Volume 16, Issue 3 (2016)                   MJEE 2016, 16(3): 40-47 | Back to browse issues page

XML Persian Abstract Print

Download citation:
BibTeX | RIS | EndNote | Medlars | ProCite | Reference Manager | RefWorks
Send citation to:

Ghaffari F, Abadi M, Tajoddin A, Lamiyan M. DroidNMD: Network-based Malware Detection in Android Using an Ensemble of One-Class Classifiers. MJEE. 16 (3) :40-47
URL: http://mjee.modares.ac.ir/article-17-1411-en.html
1- Tarbiat Modares University
Abstract:   (3754 Views)
During the past few years, the number of malware designed for Android devices has increased dramatically. To confront with Android malware, some anomaly detection techniques have been proposed that are able to detect zero-day malware, but they often produce many false alarms that make them impractical for real-world use. In this paper, we address this problem by presenting DroidNMD, an ensemble-based anomaly detection technique that focuses on the network behavior of Android applications in order to detect Android malware. DroidNMD constructs an ensemble classifier consisting of multiple heterogeneous one-class classifiers and uses an ordered weighted averaging (OWA) operator to aggregate the outputs of the one-class classifiers. Our work is motivated by the observation that combining multiple one-class classifiers often produces higher overall classification accuracy than any individual one-class classifier. We demonstrate the effectiveness of DroidNMD using a real dataset of Android benign applications and malware samples. The results of our experiments show that DroidNMD can detect Android malware with a high detection rate and a relatively low false alarm rate.
Full-Text [PDF 780 kb]   (1655 Downloads)    
Article Type: Full Research Paper | Subject: پیش‌بینی و هوش مصنوعی
Received: 2017/07/14 | Accepted: 2016/10/1 | Published: 2017/09/6

Add your comments about this article : Your username or Email: