A Review of Hybrid Malware Detection Techniques in Android

Shabir, Ali Goher; Sabahat, Nosheen

doi:10.1109/inmic50486.2020.9318117

Cited by 3 publications

(1 citation statement)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Conversely, Shabir&Sabahat [15] conducted a review of articles utilizing a hybrid approach. However, the review remains incomplete due to several factors: it encompasses only five articles, resulting in a narrow scope and lack of depth in the discussion and analysis.…”

Section: Introductionmentioning

confidence: 99%

Hybrid Android Malware Detection: A Review of Heuristic-Based Approach

Yunmar,

Kusumawardani,

Widyawan

et al. 2024

IEEE Access

View full text Add to dashboard Cite

Over the last decade, numerous research efforts have been dedicated to countering malicious mobile applications. Given its market share, Android OS has been the primary target for most of these apps. Researchers have devised numerous solutions to protect Android devices and their users, categorizing them into static and dynamic approaches. Each of these approaches has its own advantages and disadvantages. The hybrid approach aims to combine the benefits of both. This study closely examines the hybrid solutions proposed between 2012 and 2023, highlighting their strengths and limitations. The objective of this study is to provide a comprehensive review of existing research on Android malware detection using a hybrid approach. Our review identifies several issues related to hybrid detection approaches, including datasets, feature utilization and selection, working environments, detection order mechanisms, integrity of the detection step, detection algorithms, and the use of automated input generation. Key findings of this study include: (i) the majority of studies have not adequately addressed on-device detection and have overlooked the importance of system usability, (ii) many studies rely on outdated datasets that do not accurately represent the current threat landscape, (iii) there is a need for a methodology to detect zero-day attacks, and (iv) most research has not paid attention to the impact of automated input generation on malware behavior and code coverage. We also discuss some open issues and future directions on the aspect that will help to substantiate the hybrid approach study.INDEX TERMS Android malware, heuristic-based detection, hybrid approach.

show abstract

Section: Introductionmentioning

confidence: 99%