计算机工程与设计2024,Vol.45Issue(2) :390-395.DOI:10.16208/j.issn1000-7024.2024.02.009

融合多样频度与分布差异的Android恶意软件检测

Android malware detection combining various frequency and difference in distribution

赵旭康 刘晓锋 徐洁
计算机工程与设计2024,Vol.45Issue(2) :390-395.DOI:10.16208/j.issn1000-7024.2024.02.009

融合多样频度与分布差异的Android恶意软件检测

Android malware detection combining various frequency and difference in distribution

赵旭康 1刘晓锋 1徐洁2
扫码查看

作者信息

  • 1. 西华师范大学计算机学院,四川南充 637009
  • 2. 西华师范大学电子信息工程学院,四川南充 637009
  • 折叠

摘要

为解决Android恶意软件检测中特征数量多且检测精度不足的问题,提出一种特征重要性的评分算法.改进词频与逆文本频率指数中对常见特征权重下降的不足,将权限、意图和接口 3种类型的静态特征在良性与恶意数据集中表现出的多样频度与分布差异相结合,根据得出的评分大小依次排名,筛选出更有区分度的关键特征.实验结果表明,将该方法筛选出的前150个关键特征与随机森林模型结合,达到的98.82%准确率优于同等条件下的其它算法,满足实际运用的需求.

Abstract

To solve the problems of too many features and insufficient accuracy in Android malware detection,a feature impor-tance scoring algorithm was proposed.The lack of weight reduction of common features in term frequency and inverse document frequency was improved.Three types of static features of permission,intention and interface were extracted.The diverse fre-quency and distribution differences in benign and malicious data sets were extracted,and they were ranked successively according to the resulting score size.The key features with more differentiation were screened out.Experimental results show that,combi-ning the first 150 key features selected using this method with random forest model,the accuracy reaches 98.82%that is superior to other algorithms under the same conditions,which meets the needs of practical application.

关键词

特征重要性评分/特征选择/机器学习/恶意软件检测/静态分析/随机森林/移动安全

Key words

feature importance score/feature selection/machine learning/malware detection/static analysis/random forest/mobile sercurity

引用本文复制引用

基金项目

四川省教育厅重点基金项目(16ZA0174)

四川省科技厅自然科学基金项目(2022NSFSC0536)

出版年

2024
计算机工程与设计
中国航天科工集团二院706所

计算机工程与设计

CSTPCD北大核心
影响因子:0.617
ISSN:1000-7024
参考文献量15
段落导航相关论文