混合机器学习与深度学习,实时检测安卓恶意软件
ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection
- 结合动态分析与随机森林+多层感知机的混合模型
- 检测准确率达97.5%,耗时仅22.945秒
- 适合移动安全防护与应用商店恶意软件筛查
现代技术快速发展推动智能手机和平板电脑广泛应用,移动应用普及率上升。尽管应用在官方应用商店发布前需经过恶意软件筛查,但许多恶意应用仍通过隐藏复杂变种逃避检测。这些恶意行为通常仅在运行时激活,传统静态分析难以识别,可能导致安装后造成不可逆损害。本研究提出一种实时安卓恶意软件检测框架,通过分析应用行为精准识别并分类复杂恶意软件。采用混合动态分析技术区分恶意与良性应用,对收集数据集进行预处理和过滤后,使用多种机器学习算法进行分类。综合性能评估比较了不同分类技术在检测准确率与执行时间上的表现。实验结果表明,随机森林与多层感知机的混合模型整体性能最优,准确率达97.5%,执行时间仅为22.945秒。该框架可提升移动设备安全,实现恶意应用的及时检测,降低网络攻击风险。
原文摘要 · Abstract (English)
The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on official app stores, many malicious applications successfully evade detection by concealing sophisticated malware variants. These malicious behaviors are often activated only during runtime, making them difficult to identify through conventional static analysis. As a result, malware may remain undetected until after installation, potentially causing irreversible damage to users and their devices. This study presents a real-time Android malware detection framework that analyzes application behavior to accurately identify and classify complex malware. The proposed approach employs a hybrid dynamic analysis technique to distinguish malicious applications from benign ones. After preprocessing and filtering the collected dataset, the applications are classified using multiple machine learning algorithms. A comprehensive performance evaluation is conducted to compare the effectiveness of different classification techniques in terms of detection accuracy and execution time. Experimental results demonstrate that a hybrid model combining Random Forest and a Multilayer Perceptron achieves the best overall performance, attaining an accuracy of 97.5% with an execution time of 22.945 seconds. The proposed framework can enhance mobile device security by enabling timely detection of malicious applications and reducing the risk of cyberattacks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。