Ensemble Method for Mobile Malware Detection using N-Gram Sequences of System Calls

Nor Azman Mat Ariff; Mohd Zaki Mas'ud; Nazrulazhar Bahaman; Erman Hamid; Noor Azleen Anuar

Author(s)

Nor Azman Mat Ariff Faculty of Information and Communication Technology,Universiti Teknikal Malaysia Melaka (UTeM), Hang Tuah Jaya, 76100 Durian Tunggal, Melaka,Malaysia

Mohd Zaki Mas'ud Faculty of Information and Communication Technology,Universiti Teknikal Malaysia Melaka (UTeM), Hang Tuah Jaya, 76100 Durian Tunggal, Melaka,Malaysia

Nazrulazhar Bahaman Faculty of Information and Communication Technology,Universiti Teknikal Malaysia Melaka (UTeM), Hang Tuah Jaya, 76100 Durian Tunggal, Melaka,Malaysia

Erman Hamid Faculty of Information and Communication Technology,Universiti Teknikal Malaysia Melaka (UTeM), Hang Tuah Jaya, 76100 Durian Tunggal, Melaka,Malaysia

Noor Azleen Anuar Faculty of Information and Communication Technology,Universiti Teknikal Malaysia Melaka (UTeM), Hang Tuah Jaya, 76100 Durian Tunggal, Melaka,Malaysia

Abstract

Mobile device has become an essential tool among the community across the globe and has turned into a necessity in daily life. An extensive usage of mobile devices for everyday life tasks such as online banking, online shopping and exchanging e-mails has enable mobile devices to become data storage for users. The data stored in these mobile devices can contain sensitive and critical information to the users. Hence, making mobile devices as the prime target for cybercriminal. To date, Android based mobile devices is one of the mobile devices that are dominating the phone market. Moreover, the ease of use and open-source feature has made Android based mobile devices popular. However, the widely used Android mobile devices has encouraged malware author to write malicious application. In a short duration of time mobile malware has rapidly evolve and have the capability to bypass signature detection approach which requires a constant signature update to detect mobile malware. To overcome this drawback an anomaly detection approach can be used to mitigate this issue. Yet, using a single classifier in an anomaly detection approach will not improve the classification detection performance. Based on this reason, this research formulates an ensemble classification method of different n-gram system call sequence features to improve the accuracy of mobile malware detection. This research proposes nnumber of classifier models for each different n-gram sequence call feature. The class probability output of each classifier is then combined to produce a better classification performance which is better compared to a single classifier.

Publication Details

Page(s) 236-241

DOI DOI not available

Published Journal: International Journal of Communication Networks and Information Security, Volume: 13, Issue: 2, Year: 2021

Request the full text from PASTIC

Keywords

Ensemble Method, Mobile Malware Detection, Ngram