Feature selection‐based android malware adversarial sample generation and detection method
Abstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack...
Main Authors: | , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Hindawi-IET
2021-11-01
|
Series: | IET Information Security |
Subjects: | |
Online Access: | https://doi.org/10.1049/ise2.12030 |
_version_ | 1797422233003491328 |
---|---|
author | Xiangjun Li Ke Kong Su Xu Pengtao Qin Daojing He |
author_facet | Xiangjun Li Ke Kong Su Xu Pengtao Qin Daojing He |
author_sort | Xiangjun Li |
collection | DOAJ |
description | Abstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack. To clarify the process and theory of adversarial sample generation, an adversarial sample generation algorithm is proposed that filters features based on feature spatial distribution and definition. These features are modified on real malicious samples to form adversarial samples. In addition, to enhance the robustness of adversarial sample classification detection, a multiple feature set detection algorithm is designed and implemented. Using the frequency differential enhancement feature selection algorithm to perform feature screening, the algorithm forms two different feature sets and establishes two different training sets to train different classification algorithms. Prediction results obtained by the two classification algorithms are integrated based on certain rules. Experimental results on the VirusShare dataset show that both algorithms are effective. The detection results in an actual environment also prove the effectiveness of the multiple feature set detection algorithm. |
first_indexed | 2024-03-09T07:29:16Z |
format | Article |
id | doaj.art-728c020b100e48d3abe8f167ac61b122 |
institution | Directory Open Access Journal |
issn | 1751-8709 1751-8717 |
language | English |
last_indexed | 2024-03-09T07:29:16Z |
publishDate | 2021-11-01 |
publisher | Hindawi-IET |
record_format | Article |
series | IET Information Security |
spelling | doaj.art-728c020b100e48d3abe8f167ac61b1222023-12-03T06:34:18ZengHindawi-IETIET Information Security1751-87091751-87172021-11-0115640141610.1049/ise2.12030Feature selection‐based android malware adversarial sample generation and detection methodXiangjun Li0Ke Kong1Su Xu2Pengtao Qin3Daojing He4School of Software Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Software Nanchang University Nanchang Jiangxi ChinaAbstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack. To clarify the process and theory of adversarial sample generation, an adversarial sample generation algorithm is proposed that filters features based on feature spatial distribution and definition. These features are modified on real malicious samples to form adversarial samples. In addition, to enhance the robustness of adversarial sample classification detection, a multiple feature set detection algorithm is designed and implemented. Using the frequency differential enhancement feature selection algorithm to perform feature screening, the algorithm forms two different feature sets and establishes two different training sets to train different classification algorithms. Prediction results obtained by the two classification algorithms are integrated based on certain rules. Experimental results on the VirusShare dataset show that both algorithms are effective. The detection results in an actual environment also prove the effectiveness of the multiple feature set detection algorithm.https://doi.org/10.1049/ise2.12030pattern classificationinvasive softwareAndroid (operating system)feature extractionmobile computingsmart phones |
spellingShingle | Xiangjun Li Ke Kong Su Xu Pengtao Qin Daojing He Feature selection‐based android malware adversarial sample generation and detection method IET Information Security pattern classification invasive software Android (operating system) feature extraction mobile computing smart phones |
title | Feature selection‐based android malware adversarial sample generation and detection method |
title_full | Feature selection‐based android malware adversarial sample generation and detection method |
title_fullStr | Feature selection‐based android malware adversarial sample generation and detection method |
title_full_unstemmed | Feature selection‐based android malware adversarial sample generation and detection method |
title_short | Feature selection‐based android malware adversarial sample generation and detection method |
title_sort | feature selection based android malware adversarial sample generation and detection method |
topic | pattern classification invasive software Android (operating system) feature extraction mobile computing smart phones |
url | https://doi.org/10.1049/ise2.12030 |
work_keys_str_mv | AT xiangjunli featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod AT kekong featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod AT suxu featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod AT pengtaoqin featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod AT daojinghe featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod |