Robust Android malware detection through EfficientNet–BERT fusion and Jaya optimization for behavioral analysis
摘要
Android malware continues to evolve through obfuscation, permission misuse, and dynamic payload activation, reducing the effectiveness of conventional detection methods. Existing machine learning and deep learning approaches often face challenges related to class imbalance, redundant high-dimensional features, and limited robustness to emerging malware behaviors. To address these limitations, this study proposes ENBT-J, a hybrid ensemble framework for Android malware detection. The proposed pipeline integrates Edited Nearest Neighbors (ENN) for noise filtering and class balancing, Boruta-based feature selection for identifying informative attributes, MobileNetV2 for compact feature embedding, and an EfficientNet–BERT classification module for joint modeling of static and dynamic behavioral characteristics. Jaya-based hyperparameter tuning is further employed to improve training stability. Experimental evaluation on multiple Android malware datasets shows that ENBT-J achieves 98.14% accuracy, 97.70% F1-score, 98.0% PR-AUC, and 96.15% MCC, outperforming several recent baseline methods. These findings suggest that ENBT-J provides a robust and scalable framework for Android malware detection under diverse and noisy data conditions.