Volume 38, Number 5, October 2020
|Page(s)||965 - 970|
|Published online||08 December 2020|
Android Malware Detection Based on API Pairing
School of Automation, Northwestern Polytechnical University, Xi'an 710072, China
2 Zhengzhou University, Zhengzhou 450000, China
Aiming at the problem that the permission-based detection is too coarse-grained, a malware detection method based on sensitive application program interface(API) pairing is proposed. The method decompiles the application to extract the sensitive APIs corresponding to the dangerous permissions, and uses the pairing of the sensitive APIs to construct the undirected graph of malicious applications and undirected graph of benign applications. According to the importance of sensitive APIs in malware and benign applications, different weights on the same edge in the different graphs are assigned to detect Android malicious applications. Experimental results show that the proposed method can effectively detect Android malicious applications and has practical significance.
针对基于Android应用程序申请权限的检测过于粗粒度的问题，提出了基于敏感应用程序编程接口（application program interface，API）配对的恶意应用检测方法。通过反编译应用程序提取危险权限对应的敏感API，将敏感API两两配对分别构建恶意应用无向图与良性应用无向图，再根据恶意应用和良性应用在敏感API调用上的差异分配相同边不同的权重，以此检测Android恶意应用。实验结果表明，提出的方法可以有效地检测出Android恶意应用程序，具有现实意义。
Key words: Android / permission / application program interface (API) / malware detection
关键字 : 安卓系统 / 权限 / 应用程序编程接口 / 恶意应用
© 2020 Journal of Northwestern Polytechnical University. All rights reserved.
This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Current usage metrics show cumulative count of Article Views (full-text article views including HTML views, PDF and ePub downloads, according to the available data) and Abstracts Views on Vision4Press platform.
Data correspond to usage on the plateform after 2015. The current usage metrics is available 48-96 hours after online publication and is updated daily on week days.
Initial download of the metrics may take a while.