Chinese Journal of Network and Information Security ›› 2019, Vol. 5 ›› Issue (6): 85-94.doi: 10.11959/j.issn.2096-109x.2019064

• Papers • Previous Articles     Next Articles

Multi-granularity Android malware fast detection based on opcode

Xuetao ZHANG,Meng SUN,Jinshuang WANG()   

  1. Institute of Command Control Engineering,Army Engineering University,Nanjing 210001,China
  • Revised:2019-06-14 Online:2019-12-15 Published:2019-12-14

Abstract:

The detection method based on opcode is widely used in Android malware detection,but it still contains some problems such as complex feature extraction method and low efficiency.In order to solve these problems,a multi-granularity fast detection method based on opcode for Android malware was proposed.Multi-granularity refers to the feature based on the bag of words model,and with the function as basic unit to extract features.By step-by-level aggregation feature,the APK multi-level information is obtained.The log length characterizes the scale of the function.And feature can be compressed and mapped to improve the efficiency and construct the corresponding classification model based on the semantic similarity of the Dalvik instruction set.Tests show that the proposed method has obvious advantages in performance and efficiency.

Key words: opcode, compression map, multi-granularity, rapid detection, convolutional neural networks

CLC Number: 

No Suggested Reading articles found!