广东工业大学学报2024，Vol.41Issue(2)：56-64,9.DOI:10.12052/gdutxb.230021
基于异构信息网络的Android恶意程序检测方法
Android Malware Application Detection Method Based on Heterogeneous Information Network
摘要
Abstract
To address the problems of camouflage and real-time detection of the traditional Android malware detection methods,a new Android malware detection method based on heterogeneous information networks is proposed.By modeling the Android entities and relationships nodes and edges,respectively,in a heterogeneous information network,two network representation learning models are designed,including the meta-structure attention network representation learning and the incremental learning models.First,the meta-structure attention network representation learning model is used for intra-sample node embedding,and the embedded nodes and labels are input to a deep neural network for training.Then,the incremental learning model is used for learning the extra-sample node embeddings.The top-k algorithm is used to aggregate neighboring nodes within the heterogeneous information network,and the embedded node to be detected is input to the trained deep neural network for detection.Experimental results show that the F1 value of the proposed method is 97.5%,the accuracy rate is 96.7%,and the average detection time is 3.7 ms,which are better than the existing methods,demonstrating the effectiveness of the proposed method for dealing with Android malware camouflage and for real-time Android malware detection.关键词
安卓/恶意程序检测/异构信息网络/元结构/深度神经网络Key words
Android/malware detection/heterogeneous information networks/meta-structure/deep neural networks分类
信息技术与安全科学引用本文复制引用
殷丹丽,凌捷..基于异构信息网络的Android恶意程序检测方法[J].广东工业大学学报,2024,41(2):56-64,9.基金项目
广东省重点领域研发计划项目(2019B010139002) （2019B010139002）
广州市科技研发计划项目(202007010004) （202007010004）
