An Extrinsic Random-based Ensemble Approach for Android Malware Detection

Malware detection is a fundamental task and associated with significant applications in humanities, cybersecurity, and social media analytics. In some of the relevant studies, there is substantial evidence that heterogeneous ensembles can provide very reliable solutions, better than any individual verification model. However, so far, there is no systematic study of examining the application of ensemble methods in this task. This paper introduces a sophisticated Extrinsic Random-based Ensemble (ERBE) method where in a predetermined set of repetitions, a subset of external instances (either malware or benign) as well as classification features are randomly selected, and an aggregation function is adopted to combine the output of all base models for each test case separately. By utilising static analysis only, we demonstrate that the proposed method is capable of taking advantage of the availability of multiple external instances of different size and genre. The experimental results in AndroZoo benchmark corpora verify the suitability of a random-based heterogeneous ensemble for this task and exhibit the effectiveness of our method, in some cases improving the hitherto best reported results by more than 5%.

POTHA Nektaria;  KOULIARIDIS Vasileios;  KAMPOURAKIS Georgios; 

2021-08-23

TAYLOR & FRANCIS LTD

JRC121618

0954-0091 (online),   

https://www.tandfonline.com/doi/full/10.1080/09540091.2020.1853056?,    https://publications.jrc.ec.europa.eu/repository/handle/JRC121618,   

10.1080/09540091.2020.1853056 (online),