Android malware detection method based on SimHash

Bo CHEN; Yong-tao PAN; Tie-ming CHEN

doi:10.11959/j.issn.1000-436x.2017271

您当前的位置：

首页 >

文章列表页 >

Android malware detection method based on SimHash

Papers | 更新时间：2024-06-05

- Android malware detection method based on SimHash
- Journal on Communications Vol. 38, Issue Z2, Pages: 30-36(2017)
- 作者机构：
  
  浙江工业大学计算机学院，浙江杭州 310023
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-436x.2017271
  CLC： TP393
- Online First：2017-11，
  
  Published：25 November 2017
- 稿件说明：
移动端阅览
Bo CHEN, Yong-tao PAN, Tie-ming CHEN. Android malware detection method based on SimHash[J]. Journal on Communications, 2017, 38(Z2): 30-36.
DOI：

Bo CHEN, Yong-tao PAN, Tie-ming CHEN. Android malware detection method based on SimHash[J]. Journal on Communications, 2017, 38(Z2): 30-36. DOI： 10.11959/j.issn.1000-436x.2017271.

摘要

提出一个基于多层SimHash的相似度检测方法，通过对APK文件进行分析，最终从5个方面提取分析内容来表征 APK，同时在每一层上使用改进的 SimHash 方法进行相似度检测分析。通过从 APK 文件中提取的AndroidManifest.xml 文件、从 dex 反编译得出的 Smali 代码累加和、Smali 文件指令提取、Java 代码集合、Java指令集提取5个层面进行分析。同时通过学习Voted Perceptron投票算法，将其应用到检测过程中，采用信任值权重的方法，为每一层赋予一个可信值，并在最后得出结果时将每一层结果结合权重分析，实验分析结果表明该方法具有更好的检测效果。

Abstract

A new similarity detection scheme based on hierarchical SimHash algorithm was proposed.The scheme extractd contents from different aspects to represent the APK file

then used the improved SimHash to respectively represent the file.The scheme analyzed the APK file by extracting the AndroidManifest.xml file in it

the sum of the Smali code from the decompilation of dex file

instructions extracted in Smali files

Java code set

and instructions extracted in Java code files.Through the study of Voted Perceptron voting algorithm

the scheme used trust weight method

by valuating a trust weight in every layer

then combined all the result with weight in every layer as a resule of scheme

the result can be more reasonable and more convincing.

关键词

Keywords

references

YAN Q , LI Y , LI T , et al . Insights into malware detection and prevention on mobile phones [C ] // Security Technology - International Conference,Sectech 2009,Held As . DBLP , 2009 : 242 - 249 .

CHANDRAMOHAN M , TAN H B K . Detection of mobile malware in the wild [J ] . Computer , 2012 , 45 ( 9 ): 65 - 71 .

SOOD S . Probabilistic SimHash Matching [J ] . 2011 .

UDDIN M S , ROY C K , SCHNEIDER K A , et al . On the effectiveness of SimHash for detecting near-miss clones in large scale software systems [C ] // Working Conference on Reverse Engineering . IEEE , 2011 : 13 - 22 .

余意 , 张玉柱 , 胡自健 . 基于SimHash算法的大规模文档去重技术研究 [J ] . 信息通信 , 2015 ( 2 ): 28 - 29 .

BUYRUKBILEN S , BAKIRAS S . Secure similar document detection with SimHash [M ] // Secure Data Management . 2014 : 61 - 75 .

MANKU G S , JAIN A , SARMA A D . Detecting near-duplicates for web crawling [C ] // International Conference on World Wide Web . ACM , 2007 : 141 - 150 .

周龙泉 , 卫文学 . 基于主成分分析与 SimHash 的入侵检测方法 [J ] . 计算机与数字工程 , 2015 ( 7 ): 1291 - 1294 .

ZHOU L Q , WEI W X . Intrusion detectin method based on principal component analysis and SimHash [J ] . Computer and Digital Engineering , 2015 ( 7 ): 1291 - 1294 .

FREUND Y , SCHAPIRE R E . large margin classification using the perceptron algorithm [J ] . Machine Learning , 1999 , 37 ( 3 ): 277 - 296 .

Views

1746

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Traffic characteristic based privacy leakage assessment scheme for Android device

Intelligent forecasting and monitoring of air index based on big data and internet of things

DroidBet:event-driven automatic detection of network behaviors for Android applications

Wi-Fi security evaluation model based on BP neural network

Survey of security for Android smart terminal

Related Author

Fenghua LI

Ben NIU

Xinyu WANG

Kun HE

Zhu WANG

Qi-ming LIU

Jun GAO

Cheng ZHU

Related Institution

Institute of Information Engineering, Chinese Academy of Sciences

School of Cyber Security, University of Chinese Academy of Sciences

School of Electronic and Optical Engineering,Nanjing University of Science and Technology

School of Information Engineering, Yancheng Institute of Technology

School of Computer Science and Engineering, Nanjing University of Science and Technology

AI问答

⁰