BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices

Android has become the leading operating system for mobile devices, and the most targeted one by malware. Therefore, many analysis methods have been proposed for detecting Android malware. However, few of them use proper datasets for evaluation. In this paper, we propose BrainShield, a hybrid malwar...

Full description

Bibliographic Details
Main Authors: Corentin Rodrigo, Samuel Pierre, Ronald Beaubrun, Franjieh El Khoury
Format: Article
Language:English
Published: MDPI AG 2021-11-01
Series:Electronics
Subjects:
Online Access:https://www.mdpi.com/2079-9292/10/23/2948
_version_ 1797507908976508928
author Corentin Rodrigo
Samuel Pierre
Ronald Beaubrun
Franjieh El Khoury
author_facet Corentin Rodrigo
Samuel Pierre
Ronald Beaubrun
Franjieh El Khoury
author_sort Corentin Rodrigo
collection DOAJ
description Android has become the leading operating system for mobile devices, and the most targeted one by malware. Therefore, many analysis methods have been proposed for detecting Android malware. However, few of them use proper datasets for evaluation. In this paper, we propose BrainShield, a hybrid malware detection model trained on the Omnidroid dataset to reduce attacks on Android devices. The latter is the most diversified dataset in terms of the number of different features, and contains the largest number of samples, 22,000 samples, for model evaluation in the Android malware detection field. BrainShield’s implementation is based on a client/server architecture and consists of three fully connected neural networks: (1) the first is used for static analysis and reaches an accuracy of 92.9% trained on 840 static features; (2) the second is a dynamic neural network that reaches an accuracy of 81.1% trained on 3722 dynamic features; and (3) the third neural network proposed is hybrid, reaching an accuracy of 91.1% trained on 7081 static and dynamic features. Simulation results show that BrainShield is able to improve the accuracy and the precision of well-known malware detection methods.
first_indexed 2024-03-10T04:55:08Z
format Article
id doaj.art-49cf9b1663044b66bb7a8c21a4bee028
institution Directory Open Access Journal
issn 2079-9292
language English
last_indexed 2024-03-10T04:55:08Z
publishDate 2021-11-01
publisher MDPI AG
record_format Article
series Electronics
spelling doaj.art-49cf9b1663044b66bb7a8c21a4bee0282023-11-23T02:16:33ZengMDPI AGElectronics2079-92922021-11-011023294810.3390/electronics10232948BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android DevicesCorentin Rodrigo0Samuel Pierre1Ronald Beaubrun2Franjieh El Khoury3Mobile Computing and Networking Research Laboratory (LARIM), Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC H3T 1J4, CanadaMobile Computing and Networking Research Laboratory (LARIM), Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC H3T 1J4, CanadaDepartment of Computer Science and Software Engineering, Laval University, Pavillon Adrien-Pouliot, Quebec, QC G1V 0A6, CanadaMobile Computing and Networking Research Laboratory (LARIM), Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC H3T 1J4, CanadaAndroid has become the leading operating system for mobile devices, and the most targeted one by malware. Therefore, many analysis methods have been proposed for detecting Android malware. However, few of them use proper datasets for evaluation. In this paper, we propose BrainShield, a hybrid malware detection model trained on the Omnidroid dataset to reduce attacks on Android devices. The latter is the most diversified dataset in terms of the number of different features, and contains the largest number of samples, 22,000 samples, for model evaluation in the Android malware detection field. BrainShield’s implementation is based on a client/server architecture and consists of three fully connected neural networks: (1) the first is used for static analysis and reaches an accuracy of 92.9% trained on 840 static features; (2) the second is a dynamic neural network that reaches an accuracy of 81.1% trained on 3722 dynamic features; and (3) the third neural network proposed is hybrid, reaching an accuracy of 91.1% trained on 7081 static and dynamic features. Simulation results show that BrainShield is able to improve the accuracy and the precision of well-known malware detection methods.https://www.mdpi.com/2079-9292/10/23/2948android deviceBrainShieldhybrid modelmachine learningmalware detectionOmnidroid
spellingShingle Corentin Rodrigo
Samuel Pierre
Ronald Beaubrun
Franjieh El Khoury
BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
Electronics
android device
BrainShield
hybrid model
machine learning
malware detection
Omnidroid
title BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
title_full BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
title_fullStr BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
title_full_unstemmed BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
title_short BrainShield: A Hybrid Machine Learning-Based Malware Detection Model for Android Devices
title_sort brainshield a hybrid machine learning based malware detection model for android devices
topic android device
BrainShield
hybrid model
machine learning
malware detection
Omnidroid
url https://www.mdpi.com/2079-9292/10/23/2948
work_keys_str_mv AT corentinrodrigo brainshieldahybridmachinelearningbasedmalwaredetectionmodelforandroiddevices
AT samuelpierre brainshieldahybridmachinelearningbasedmalwaredetectionmodelforandroiddevices
AT ronaldbeaubrun brainshieldahybridmachinelearningbasedmalwaredetectionmodelforandroiddevices
AT franjiehelkhoury brainshieldahybridmachinelearningbasedmalwaredetectionmodelforandroiddevices