The DOI matches its Crossref record.
Dissecting Android Malware: Characterization and Evolution
Abstract
The popularity and adoption of smart phones has greatly stimulated the spread of mobile malware, especially on the popular platforms such as Android. In light of their rapid growth, there is a pressing need to develop effective solutions. However, our defense capability is largely constrained by the limited understanding of these emerging mobile malware and the lack of timely access to related samples. In this paper, we focus on the Android platform and aim to systematize or characterize existing Android malware. Particularly, with more than one year effort, we have managed to collect more than 1,200 malware samples that cover the majority of existing Android malware families, ranging from their debut in August 2010 to recent ones in October 2011. In addition, we systematically characterize them from various aspects, including their installation methods, activation mechanisms as well as the nature of carried malicious payloads. The characterization and a subsequent evolution-based study of representative families reveal that they are evolving rapidly to circumvent the detection from existing mobile anti-virus software. Based on the evaluation with four representative mobile security software, our experiments show that the best case detects 79.6% of them while the worst case detects only 20.2% in our dataset. These results clearly call for the need to better develop next-generation anti-mobile-malware solutions.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cited by
Cybersecurity data science: an overview from machine learning perspective
Sarker, I. H., Kayes, A. S. M., Badsha, S., Alqahtani, H., Watters, P., & Ng, A. (2020) · Journal of Big Data · doi:10.1186/s40537-020-00318-5 · Cited by 766
A Survey of Deep Learning Methods for Cyber Security
Berman, D. S., Buczak, A. L., Chavis, J. S., & Corbett, C. L. (2019) · Information · doi:10.3390/info10040122 · Cited by 569
A Survey of App Store Analysis for Software Engineering
Martin, W., Sarro, F., Jia, Y., Zhang, Y., & Harman, M. (2017) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2016.2630689 · Cited by 459
Explainable Artificial Intelligence Applications in Cyber Security: State-of-the-Art in Research
Zhang, Z., Hamadi, H. A., Damiani, E., Yeun, C. Y., & Taher, F. (2022) · IEEE Access · doi:10.1109/access.2022.3204051 · Cited by 450
Deep Cybersecurity: A Comprehensive Overview from Neural Network and Deep Learning Perspective
Sarker, I. H. (2021) · doi:10.20944/preprints202102.0340.v1 · Cited by 295
HelDroid: Dissecting and Detecting Mobile Ransomware
Andronio, N., Zanero, S., & Maggi, F. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-26362-5_18 · Cited by 246
Fed-IIoT: A Robust Federated Malware Detection Architecture in Industrial IoT
Taheri, R., Shojafar, M., Alazab, M., & Tafazolli, R. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.3043458 · Cited by 218
SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
Cerdeira, D., Santos, N., Fonseca, P., & Pinto, S. (2020) · 2020 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp40000.2020.00061 · Cited by 208
What the App is That? Deception and Countermeasures in the Android User Interface
Bianchi, A., Corbetta, J., Invernizzi, L., Fratantonio, Y., Kruegel, C., & Vigna, G. (2015) · 2015 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2015.62 · Cited by 147
Conceptual framework for the security of mobile health applications on Android platform
Hussain, M., Zaidan, A. A., Zidan, B. B., Iqbal, S., Ahmed, M. M., Albahri, O. S., & Albahri, A. S. (2018) · Telematics and Informatics · doi:10.1016/j.tele.2018.03.005 · Cited by 122
A review of state-of-the-art malware attack trends and defense mechanisms
Ferdous, J., Islam, R., Mahboubi, A., & Islam, M. Z. (2023) · IEEE Access · doi:10.1109/access.2023.3328351 · Cited by 98
Firdaus, A., Anuar, N. B., Razak, M. F. A., Hashem, I. A. T., Bachok, S., & Sangaiah, A. K. (2018) · Journal of Medical Systems · doi:10.1007/s10916-018-0966-x · Cited by 73
Android Root and its Providers: A Double-Edged Sword
Zhang, H., She, D., & Qian, Z. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813714 · Cited by 64
Identifying Malicious Software Using Deep Residual Long-Short Term Memory
Alotaibi, A. (2019) · IEEE Access · doi:10.1109/access.2019.2951751 · Cited by 51
PrivacyStreams: Enabling Transparency in Personal Data Processing for Mobile Apps
Li, Y., Chen, F., Li, T. J.-J., Guo, Y., Huang, G., Fredrikson, M., Agarwal, Y., & Hong, J. I. (2017) · Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies · doi:10.1145/3130941 · Cited by 39
Security of User Interfaces: Attacks and Countermeasures
Malisa, L. (2017) · ETH Zurich · doi:10.3929/ethz-b-000217453 · Cited by 1
Metadata
- Authors
- Zhou, Y., & Jiang, X.
- Venue
- 2012 IEEE Symposium on Security and Privacy
- Publisher
- IEEE
- Published
- 2012-05
- Pages
- 95-109
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2125011234
- Cited by
- 2,133
- References
- 0
- FWCI
- 177.46
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
