Analyzing Image Based Strategies for Android Malware Detection and Classification: An Empirical Exploration

Chirag Jaju, Dhairya Agrawal, Rishi Poddar, Shubh Badjate, Sidharth Anand, Barsha Mitra, Soumyadeep Dey

2023

Abstract

In recent years, the popularity of Android as a mobile operating system has grown exponentially and so it has been widely used in a huge array of mobile phones. This large scale proliferation of Android has resulted in it being extensively targeted by malware. Numerous families of malware have been developed with the sole purpose of infecting mobile phones and perpetrating different types of attacks on these devices and their users. Naturally, in the past few years, researchers have focused on developing strategies for detecting and classifying malware families. A large number of such strategies are based on converting the malware APK files to grayscale or color images. In this paper, we survey six APK to image conversion techniques and perform a comparative empirical analysis of these methods with respect to malware detection and classification. We implement the six approaches to convert the benign as well as malware binaries into images and then use three CNN-based models to distinguish between benign and malware files and also to classify the various malware families. We use two very popular open-source Android malware datasets, CICAndMal2017 and the Drebin dataset for comparing the performance of the different image conversion techniques for the detection and classification tasks in terms of accuracy and F1-score. The results of the study provide insights into the relative performance of these approaches and help to determine the combination of the image conversion approach and the classification model that provides the best detection and classification performance.

Paper Citation

in Harvard Style

Jaju C., Agrawal D., Poddar R., Badjate S., Anand S., Mitra B. and Dey S. (2023). Analyzing Image Based Strategies for Android Malware Detection and Classification: An Empirical Exploration. In Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-666-8, SciTePress, pages 863-869. DOI: 10.5220/0012139100003555

in Bibtex Style

@conference{secrypt23,
author={Chirag Jaju and Dhairya Agrawal and Rishi Poddar and Shubh Badjate and Sidharth Anand and Barsha Mitra and Soumyadeep Dey},
title={Analyzing Image Based Strategies for Android Malware Detection and Classification: An Empirical Exploration},
booktitle={Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2023},
pages={863-869},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012139100003555},
isbn={978-989-758-666-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - Analyzing Image Based Strategies for Android Malware Detection and Classification: An Empirical Exploration
SN - 978-989-758-666-8
AU - Jaju C.
AU - Agrawal D.
AU - Poddar R.
AU - Badjate S.
AU - Anand S.
AU - Mitra B.
AU - Dey S.
PY - 2023
SP - 863
EP - 869
DO - 10.5220/0012139100003555
PB - SciTePress