Please wait a minute...
Front. Inform. Technol. Electron. Eng.  2018, Vol. 19 Issue (6): 712-736    DOI:
    
Discovering optimal features using static analysis and a genetic search based method for Android malware detection
Ahmad FIRDAUS, Nor Badrul ANUAR , Ahmad KARIM, Mohd Faizal Ab RAZAK
Department of Computer System and Technology, University of Malaya, Kuala Lumpur 50603, Malaysia
Faculty of Computer System & Software Engineering, University Malaysia Pahang, Gambang 26300, Malaysia
Department of Information Technology, Bahauddin Zakariya University, Multan 60000, Pakistan
Download:   PDF(0KB)
Export: BibTeX | EndNote (RIS)      

Abstract  Mobile device manufacturers are rapidly producing miscellaneous Android versions worldwide. Simultaneously, cyber
criminals are executing malicious actions, such as tracking user activities, stealing personal data, and committing bank fraud.
These criminals gain numerous benefits as too many people use Android for their daily routines, including important communi-
cations. With this in mind, security practitioners have conducted static and dynamic analyses to identify malware. This study used
static analysis because of its overall code coverage, low resource consumption, and rapid processing. However, static analysis
requires a minimum number of features to efficiently classify malware. Therefore, we used genetic search (GS), which is a search
based on a genetic algorithm (GA), to select the features among 106 strings. To evaluate the best features determined by GS, we
used five machine learning classifiers, namely, Na?ve Bayes (NB), functional trees (FT), J48, random forest (RF), and multilayer
perceptron (MLP). Among these classifiers, FT gave the highest accuracy (95%) and true positive rate (TPR) (96.7%) with the use
of only six features.


Key wordsGenetic algorithm      Static analysis      Android      Malware      Machine learning     
Received: 22 August 2016      Published: 11 June 2019
Cite this article:

Ahmad FIRDAUS, Nor Badrul ANUAR , Ahmad KARIM, Mohd Faizal Ab RAZAK. Discovering optimal features using static analysis and a genetic search based method for Android malware detection. Front. Inform. Technol. Electron. Eng., 2018, 19(6): 712-736.

URL:

http://www.zjujournals.com/xueshu/fitee/     OR     http://www.zjujournals.com/xueshu/fitee/Y2018/V19/I6/712


Discovering optimal features using static analysis and a genetic search based method for Android malware detection

Mobile device manufacturers are rapidly producing miscellaneous Android versions worldwide. Simultaneously, cyber
criminals are executing malicious actions, such as tracking user activities, stealing personal data, and committing bank fraud.
These criminals gain numerous benefits as too many people use Android for their daily routines, including important communi-
cations. With this in mind, security practitioners have conducted static and dynamic analyses to identify malware. This study used
static analysis because of its overall code coverage, low resource consumption, and rapid processing. However, static analysis
requires a minimum number of features to efficiently classify malware. Therefore, we used genetic search (GS), which is a search
based on a genetic algorithm (GA), to select the features among 106 strings. To evaluate the best features determined by GS, we
used five machine learning classifiers, namely, Na?ve Bayes (NB), functional trees (FT), J48, random forest (RF), and multilayer
perceptron (MLP). Among these classifiers, FT gave the highest accuracy (95%) and true positive rate (TPR) (96.7%) with the use
of only six features.

关键词: Genetic algorithm,  Static analysis,  Android,  Malware,  Machine learning 
[1] Bo YU, Ying FANG, Qiang YANG, Yong TANG, Liu LIU. A survey of malware behavior description and analysis[J]. Front. Inform. Technol. Electron. Eng., 2018, 19(5): 583-603.
[2] Liu LIU , Bao-sheng WANG, Bo YU, Qiu-xi ZHONG. Automatic malware classification and new malware detection using machine learning[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(9): 1336-1347.
[3] Muhammad Asif Zahoor Raja, Iftikhar Ahmad, Imtiaz Khan, Muhammed Ibrahem Syam, Abdul Majid Wazwaz. Neuro-heuristic computational intelligence for solving nonlinear pantograph systems[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(4): 464-484.
[4] Deng Chen, Yan-duo Zhang, Wei Wei, Shi-xun Wang, Ru-bing Huang, Xiao-lin Li, Bin-bin Qu, Sheng Jiang. Efficient vulnerability detection based on an optimized rule-checking static analysis technique[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(3): 332-345.
[5] Hao-wei ZHANG, Jun-wei XIE, Wen-long LU , Chuan SHENG, Bin-feng ZONG. A scheduling method based on a hybrid genetic particle swarm algorithm for multifunction phased array radar[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(11): 1806-1816.
[6] Lei-lei KONG , Zhi-mao LU , Hao-liang QI, Zhong-yuan HAN. A machine learning approach to query generation in plagiarism source retrieval[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(10): 1556-1572.
[7] Gang Xiong, Yu-xiang Hu, Le Tian, Ju-long Lan, Jun-fei Li, Qiao Zhou. A virtual service placement approach based on improved quantum genetic algorithm[J]. Front. Inform. Technol. Electron. Eng., 2016, 17(7): 661-671.
[8] Mohammad Mosleh, Hadi Latifpour, Mohammad Kheyrandish, Mahdi Mosleh, Najmeh Hosseinpour. A robust intelligent audio watermarking scheme using support vector machine[J]. Front. Inform. Technol. Electron. Eng., 2016, 17(12): 1320-1330.
[9] G. R. Brindha, P. Swaminathan, B. Santhi. Performance analysis of new word weighting procedures for opinion mining[J]. Front. Inform. Technol. Electron. Eng., 2016, 17(11): 1186-1198.
[10] Ya-tao Zhang, Cheng-yu Liu, Shou-shui Wei, Chang-zhi Wei, Fei-fei Liu. ECG quality assessment based on a kernel support vector machine and genetic algorithm with a feature matrix[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(7): 564-573.
[11] Hamid Tabatabaee, Mohammad Reza Akbarzadeh-T, Naser Pariz. Dynamic task scheduling modeling in unstructured heterogeneous multiprocessor systems[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(6): 423-434.
[12] Fei-wei Qin, Lu-ye Li, Shu-ming Gao, Xiao-ling Yang, Xiang Chen. A deep learning approach to the classification of 3D CAD models[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(2): 91-106.
[13] Guangdong Tian, Hua Ke, Xiaowei Chen. Fuzzy cost-profit tradeoff model for locating a vehicle inspection station considering regional constraints[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(12): 1138-1146.
[14] Da-yu Xu, Shan-lin Yang, Ren-ping Liu. A mixture of HMM, GA, and Elman network for load prediction in cloud-oriented data centers[J]. Front. Inform. Technol. Electron. Eng., 2013, 14(11): 845-858.
[15] Ozoemena Anthony Ani, He Xu, Yi-ping Shen, Shao-gang Liu, Kai Xue. Modeling and multiobjective optimization of traction performance for autonomous wheeled mobile robot in rough terrain[J]. Front. Inform. Technol. Electron. Eng., 2013, 14(1): 11-29.