05-01
影响因子：
7.5
作者：
Vinod, P.;Zemmari, Akka;Conti, Mauro
通讯作者：
Conti, Mauro
NSDroid：在本地函数调用图中使用邻域签名对 Android 恶意软件进行高效多分类
影响因子：
3.2
作者：
Liu Pengfei;Wang Weiping;Luo Xi;Wang Haodong;Liu Chushu
通讯作者：
Liu Chushu
影响因子：
6
作者：
Bakour, Khaled;Unver, Halil Murat
通讯作者：
Unver, Halil Murat
影响因子：
5.9
作者：
Roopak Surendran;Tony Thomas;S. Emmanuel
通讯作者：
Roopak Surendran;Tony Thomas;S. Emmanuel