Feature selection‐based android malware adversarial sample generation and detection method

Abstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack...

Full description

Bibliographic Details
Main Authors: Xiangjun Li, Ke Kong, Su Xu, Pengtao Qin, Daojing He
Format: Article
Language:English
Published: Hindawi-IET 2021-11-01
Series:IET Information Security
Subjects:
Online Access:https://doi.org/10.1049/ise2.12030
_version_ 1797422233003491328
author Xiangjun Li
Ke Kong
Su Xu
Pengtao Qin
Daojing He
author_facet Xiangjun Li
Ke Kong
Su Xu
Pengtao Qin
Daojing He
author_sort Xiangjun Li
collection DOAJ
description Abstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack. To clarify the process and theory of adversarial sample generation, an adversarial sample generation algorithm is proposed that filters features based on feature spatial distribution and definition. These features are modified on real malicious samples to form adversarial samples. In addition, to enhance the robustness of adversarial sample classification detection, a multiple feature set detection algorithm is designed and implemented. Using the frequency differential enhancement feature selection algorithm to perform feature screening, the algorithm forms two different feature sets and establishes two different training sets to train different classification algorithms. Prediction results obtained by the two classification algorithms are integrated based on certain rules. Experimental results on the VirusShare dataset show that both algorithms are effective. The detection results in an actual environment also prove the effectiveness of the multiple feature set detection algorithm.
first_indexed 2024-03-09T07:29:16Z
format Article
id doaj.art-728c020b100e48d3abe8f167ac61b122
institution Directory Open Access Journal
issn 1751-8709
1751-8717
language English
last_indexed 2024-03-09T07:29:16Z
publishDate 2021-11-01
publisher Hindawi-IET
record_format Article
series IET Information Security
spelling doaj.art-728c020b100e48d3abe8f167ac61b1222023-12-03T06:34:18ZengHindawi-IETIET Information Security1751-87091751-87172021-11-0115640141610.1049/ise2.12030Feature selection‐based android malware adversarial sample generation and detection methodXiangjun Li0Ke Kong1Su Xu2Pengtao Qin3Daojing He4School of Software Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Information Engineering Nanchang University Nanchang Jiangxi ChinaSchool of Software Nanchang University Nanchang Jiangxi ChinaAbstract With the popularisation of Android smartphones, the value of mobile application security research has increased. The emergence of adversarial technology makes it possible for malware to evade detection. Therefore, research is conducted on Android malicious applications of adversarial attack. To clarify the process and theory of adversarial sample generation, an adversarial sample generation algorithm is proposed that filters features based on feature spatial distribution and definition. These features are modified on real malicious samples to form adversarial samples. In addition, to enhance the robustness of adversarial sample classification detection, a multiple feature set detection algorithm is designed and implemented. Using the frequency differential enhancement feature selection algorithm to perform feature screening, the algorithm forms two different feature sets and establishes two different training sets to train different classification algorithms. Prediction results obtained by the two classification algorithms are integrated based on certain rules. Experimental results on the VirusShare dataset show that both algorithms are effective. The detection results in an actual environment also prove the effectiveness of the multiple feature set detection algorithm.https://doi.org/10.1049/ise2.12030pattern classificationinvasive softwareAndroid (operating system)feature extractionmobile computingsmart phones
spellingShingle Xiangjun Li
Ke Kong
Su Xu
Pengtao Qin
Daojing He
Feature selection‐based android malware adversarial sample generation and detection method
IET Information Security
pattern classification
invasive software
Android (operating system)
feature extraction
mobile computing
smart phones
title Feature selection‐based android malware adversarial sample generation and detection method
title_full Feature selection‐based android malware adversarial sample generation and detection method
title_fullStr Feature selection‐based android malware adversarial sample generation and detection method
title_full_unstemmed Feature selection‐based android malware adversarial sample generation and detection method
title_short Feature selection‐based android malware adversarial sample generation and detection method
title_sort feature selection based android malware adversarial sample generation and detection method
topic pattern classification
invasive software
Android (operating system)
feature extraction
mobile computing
smart phones
url https://doi.org/10.1049/ise2.12030
work_keys_str_mv AT xiangjunli featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod
AT kekong featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod
AT suxu featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod
AT pengtaoqin featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod
AT daojinghe featureselectionbasedandroidmalwareadversarialsamplegenerationanddetectionmethod