Android Ransomware Analysis Using Convolutional Neural Network and Fuzzy Hashing Features

【Author】 Rodriguez-Bazan, Horacio; Sidorov, Grigori; Escamilla-Ambrosio, Ponciano Jorge

【Source】IEEE ACCESS

【影响因子】3.476

【Abstract】Most of the time, cybercriminals look for new ways to bypass security controls by improving their attacks. In the 1980s, attackers developed malware to kidnap user data by requesting payments. Malware is called a ransomware. Recently, they have demanded payment in Bitcoin or any other cryptocurrency. Ransomware is one of the most dangerous threats on the Internet, and this type of malware could affect almost all devices. Malware cipher device data, making them inaccessible to users. In this study, a new method for Android ransomware classification was proposed. This method implements a Convolutional Neural Network (CNN) for malware classification based on images. This paper presents a novel method for transforming an Android Application Package (APK) into a grayscale image. The image creation relies on using Natural Language Processing (NLP) techniques for text cleaning and Fuzzy Hashing to represent the decompiled code from the APK in a set of hashes after preprocessing using NLP techniques. The image is composed of n fuzzy hashes that represent the APK. The method was tested using a dataset of 7,765 Android ransomware samples obtained from external researchers and public sources. The accuracy of the proposed method was higher than that of other methods in the literature.

【Keywords】Operating systems; Ransomware; Natural language processing; Classification algorithms; XML; Metadata; Matched filters; Androids; Convolutional neural networks; Deep learning; Fuzzy systems; Android ransomware; convolutional neural network; deep learning; fuzzy hashing; malware classification; ransomware

【发表时间】2023

【收录时间】2023-12-15

【文献类型】实验仿真

【主题类别】

区块链治理-技术治理-勒索分析