| 基于权限和API特征结合的Android恶意软件检测方法 |
| |
| 引用本文： | 邵舒迪,虞慧群,范贵生.基于权限和API特征结合的Android恶意软件检测方法[J].计算机科学,2017,44(4):135-139. |
| |
| 作者姓名： | 邵舒迪 虞慧群 范贵生 |
| |
| 作者单位： | 华东理工大学信息科学与工程学院 上海200237;上海市计算机软件评测重点实验 上海201112,华东理工大学信息科学与工程学院 上海200237,华东理工大学信息科学与工程学院 上海200237 |
| |
| 基金项目： | 本文受国家自然科学基金(60905043,7,61173048),高等学校博士学科点专项科研基金(20130074110015),中央高校基本科研业务费专项基金(WH1314038)资助 |
| |
| 摘 要： | 随着Android操作系统的广泛应用,基于Android平台的应用程序的数量日益增长。如何有效地识别恶意软件,对保护手机的安全性至关重要。提出了基于权限和API特征结合的Android恶意软件检测方法,该方法通过反编译apk文件来提取权限特征和API特征,并将两者相结合作为一个整体的特征集合。在此基础上,采用分类算法进行恶意软件的甄别。实验结果表明,该方法的判别准确率高于权限集合或API集合单独作为特征的判别方法,从而能更加有效地检测Android恶意应用程序。
|
| 关 键 词： | API 权限 特征集合 Android应用 恶意软件检测 |
| 收稿时间： | 2015/11/30 0:00:00 |
| 修稿时间： | 2016/2/24 0:00:00 |
Detecting Malware by Combining API and Permission Features |
| |
| SHAO Shu-di,YU Hui-qun and FAN Gui-sheng.Detecting Malware by Combining API and Permission Features[J].Computer Science,2017,44(4):135-139. |
| |
| Authors: | SHAO Shu-di YU Hui-qun and FAN Gui-sheng |
| |
| Affiliation: | School of Information Science and Engineering,East China University of Science and Technology,Shanghai 200237,China;Shanghai Key Laboratory of Computer Software Testing and Evaluating,Shanghai 201112,China,School of Information Science and Engineering,East China University of Science and Technology,Shanghai 200237,China and School of Information Science and Engineering,East China University of Science and Technology,Shanghai 200237,China |
| |
| Abstract: | With the use of Android OS,the number of Android applications is getting larger and larger.Therefore,how to detect malware is very important for protecting the mobile phone security.In this paper,we extracted API feature and permission feature by reverse-engineering the apk files respectively.Then,the two features are combined into a feature set.Finally,with different classification algorithms,the malwares can be detected.As a result,compared to single API or permission feature,higher detecting accuracy is gotten,which shows that the feature combination of permission and API is more efficient in detecting malicious Android applications. |
| |
| Keywords: | API Permission Feature set Android applications Malware detection |
|
|
点击此处可从《计算机科学》下载全文 |
|
