Robotdroid: A lightweight malware detection framework on smartphones

被引:44
作者
Zhao, Min [1 ]
Zhang, Tao [1 ]
Ge, Fangbin [1 ]
Yuan, Zhijian [1 ]
机构
[1] PLA University of Science and technology, Nanjing
关键词
Active learning; Android; Malware detection; Smartphone security;
D O I
10.4304/jnw.7.4.715-722
中图分类号
学科分类号
摘要
Smartphones have been widely used in recent years due to their capabilities of communication and multimedia processing, thus they also become attack targets of malware. Threat of malicious software has become an important factor in the safety of smartphones. Android is the most popular open-source smartphone operating system and its permission declaration access control mechanisms can't detect the behavior of malware. In this paper, a new software behavior signature based malware detection framework named RobotDroid using SVM active learning algorithm is proposed, active learning algorithm is very efficient in solving a small amount of labeled samples and unlabeled samples posed a lot of mixed sample training set classify problems, as a result, RobotDroid can detect kinds of malicious software and there variants effectively in runtime and it can self extend malware characteristics database dynamically. Experimental results show that the approach has high detection rate and low rate of false positive and false negative, the power and performance impact on the original system can also be ignored. © 2012 ACADEMY PUBLISHER.
引用
收藏
页码:715 / 722
页数:7
相关论文
共 25 条
[1]
Guo C., Wang H., Zhu W., Smartphone attacks and defenses, HotNets-III, UCSD, (2004)
[2]
Racic R., Ma D., Chen H., Exploiting mms vulnerabilities to stealthily exhause mobile phone's battery, IEEE SecureComm, (2006)
[3]
Mulliner C., Vigna G., Dagon D., Lee W., Using labeling to prevent cross-service attacks against smartphones, DIMVA, (2006)
[4]
Mulliner C., Vigna G., Vulnerability analysis of mms user agents, Proc. of ACM ACSAC, (2006)
[5]
Forrest S., Pearlmutter B., Detecting instructions using system calls: Alternative data models, IEEE Symposium on Security and Privacy, (1999)
[6]
Christodorescu M., Jha S., Et al., Semantic-aware Malware Detection IEEE Symposim of Security and Privacy, (2005)
[7]
Zhu Z., Cao G., Et al., A Social Network Based Patching Scheme for Worm Containment in Cellular Networks Infocomm, (2009)
[8]
Bose A., Xin H., Et al., Behavioral Detection of Malware on Mobile Handsets MobiSys'08, (2008)
[9]
Lewis D., Gale W., A sequential algorithm for training text classifiers, Proceedings of the ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 3-12, (1994)
[10]
Lee W., Dong X., Informatiion-Theoretic Measures for Anomaly Detection[A], Proc of the 2001 IEEE Symp on Security and Privacy[C], pp. 130-143, (2001)