• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

Computer Engineering & Science

Previous Articles     Next Articles

A feature frequency differential enhancement algorithm
for static detection of Android malicious applications
 

LI Xiang-jun1,2 ,KONG Ke2 ,WEI Zhi-xiang1,WANG Ke-xuan1,XIAO Ju-xin1   

  1. (1.School of Software,Nanchang University,Nanchang 330047;
    2.Department of Computer Science and Technology,Nanchang University,Nanchang 330031,China)
     
     
  • Received:2019-12-31 Revised:2020-02-27 Online:2020-06-25 Published:2020-06-25

Abstract:

With the rapid growth of the number of Android applications, security detection of Android applications has become one of the hot issues in the field of network security. Aiming at the feature selection of static detection for malicious applications, this paper gives the concepts of benign feature, malicious feature, benign typical feature, malicious typical feature and atypical feature, and designs the feature Frequency Differential Enhancement (FDE) algorithm. The FDE algorithm eliminates the atypical features in static features by calculating the frequency of features in benign and malicious applications. In order to verify the target effect and performance of the FDE algorithm, experiments based on equilibrium data and non-equilibrium data are designed, and a weight loss function is introduced for non-equilibrium data experiments. Experimental results show that the FDE algorithm can effectively remove atypical features from static features and screen out valid features, and weight loss function can effectively improve the recognition rate of malicious data in non-equilibrium data.
 

Key words: feature frequency differential enhancement algorithm;weight loss function;feature selection, atypical feature;malicious application