检索结果-南通市图书馆

ArgusDroid: detecting Android malware variants by mining permission-API knowledge graph

Science China(Information Sciences) 2023年第9期66卷 115-133页

作者： Yude BAI Sen CHEN Zhenchang XING Xiaohong LI College of Intelligence and Computing Tianjin University Research School of Computer Science Australian National University

malware family variants make minor and relevant changes of behaviors based on the original malware. To analyze and detect family variants, security experts must not only understand malware behaviors but also further observe the correlation between the features of these behaviors. However, the recent data-driven based behavior features are too independent and sometimes too general to obtain a comprehensive profile of the changeable malicious behaviors of family variants derived from the original malware.Those features additionally suffer from limited semantic knowledge which narrows the comprehension of family variants. To this end, in this paper, we propose ArgusDroid that takes advantage of the knowledge graph(KG) to construct a permission-API knowledge graph based on the official Android document. Because each permission or API in the document is described by a specific sentence, we can easily acquire and comprehend the relationship between different features via the hyperlink in sentences or sentence similarity. ArgusDroid also extracts various feature sets from the knowledge graph and validates the detection performance on Android malware family variants based on these features. Extensive experiments by using machine learning and neural network classifiers for variant identification have been carried out. The experimental results demonstrate the effectiveness and usefulness of our obtained feature sets based on ArgusDroid, especially when using the classifiers convolutional neural network(CNN) and multi-layer perception(MLP). Furthermore,when compared to similar feature sets that aim to present relationships across different feature types, such as Axplorer, ArgusDroid generates the feature set which significantly improves malware variant detection by 0.3575 average F1.

关键词： malicious behavior Android document knowledge graph malware family variant machine learning

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：