DroidDetectMW: A Hybrid Intelligent Model for Android Malware Detection

Abstract

Malicious apps specifically aimed at the Android platform have increased in tandem with the proliferation of mobile devices. Malware is now so carefully written that it is difficult to detect. Due to the exponential growth in malware, manual methods of malware are increasingly ineffective. Although prior writers have proposed numerous high-quality approaches, static and dynamic assessments inherently necessitate intricate procedures. The obfuscation methods used by modern malware are incredibly complex and clever. As a result, it cannot be detected using only static malware analysis. As a result, this work presents a hybrid analysis approach, partially tailored for multiple-feature data, for identifying Android malware and classifying malware families to improve Android malware detection and classification. This paper offers a hybrid method that combines static and dynamic malware analysis to give a full view of the threat. Three distinct phases make up the framework proposed in this research. Normalization and feature extraction procedures are used in the first phase of pre-processing. Both static and dynamic features undergo feature selection in the second phase. Two feature selection strategies are proposed to choose the best subset of features to use for both static and dynamic features. The third phase involves applying a newly proposed detection model to classify android apps; this model uses a neural network optimized with an improved version of HHO. Application of binary and multi-class classification is used, with binary classification for benign and malware apps and multi-class classification for detecting malware categories and families. By utilizing the features gleaned from static and dynamic malware analysis, several machine-learning methods are used for malware classification. According to the results of the experiments, the hybrid approach improves the accuracy of detection and classification of Android malware compared to the scenario when considering static and dynamic information separately.

Deep learning-powered malware detection in cyberspace: a contemporary review

“…In the field of malware detection using deep learning, there are several challenges that need to be addressed and promising avenues for future research [23, [73][74][75][76][77][78][79][80][81][82][83][84][85]. Figure 5 illustrates the open challenges associated with the deep learning-powered malware detection in cyberspace.…”

ZTA: A Novel Zero Trust Framework for Detection and Prevention of Malicious Android Applications

“…Al-Saedi et al [44] introduced DroidDetector with 96.76% accuracy in classifying apps as benign or malignant. Fatma et al [45] used a hybrid technique, considering static and dynamic analysis's pros and cons. Shimpi et al [46] proposed a framework, training a classification model on the OmniDroid dataset with malware and benign apps.…”

A Malicious Code Detection Method Based on Stacked Depthwise Separable Convolutions and Attention Mechanism

“…Hybrid detection technology combines static and dynamic detection techniques [ 22 ]. It utilizes static detection methods to extract the static features of malicious code, providing insight into the internal information of the malicious code.…”