Title
A Novel Hybrid Mobile Malware Detection System Integrating Anomaly Detection With Misuse Detection
Abstract
As the dominator of the Smartphone operating system market, Android has attracted the attention of malware authors and researchers alike. The number of Android malware is increasing rapidly regardless of the considerable number of proposed malware analysis systems. In this paper, by taking advantages of low false-positive rate of misuse detection and the ability of anomaly detection to detect zero-day malware, we propose a novel hybrid detection system based on a new open-source framework CuckooDroid, which enables the use of Cuckoo Sandbox's features to analyze Android malware through dynamic and static analysis. Our proposed system mainly consist of two parts, a misuse detector performing known malware detection and classification through combining static analysis with dynamic analysis; an anomaly detector performing abnormal apps detection through dynamic analysis. We evaluate our method with 5560 malware samples and 12000 benign samples. Experiments shows that our misuse detector with hybrid analysis can accurately detect and classify malware samples with an average positive rate 98.79%, 98.32% respectively; it is worth noting that our anomaly detector by dynamic analysis is capable of detecting zero-day malware with a low false negative rate (1.24%) and acceptable false positive rate (2.24%). Our proposed detection system is mainly designed for App store markets and the ordinary users who can access our system through mobile cloud service.
Year
DOI
Venue
2015
10.1145/2802130.2802132
MCS@MobiCom
Field
DocType
Citations 
Mobile malware,Sandbox (computer security),False positive rate,Data mining,Anomaly detection,Android (operating system),Computer security,Computer science,Malware,Misuse detection,Malware analysis
Conference
7
PageRank 
References 
Authors
0.47
17
6
Name
Order
Citations
PageRank
Xiaolei Wang1163.10
Yuexiang Yang25512.66
Yingzhi Zeng3225.59
Chuan Tang4153.70
Jiangyong Shi581.17
Kele Xu64621.80