Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence
With the development of the Internet, the types and quantities of malware have grown rapidly, and how to identify unknown malware is becoming a new challenge. The traditional malware detection method based on fixed features is becoming more and more difficult. In order to improve detection accuracy...
| Main Authors: | , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2023-12-01
|
| Series: | Mathematics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2227-7390/12/1/20 |
| _version_ | 1797358460235415552 |
|---|---|
| author | Ye Yao Yian Zhu Yao Jia Xianchen Shi Lixiang Zhang Dong Zhong Junhua Duan |
| author_facet | Ye Yao Yian Zhu Yao Jia Xianchen Shi Lixiang Zhang Dong Zhong Junhua Duan |
| author_sort | Ye Yao |
| collection | DOAJ |
| description | With the development of the Internet, the types and quantities of malware have grown rapidly, and how to identify unknown malware is becoming a new challenge. The traditional malware detection method based on fixed features is becoming more and more difficult. In order to improve detection accuracy and efficiency for mobile terminals, this paper proposed a malware detection method for mobile terminals based on application programming interface (API) call sequence, which was characterized by the API call sequence and used a series of feature preprocessing techniques to remove redundant processing of the API call sequence. Finally, the recurrent neural network method (RNN) was used to build the model and perform detection and verification. Furthermore, this paper constructed a malware detection model based on a two-way recurrent neural network and used the two-way long short-term memory network model (LSTM) to train the data set containing 5986 malware samples and 5065 benign software samples to obtain the final detection model and its parameters. Finally, the feature vector of the APK file to be detected was passed into the model and obtained the detection results. The experimental results indicated that the detection accuracy of this method can reach 93.68%. |
| first_indexed | 2024-03-08T15:02:20Z |
| format | Article |
| id | doaj.art-5917f46a9a084b0a869b4d8c4f094090 |
| institution | Directory Open Access Journal |
| issn | 2227-7390 |
| language | English |
| last_indexed | 2024-03-08T15:02:20Z |
| publishDate | 2023-12-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Mathematics |
| spelling | doaj.art-5917f46a9a084b0a869b4d8c4f0940902024-01-10T15:03:19ZengMDPI AGMathematics2227-73902023-12-011212010.3390/math12010020Research on Malware Detection Technology for Mobile Terminals Based on API Call SequenceYe Yao0Yian Zhu1Yao Jia2Xianchen Shi3Lixiang Zhang4Dong Zhong5Junhua Duan6School of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaSchool of Computer Science, Northwest University of Technology, Xi’an 710072, ChinaWith the development of the Internet, the types and quantities of malware have grown rapidly, and how to identify unknown malware is becoming a new challenge. The traditional malware detection method based on fixed features is becoming more and more difficult. In order to improve detection accuracy and efficiency for mobile terminals, this paper proposed a malware detection method for mobile terminals based on application programming interface (API) call sequence, which was characterized by the API call sequence and used a series of feature preprocessing techniques to remove redundant processing of the API call sequence. Finally, the recurrent neural network method (RNN) was used to build the model and perform detection and verification. Furthermore, this paper constructed a malware detection model based on a two-way recurrent neural network and used the two-way long short-term memory network model (LSTM) to train the data set containing 5986 malware samples and 5065 benign software samples to obtain the final detection model and its parameters. Finally, the feature vector of the APK file to be detected was passed into the model and obtained the detection results. The experimental results indicated that the detection accuracy of this method can reach 93.68%.https://www.mdpi.com/2227-7390/12/1/20cloud platformdeep learningmobile terminalmalware detection |
| spellingShingle | Ye Yao Yian Zhu Yao Jia Xianchen Shi Lixiang Zhang Dong Zhong Junhua Duan Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence Mathematics cloud platform deep learning mobile terminal malware detection |
| title | Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence |
| title_full | Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence |
| title_fullStr | Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence |
| title_full_unstemmed | Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence |
| title_short | Research on Malware Detection Technology for Mobile Terminals Based on API Call Sequence |
| title_sort | research on malware detection technology for mobile terminals based on api call sequence |
| topic | cloud platform deep learning mobile terminal malware detection |
| url | https://www.mdpi.com/2227-7390/12/1/20 |
| work_keys_str_mv | AT yeyao researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT yianzhu researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT yaojia researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT xianchenshi researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT lixiangzhang researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT dongzhong researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence AT junhuaduan researchonmalwaredetectiontechnologyformobileterminalsbasedonapicallsequence |