Malware Detection in Android Operating System using Convolutional Neural Network and Long Short-Term Memory Network

Document Type : Computer Article

Authors

1 Department of Computer Sciences, Faculty of Sciences, Golestan University, Gorgan, Iran

2 Department of Computer Engineering, Technical and Vocational University (TVU), Tehran, Iran

Abstract

The use of mobile phones with Android operating system is expanding day by day. Android itself does not have a powerful malware detection tool. Therefore, attackers easily enter people's privacy through their mobile phones and put them at serious risk. So far, a lot of research has been done on malware detection. One of the main problems of these solutions is the low accuracy in multi-class detection on the dataset or the failure to achieve the desired result in both types of binary and multi-class detection. In this paper, by using Convolutional Neural Network (CNN) and changing the number of different layers, we have tried to extract the maximum number of important features from the dataset. In the data classification phase, we use the Deep Learning-based algorithm named Long Short-Term Memory (LSTM) to classify the data with the maximum possible accuracy by testing it on the selected features. The test results on the new MalMemAnalysis-2022 dataset show that the use of these two algorithms and the change in the number of layers can lead to 99.99% and 99.71% accuracies in binary and multi-class classification in malware detection, respectively, which is superior to existing methods.

Keywords

Main Subjects


[1] A.S. Shatnawi, Y. Qussai, and Y. Abdulrahman. “An Android Malware Detection Approach Based on Static Feature Analysis Using Machine Learning Algorithms.” The 3rd International Workshop on DataDriven Security DDSW (2022): 22-25.
[2] N.S. Escanilla, L. Hellerstein, R. Kleiman, Z. Kuang, J. Shull, and D. Page. “Recursive feature elimination by sensitivity testing.” 17th IEEE International Conference on Machine Learning and Applications (ICMLA), IEEE, (2018): 40–47.
[3] L. Taheri. A.F.A. Kadir, and A. Habibi. “Extensible android malware detection and family classification using network-flows and api-calls.” International Carnahan Conference on Security Technology (ICCST), IEEE, (2019): 1–8.
[4] S. Smmarwar, G. Gupta, S. Kumar, and P. Kumar. “An optimized and efficient android malware detection framework for future sustainable computing.” Sustainable Energy Technologies and Assessments 1 (2022): 1-8.
[5] S.I. Imtiaz, S.A.R. Javed, Z. Jalil, X. Liu, and W. Alnumay. “DeepAMD: Detection and identification of Android malware using high-efficient Deep Artificial Neural Network.” Future Generation Computer Systems 1 (2021): 844-856.
[6] E. Parsaeimehr, M. Fartash, and J.A. Torkestani. “An ensemble deep learning model to enhance feature representation for entity detection.” Journal of Modeling in Engineering 20 (2022): 103-112. (in Persian)
[7] E. Berenjkar. “Evaluation of the performance of artificial neural networks integrated with whale optimization and ant colony optimization algorithms in estimating the drilling rate of penetration and compare with simple neural networks and mathematical conventional models.” Journal of Modeling in Engineering 19 (2021): 115-135. (in Persian)
[8] P. Bhat, and K. Dutta. “A multi-tiered feature selection model for android malware detection based on Feature discrimination and Information Gain.” Journal of King Saud University-Computer and Information Sciences 34 (2022): 9464-9477.
[9] S. Mahdavifar, A. Kadi, R. Fatemi, D. Alhadidi, and A.A. Ghorbani. “Dynamic android malware category classification using semi-supervised deeplearning.” IEEE Intl Conf on Dependable, Autonomic and Secure Computing (2020): 515–522.
[10] C. Li, K. Mills, D. Niu. R. Zhu, H. Zhang, and H. Kinawi. “Android malware detection based on factorization machine.” IEEE Access 7 (2019): 184008–184019.
[11] C. Zhao, W. Zheng, L. Gong, M. Zhang, and C. Wang. “Quick and accurate android malware detection based on sensitive APIs.” 2018 IEEE International Conference on Smart Internet of Things (SmartIoT), IEEE, (2018): 143–148.
[12] W. Wang, M. Zhao, and J. Wang. “Effective android malware detection with a hybrid model based on deep autoencoder and convolutional neural network.” Journal of Ambient Intelligence and Humanized Computing 10 (2018): 3035–3043.
[13] T. Kim, B. Kang, M. Rho, S. Sezer, and E.G. Im. “A multimodal deep learning method for android malware detection using various features.” IEEE Transactions on Information Forensics and Security 14 (2018): 773–788.
[14] J. Xu, Y. Li, and R. Deng. “Differential Training: A Generic Framework to Reduce Label Noises for Android Malware Detection.” 2021 Network and Distributed System Security Symposium (2021): 1-14.
[15] C. Hasegawa, and H. Iyatomi. “One-dimensional convolutional neural networks for Android malware detection.” 14th International Colloquium on Signal Processing & its Applications (CSPA). IEEE. (2018): 99–102.
[16] R. Feng, S. Chen, X. Xie, G. Meng, S.W. Lin, and Y. Liu. “A performance-sensitive malware detection system using deep learning on mobile devices.” IEEE Transactions on Information Forensics and Security 16 (2020): 1563–1578.
[17] J. Zhang, Q. Jixin, Y. Zheng, H. Yin, L. Ou, and K. Zhang. “A feature-hybrid malware variants detection
using CNN based opcode embedding and BPNN based API embedding.” Computer Security 84 (2019): 376–392.
[18] Y. Zhang, Y. Yang, and X. Wang. “A novel android malware detection approach based on convolutional neural network.” 2nd International Conference on Cryptography and Security Privacy, New York, NY, USA, ACM. (2018): 144–149.
[19] S.A. Khowaja, and P. Khuwaja. “Q-learning and LSTM based deep active learning strategy for malware defense in industrial IoT applications.” Multimedia Tools and Applications 80 (2021): 14637–14663.
[20] K. Xu, Y. Li. R.H. Deng, and K. Chen. “DeepRefiner: multi-layer android malware detection system applying deep neural networks.” IEEE European Symposium on Security and Privacy, IEEE. (2018): 473–487.
[21] S.J. Hussain, U. Ahmed, H. Liaquat, S. Mir, NZ. Jhanjhi, and M. Humayun. “IMIAD: intelligent malware identification for android platform.” International Conference on Computer Information Science, IEEE. (2019): 1–6.
[22] T. Carrier, P. Victor, A. Tekeoglu, and A.H. Lashkari. “Detecting Obfuscated Malware using Memory Feature Engineering.” The 8th International Conference on Information Systems Security and Privacy (ICISSP) (2022): 177-188.