Instance-based Anomaly Method for Android Malware Detection

Borja Sanz, Igor Santos, Xabier Ugarte-Pedrero, Carlos Laorden, Javier Nieves, Pablo G. Bringas

2013

Abstract

The usage of mobile phones has increased in our lives because they offer nearly the same functionality as a personal computer. Besides, the number of applications available for Android-based mobile devices has increased. Android application distribution is based on a centralized market where the developers can upload and sell their applications. However, as it happens with any popular service, it is prone to misuse and, in particular, malware writers can use this market to upload their malicious creations. In this paper, we propose a new method that, based upon several features that are extracted from the AndroidManifest file of the legitimate applications, builds an anomaly detection system able to detect malware.

Paper Citation

in Harvard Style

Sanz B., Santos I., Ugarte-Pedrero X., Laorden C., Nieves J. and G. Bringas P. (2013). Instance-based Anomaly Method for Android Malware Detection . In Proceedings of the 10th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2013) ISBN 978-989-8565-73-0, pages 387-394. DOI: 10.5220/0004529603870394

in Bibtex Style

@conference{secrypt13,
author={Borja Sanz and Igor Santos and Xabier Ugarte-Pedrero and Carlos Laorden and Javier Nieves and Pablo G. Bringas},
title={Instance-based Anomaly Method for Android Malware Detection},
booktitle={Proceedings of the 10th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2013)},
year={2013},
pages={387-394},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004529603870394},
isbn={978-989-8565-73-0},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 10th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2013)
TI - Instance-based Anomaly Method for Android Malware Detection
SN - 978-989-8565-73-0
AU - Sanz B.
AU - Santos I.
AU - Ugarte-Pedrero X.
AU - Laorden C.
AU - Nieves J.
AU - G. Bringas P.
PY - 2013
SP - 387
EP - 394
DO - 10.5220/0004529603870394