Andro-AutoPsy: Anti-malware system based on similarity matching of malware and malware creator-centric information
- Authors
- Jang, Jae-Wook; Kang, Hyunjae; Woo, Jiyoung; Mohaisen, Aziz; Kim, Huy Kang
- Issue Date
- 9월-2015
- Publisher
- ELSEVIER SCI LTD
- Keywords
- Similarity matching; Profiling; Android malware; Malware classification; Certificate
- Citation
- DIGITAL INVESTIGATION, v.14, pp.17 - 35
- Indexed
- SCIE
SCOPUS
- Journal Title
- DIGITAL INVESTIGATION
- Volume
- 14
- Start Page
- 17
- End Page
- 35
- URI
- https://scholar.korea.ac.kr/handle/2021.sw.korea/92669
- DOI
- 10.1016/j.diin.2015.06.002
- ISSN
- 1742-2876
- Abstract
- Mobile security threats have recently emerged because of the fast growth in mobile technologies and the essential role that mobile devices play in our daily lives. For that, and to particularly address threats associated with malware, various techniques are developed in the literature, including ones that utilize static, dynamic, on-device, off-device, and hybrid approaches for identifying, classifying, and defend against mobile threats. Those techniques fail at times, and succeed at other times, while creating a trade-off of performance and operation. In this paper, we contribute to the mobile security defense posture by introducing Andro-AutoPsy, an anti-malware system based on similarity matching of malware-centric and malware creator-centric information. Using Andro-AutoPsy, we detect and classify malware samples into similar subgroups by exploiting the profiles extracted from integrated footprints, which are implicitly equivalent to distinct characteristics. The experimental results demonstrate that Andro-AutoPsy is scalable, performs precisely in detecting and classifying malware with low false positives and false negatives, and is capable of identifying zero-day mobile malware. (C) 2015 Elsevier Ltd. All rights reserved.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - School of Cyber Security > Department of Information Security > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.