A static analysis approach for android permission-based malware detection systems

• Main Authors: Juliza, Mohamad Arif, Ab Razak, Mohd Faizal, Suryanti, Awang, Sharfah Ratibah, Tuan Mat, Nor Syahidatul Nadiah, Ismail, Ahmad Firdaus, Zainal Abidin
• Format: Article
• Language: English
• Published: Public Library of Science 2021
• Subjects: QA76 Computer software
• Online Access: http://umpir.ump.edu.my/id/eprint/32478/1/A%20static%20analysis%20approach%20for%20Android%20permission.pdf; http://umpir.ump.edu.my/id/eprint/32478/; https://doi.org/10.1371/journal.pone.0257968; https://doi.org/10.1371/journal.pone.0257968
• Institution: Universiti Malaysia Pahang

The evolution of malware is causing mobile devices to crash with increasing frequency. Therefore, adequate security evaluations that detect Android malware are crucial. Two techniques can be used in this regard: Static analysis, which meticulously examines the full codes of applications, and dynamic analysis, which monitors malware behaviour. While both perform security evaluations successfully, there is still room for improvement. The goal of this research is to examine the effectiveness of static analysis to detect Android malware by using permission-based features. This study proposes machine learning with different sets of classifiers was used to evaluate Android malware detection. The feature selection method in this study was applied to determine which features were most capable of distinguishing malware. A total of 5,000 Drebin malware samples and 5,000 Androzoo benign samples were utilised. The performances of the different sets of classifiers were then compared. The results indicated that with a TPR value of 91.6%, the Random Forest algorithm achieved the highest level of accuracy in malware detection.