Robust security risk estimation for android apps using nearest neighbor approach and hamming distance
摘要
Nowadays, Android-based devices such as smart phones, tablets, smart watches, and virtual reality headsets have found increasing use in our daily lives. Along with the development of various applications for these devices, new malicious apps are released by intruders, which are more difficult to identify and deal with because they exploit more sophisticated techniques. Although methods have been provided to calculate the security risk and identify malicious apps in Android operating system, but with the expansion of the level and depth of the threats, the need for more effective methods in this context is still required. In this paper, we have devised a new algorithm to calculate the security risk of Android apps, which can be used to identify malicious apps from benign ones. In this algorithm, to estimate the security risk of an unknown input app, its nearest neighbors to malicious apps and its nearest neighbors to normal apps are computed separately using Hamming distance. Then, the security risk of the input app can be computed using a simple formulation. After implementing this algorithm, its parameter for the number of neighbors using various real datasets is adjusted. The extensive experiments conducted on these data show the superiority of the proposed method over the previously proposed ones in terms of detection rate. Our additional experimentations show the robustness of the proposed algorithm in adversarial situations.