Krerk Piromsopa. Classification of android malware from binary code using ensemble method with recursive feature elimination. (). King Mongkut's University of Technology North Bangkok. Central Library. : , 2024.
Classification of android malware from binary code using ensemble method with recursive feature elimination
Abstract:
In response to the burgeoning Android market and
the concurrent proliferation of both applications and malware, we
propose a direct analysis approach to classify Android malware
by examining bytecode extracted from DEX files. The prevalent
use of obfuscation techniques by malicious actors underscores
the need for robust methods to detect and analyze malware.
Leveraging the frequency of bi-gram and tri-gram patterns
within the bytecode, we employ recursive feature elimination
with TF-IDF, alongside XGB, RF, and voting classifiers, to
enhance detection capabilities. Our study, conducted using the
CICAndMal2017 dataset, highlights the effectiveness of this
approach, with XGB classifier u tilizing t he t op 4 096 tri-gram
features achieving an impressive F1-score of 93.56% for Android
malware detection. This research contributes to the advancement
of malware detection methodologies, offering a promising avenue
for mitigating the growing threat landscape in the Android
ecosystem.
King Mongkut's University of Technology North Bangkok. Central Library
Address:
BANGKOK
Email:
library@kmutnb.ac.th
Created:
2024
Modified:
2025-05-22
Issued:
2025-05-22
บทความ/Article
application/pdf
BibliograpyCitation :
In IEEE Thailand Section (IEEE Computer Society Thailand Chapter) and Prince of Songkla University. College of Computing. The 21st International Joint Conference on Computer Science and Software Engineering (JCSSE 2024)) (pp.174-178). Phuket : Prince of Songkla University