Obfuscation-resilient Android Malware Detection Based on Graph Convolutional Networks
Author:
  • WU Yue-Ming

    WU Yue-Ming

    National Engineering Research Center for Big Data Technology and System (Key Laboratory of Services Computing Technology and System, Ministry of Education, Huazhong University of Science and Technology), Wuhan 430074, China;Hubei Key Laboratory of Distributed System Security, Wuhan 430074, China;School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China
    Find this author on CNKI
    Find this author on BaiDu
    Search for this author on this site
  • QI Meng

    QI Meng

    National Engineering Research Center for Big Data Technology and System (Key Laboratory of Services Computing Technology and System, Ministry of Education, Huazhong University of Science and Technology), Wuhan 430074, China;Hubei Key Laboratory of Distributed System Security, Wuhan 430074, China;School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China
    Find this author on CNKI
    Find this author on BaiDu
    Search for this author on this site
  • ZOU De-Qing

    ZOU De-Qing

    National Engineering Research Center for Big Data Technology and System (Key Laboratory of Services Computing Technology and System, Ministry of Education, Huazhong University of Science and Technology), Wuhan 430074, China;Hubei Key Laboratory of Distributed System Security, Wuhan 430074, China;School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China
    Find this author on CNKI
    Find this author on BaiDu
    Search for this author on this site
  • JIN Hai

    JIN Hai

    National Engineering Research Center for Big Data Technology and System (Key Laboratory of Services Computing Technology and System, Ministry of Education, Huazhong University of Science and Technology), Wuhan 430074, China;School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan 430074, China
    Find this author on CNKI
    Find this author on BaiDu
    Search for this author on this site
Affiliation:

  • Article
  • | |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • | |
  • Comments
    Abstract:

    Since the release of Android, it has become the most widely used mobile phone operating system in the world due to its advantages such as open source, rich hardware, and diverse application markets. At the same time, the explosive growth of Android devices and Android applications (app for short) has made it a target of 96% of mobile malware. Among current detection methods, the direct extraction of simple program features, ignoring the program semantics is fast but less accurate, and the conversion of semantic information of programs into graph models for analysis improves accuracy but has high runtime overhead and is not very scalable. To address these challenges, the program semantics of an App is distilled into a function call graph and the API call is abstracted to convert the call graph into a simpler graph. Finally, these vectors are fed into a graph convolution network (GCN) model to train a classifier with triplet loss (i.e., SriDroid). After conducting experimental analysis on 20 246 Android apps, it is found that SriDroid can achieve 99.17% malware detection accuracy with sound robustness.

    Reference
    Related
    Cited by
Get Citation

吴月明,齐蒙,邹德清,金海.图卷积网络的抗混淆安卓恶意软件检测.软件学报,2023,34(6):2526-2542

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:September 05,2022
  • Revised:October 10,2022
  • Online: January 13,2023
  • Published: June 06,2023
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063