A Multiclass Detection System for Android Malicious Apps Based on Color Image Features - Université de Rennes Accéder directement au contenu
Article Dans Une Revue Wireless Communications and Mobile Computing Année : 2020

A Multiclass Detection System for Android Malicious Apps Based on Color Image Features

Jiawei Qin
  • Fonction : Auteur
Boan Zhang
  • Fonction : Auteur
Fei Gao
  • Fonction : Auteur
  • PersonId : 1240075
  • IdRef : 267837267
Hanbing Yan
  • Fonction : Auteur
Jing Guo
  • Fonction : Auteur
Senmiao Wang
  • Fonction : Auteur
Yangye Hu
  • Fonction : Auteur

Résumé

The visual recognition of Android malicious applications (Apps) is mainly focused on the binary classification using grayscale images, while the multiclassification of malicious App families is rarely studied. If we can visualize the Android malicious Apps as color images, we will get more features than using grayscale images. In this paper, a method of color visualization for Android Apps is proposed and implemented. Based on this, combined with deep learning models, a multiclassifier for the Android malicious App families is implemented, which can classify 10 common malicious App families. In order to better understand the behavioral characteristics of malicious Apps, we conduct a comprehensive manual analysis for a large number of malicious Apps and summarize 1695 malicious behavior characteristics as customized features. Compared with the App classifier based on the grayscale visualization method, it is verified that the classifier using the color visualization method can achieve better classification results. We use four types of Android App features: classes.dex file, sets of class names, APIs, and customized features as input for App visualization. According to the experimental results, we find out that using the customized features as the color visualization input features can achieve the highest detection accuracy rate, which is 96% in the ten malicious families.
Fichier principal
Vignette du fichier
8882295.pdf (3.85 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03094898 , version 1 (04-01-2021)

Identifiants

Citer

Hua Zhang, Jiawei Qin, Boan Zhang, Fei Gao, Hanbing Yan, et al.. A Multiclass Detection System for Android Malicious Apps Based on Color Image Features. Wireless Communications and Mobile Computing, 2020, 2020, pp.1-21. ⟨10.1155/2020/8882295⟩. ⟨hal-03094898⟩
123 Consultations
169 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More