Android Adware Detection Using Machine Learning

Android Adware Detection Using Machine Learning

Sikha Bagui, Daniel Benson
Copyright: © 2021 |Pages: 19
DOI: 10.4018/IJCRE.2021070101
OnDemand:
(Individual Articles)
Available
$37.50
No Current Special Offers
TOTAL SAVINGS: $37.50

Abstract

Adware, an advertising-supported software, becomes a type of malware when it automatically delivers unwanted advertisements to an infected device, steals user information, and opens other vulnerabilities that allow other malware and adware to be installed. With the rise of more and complex evasive malware, specifically adware, better methods of detecting adware are required. Though a lot of work has been done on malware detection in general, very little focus has been put on the adware family. The novelty of this paper lies in analyzing the individual adware families. To date, no work has been done on analyzing the individual adware families. In this paper, using the CICAndMal2017 dataset, feature selection is performed using information gain, and classification is performed using machine learning. The best attributes for classification of each of the individual adware families using network traffic samples are presented. The results present an average classification rate that is an improvement over previous works for classification of individual adware families.
Article Preview
Top

Many different approaches have been used to detect and classify android malware. Milosevic et al. (2017) present two machine learning methods to detect android malware using a machine learning model based on app permissions and app source code. These researchers achieved an F-score of 95.1% for source code based classification and a F-measure of 89% for permission based classification. Their approach used several classification algorithms such as C4.5 decision trees, random forest, and others. Their work differs from ours in that while their approach focuses on source code and app permissions, our work focuses on classification based on network traffic features.

Altaher & Barukab (2017) proposed an adaptive neuro-fuzzy inference system with fuzzy c-means clustering to improve the classification rate of android malware vs benign android apps. They used android permissions as features for classification. Their FCM clustering method determines the best number of clusters to improve classification accuracy. These researchers achieved a classification accuracy of 91% with a false positive rate of 0.5% and a false negative rate of 0.4%.

Complete Article List

Search this Journal:
Reset
Volume 5: 1 Issue (2024)
Volume 4: 2 Issues (2022): 1 Released, 1 Forthcoming
Volume 3: 2 Issues (2021)
Volume 2: 2 Issues (2020)
Volume 1: 2 Issues (2019)
View Complete Journal Contents Listing