Analysis of Mobile Malware: A Systematic Review of Evolution and Infection Strategies
محتوى المقال
الملخص
The open-source and popularity of Android attracts hackers and has multiplied security concerns targeting devices. As such, malware attacks on Android are one of the security challenges facing society. This paper presents an analysis of mobile malware evolution between 2000-2020. The paper presents mobile malware types and in-depth infection strategies malware deploys to infect mobile devices. Accordingly, factors that restricted the fast spread of early malware and those that enhance the fast propagation of recent malware are identified. Moreover, the paper discusses and classifies mobile malware based on privilege escalation and attack goals. Based on the reviewed survey papers, our research presents recommendations in the form of measures to cope with emerging security threats posed by malware and thus decrease threats and malware infection rates. Finally, we identify the need for a critical analysis of mobile malware frameworks to identify their weaknesses and strengths to develop a more robust, accurate, and scalable tool from an Android detection standpoint. The survey results facilitate the understanding of mobile malware evolution and the infection trend. They also help mobile malware analysts to understand the current evasion techniques mobile malware deploys.
الكلمات المفتاحية
Infection Strategies، Malware Evolution، Mobile Malware، Information Security
التنزيلات
المراجع
E. Goh and M. Sigala, “Integrating Information & Communication Technologies (ICT) into classroom instruction: teaching tips for hospitality educators from a diffusion of innovation approach,” J. Teach. Travel Tour., vol. 20, no. 2, pp. 156–165, 2020, doi: 10.1080/15313220.2020.1740636.
Z. G. Shatri, “Advantages and disadvantages of using information technology in learning process of students,” J. Turkish Sci. Educ., vol. 17, no. 3, pp. 420–428, 2020, doi: 10.36681/tused.2020.36.
L. Maglaras, G. Drivas, N. Chouliaras, E. Boiten, C. Lambrinoudakis, and S. Ioannidis, “Cybersecurity in the Era of Digital Transformation: The case of Greece,” in 2020 Int. Conf. Internet Things Intell. Appl. ITIA 2020, no. September 2017, pp. 0–4, 2020, doi: 10.1109/ITIA50152.2020.9312297.
H. S. Lallie et al., “Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the paandemic,” Comput. Secur., vol. 105, p. 102248, 2020, doi: 10.1016/j.cose.2021.102248.
N. A. Khan, S. N. Brohi, and N. Zaman, “Ten Deadly Cyber Security Threats Amid COVID-19 Pandemic,” TechRxiv Powered by IEEE, pp. 1–6, 2020, doi: 10.36227/techrxiv.12278792.v1.
L. M. Cristea, “Current security threats in the national and international context,” J. Account. Manag. Inf. Syst., vol. 19, no. 2, pp. 351–378, 2020, doi: 10.24818/jamis.2020.02007.
P. McLaren, G. Russell, and B. Buchanan, “Mining malware command and control traces,” in Proc. Comput. Conf. 2017, vol. 2018-January, no. July, pp. 788–794, 2018, doi: 10.1109/SAI.2017.8252185.
M. S. Saleem, J. Misic, and V. B. Misic, “Examining Permission Patterns in Android Apps using Kernel Density Estimation,” in 2020 Int. Conf. Comput. Netw. Commun. ICNC 2020, pp. 719–724, 2020, doi: 10.1109/ICNC47757.2020.9049820.
J. Gamba, M. Rashed, A. Razaghpanah, J. Tapiador, and N. Vallina-Rodriguez, “An analysis of pre-installed android software,” in Proc. - IEEE Symp. Secur. Priv., vol. 2020-May, pp. 1039–1055, 2020, doi: 10.1109/SP40000.2020.00013.
J. Mcgiff, W. G. Hatcher, J. Nguyen, W. Yu, E. Blasch, and C. Lu, “Towards Multimodal Learning for Android Malware Detection,” in 2019 Int. Conf. Comput. Netw. Commun. ICNC 2019, pp. 432–436, 2019, doi: 10.1109/ICCNC.2019.8685502.
Oxera, “Android in Europe: Benefits to consumers and business,” Oct. 2018. [Online].Available: https://www.oxera.com/wp-content/uploads/2018/10/Android-in-Europe-1.pdf
A. Adekotujo, A. Odumabo, A. Adedokun, and O. Aiyeniko, “A Comparative Study of Operating Systems: Case of Windows, UNIX, Linux, Mac, Android and iOS,” Int. J. Comput. Appl., vol. 176, no. 39, pp. 16–23, 2020, doi: 10.5120/ijca2020920494.
A. Gerber and C. Clifton, Learn Android Studio. Build Android Apps Quickly and Effectively, NY, USA: Apress, May 2015.
S. Mierzwa, S. RamaRao, J. A. Yun, and B. G. Jeong, “Proposal for the Development and Addition of a Cybersecurity Assessment Section into Technology Involving Global Public Health,” Int. J. Cybersecurity Intell. Cybercrime, vol. 3, no. 2, pp. 48–61, 2020, [Online]. Available: https://vc.bridgew.edu/ijcic/vol3/iss2/4
M. Adeel and L. N. Tokarchuk, “Analysis of mobile P2P malware detection framework through Cabir & Commwarrior families,” in Proc. - 2011 IEEE Int. Conf. Privacy, Secur. Risk Trust IEEE Int. Conf. Soc. Comput. PASSAT/SocialCom 2011, pp. 1335–1343, 2011, doi: 10.1109/PASSAT/SocialCom.2011.243.
E. Johns, “Cyber Security Breaches Survey 2020,” Comput. Fraud Secur., vol. 2020, no. 4, p. 4, 2020, doi: 10.1016/s1361-3723(20)30037-3.
Marsh & McLennan and Zurich Insurance Group, “The Global Risks Report 2020,” 2020. [Online].Available: http://www3.weforum.org/docs/WEF_Global_Risk_Report_2020.pdf
S. Shi and J. Yin, “Global research on carbon footprint : A scientometric review,” Environ. Impact Assess. Rev., vol. 89, no. March, p. 106571, 2021, doi: 10.1016/j.eiar.2021.106571.
A. P. Namanya, A. Cullen, I. U. Awan, J. P. Disso, and R. Kit, “The World of Malware : An Overview,” in 2018 IEEE 6th Int. Conf. Future Internet Things Cloud (FiCloud), 2018, pp. 420-427, doi: 10.1109/FiCloud.2018.00067.
L. J. García Villalba, A. L. Sandoval Orozco, A. López Vivar, E. A. Armas Vega and T. Kim, "Ransomware Automatic Data Acquisition Tool," IEEE Access, vol. 6, pp. 55043-55052, 2018, doi: 10.1109/ACCESS.2018.2868885.
T. Szuba and D. Sztuba, "Can Adam Smith’s Invisible Hand phenomenon be used for the analysis of Fourth Estate’s impact and behavior?," in 2020 Int. Jt Conf. Neural Netw. (IJCNN), 2020, pp. 1-8, doi: 10.1109/IJCNN48605.2020.9207576.
W. Pranoto, “Malicious Software Analysis,” (in Indonesian), CyberSecurity dan Forensik Digital, vol. 1, no. 2, pp. 62–66, 2018, doi: 10.14421/csecurity.2018.1.2.1374.
S. Levy and J. R. Crandall, “The program with a personality: Analysis of Elk cloner, the first personal computer virus,” arXiv:2007.15759, 2020. [Online]. Available: https://arxiv.org/abs/2007.15759
H. J. Highland, “History of computer viruses - the famous `trio’,” Comput. Secur., vol. 16, no. 5, pp. 416–429, 1997, doi: 10.1016/S0167-4048(97)82246-8.
L. Fu, “Design of hidden communication remote monitoring based on C / C MFC,” Proc. - 2019 4th Int. Conf. Mech. Control Comput. Eng. ICMCCE 2019, pp. 589–591, 2019, doi: 10.1109/ICMCCE48743.2019.00135.
CheckPoint Security, “5 TH GENERATION CYBER ATTACKS ARE HERE AND MOST BUSINESSES ARE BEHIND A New Model For Assessing and Planning Security,” 2018, [Online]. Available: https://www.checkpoint.com/downloads/product-related/whitepapers/preventing-the-next-mega-cyber-attack.pdf
M. Bartolo et al., “Urgent Measures for the Containment of the Coronavirus (Covid-19) Epidemic in the Neurorehabilitation/Rehabilitation Departments in the Phase of Maximum Expansion of the Epidemic,” Front. Neurol., vol. 11, no. April, pp. 1–6, 2020, doi: 10.3389/fneur.2020.00423.
J. Kaur, “Taxonomy of Malware : Virus , Worms and Trojan,” Int. J. Res. Anal. Rev., vol. 6, no. 1, pp. 192–196, 2019.
P. R. Shah, Y. Shah, and S. Madan, “Mobile Viruses,” in IJCA Proc. Int. Conf. Recent Trends Info. Technol. Comput. Sci., Mar. 2012, pp. 42–48.
M. Chikapa and A. P. Namanya, “Towards a fast off-line static malware analysis framework,” in 6th Int. Conf. Future Internet Things Cloud Workshops, 2018, pp. 182–187, doi: 10.1109/W-FiCloud.2018.00035.
S. Pillet et al., “Contamination of healthcare workers’ mobile phones by epidemic viruses,” Clin. Microbiol. Infect., vol. 22, no. 5, pp. 456.e1-456.e6, 2016, doi: 10.1016/j.cmi.2015.12.008.
R. Mayrhofer, J. Vander Stoep, C. Brubaker, and N. Kralevich, “The android platform security model,” arXiv:1904.05572, 2019. [Online]. Available: https://arxiv.org/abs/1904.05572
M. R. Khan, R. C. Tripathi, and A. Kumar, “A malicious attacks and defense techniques on android-based smartphone platform,” Int. J. Innov. Technol. Explor. Eng., vol. 8, no. 8 Special Issue 3, pp. 361–369, 2019.
N. R. Techniques, H. D. D. Expose, A. Target, and M. Lucrative, “McAfee Labs Threats Report: December 2018,” Comput. Fraud Secur., vol. 2019, no. 1, p. 4, 2019, doi: 10.1016/s1361-3723(19)30004-1.
B. Runciman, “Cybersecurity Report 2020,” ITNOW, vol. 62, no. 4, pp. 28–29, 2020, doi: 10.1093/itnow/bwaa103.
F. Alswaina and K. Elleithy, “Android malware family classification and analysis: Current status and future directions,” Electron., vol. 9, no. 6, pp. 1–20, 2020, doi: 10.3390/electronics9060942.
M. O. Topgul and E. I. Tatli, “The Past and Future of Mobile Malwares,” in 7th Int. Conf. Inf. Secur. Cryptol., Turkey, 2014, pp. 123–129.
D. Chen, P. Wawrzynski, and Z. Lv, “Cyber security in smart cities: A review of deep learning-based applications and case studies,” Sustain. Cities Soc., vol. 66, no. October 2020, 2021, doi: 10.1016/j.scs.2020.102655.
A. Baranchuk et al., “Cybersecurity for Cardiac Implantable Electronic Devices: What Should You Know?,” J. Am. Coll. Cardiol., vol. 71, no. 11, pp. 1284–1288, 2018, doi: 10.1016/j.jacc.2018.01.023.
M. Akbanov, V. G. Vassilakis, and M. D. Logothetis, “WannaCry ransomware: Analysis of infection, persistence, recovery prevention and propagation mechanisms,” J. Telecommun. Inf. Technol., no. 1, pp. 113–124, 2019, doi: 10.26636/jtit.2019.130218.
Z. Zhu and T. Dumitras, “FeatureSmith : Automatically Engineering Features for Malware Detection by Mining the Security Literature,” in Proc. 2016 ACM SIGSAC Conf. Comput. Commun. Secur., Vienna, Austria, pp. 767–778, 2016, doi: 10.1145/2976749.2978304.
S. K. Sasidharan and C. Thomas, “ProDroid – An Android malware detection framework based on profile hidden Markov model,” Pervasive Mob. Comput., vol. 72, p. 101336, 2021, doi: 10.1016/j.pmcj.2021.101336.
J. Spaulding, A. Krauss, and A. Srinivasan, “Exploring an Open WiFi Detection Vulnerability as a Malware Attack Vector on iOS Devices,” in 7th Int. Conf. Malicious Unwanted Softw., 2012, pp. 87–93, doi: 10.1109/MALWARE.2012.6461013.
I. Muslukhov, Y. Boshmaf, C. Kuo, J. Lester, and K. Beznosov, “Understanding Users’ Requirements for Data Protection in Smartphones,” in IEEE 28th Int. Conf. Data Eng. Workshops, 2012, pp. 228-235, doi: 10.1109/ICDEW.2012.83.
A. Mathur, L. M. Podila, K. Kulkarni, Q. Niyaz, and A. Y. Javaid, “NATICUSdroid: A malware detection framework for Android using native and custom permissions,” J. Inf. Secur. Appl., vol. 58, no. 1, p. 102696, 2021, doi: 10.1016/j.jisa.2020.102696.
P. Yan and Z. Yan, “A survey on dynamic mobile malware detection,” Softw. Qual. J., vol. 26, no. 3, pp. 891–919, 2018, doi: 10.1007/s11219-017-9368-4.
T. H. Huang and H. Kao, "R2-D2: ColoR-inspired Convolutional NeuRal Network (CNN)-based AndroiD Malware Detections," in 2018 IEEE Int. Conf. Big Data (Big Data), 2018, pp. 2633-2642, doi: 10.1109/BigData.2018.8622324.
V. Rastogi, Y. Chen, and X. Jiang, “DroidChameleon : Evaluating Android Anti-malware against Transformation Attacks,” in ASIA CCS '13: Proc. 8th ACM SIGSAC Symp. Inf. Comput. Commun. Secur., China, May 2013, pp. 329–334, doi: 10.1145/2484313.2484355.
D. Wang, H. Shu, F. Kang, and W. Bu, “A Malware Similarity Analysis Method Based on Network Control Structure Graph.” In 2020 IEEE 11th Int. Conf. Softw. Eng. Serv. Sci. (ICSESS), Beijing China, Oct. 2020, pp.16-18, doi: 10.1109/ICSESS49938.2020.9237633.
P. Yan and Z. Yan, “A survey on dynamic mobile malware detection,” Softw. Qual. J., vol. 26, no. 3, pp. 891–919, 2018, doi: 10.1007/s11219-017-9368-4.
M. Yousefi-azar, L. G. C. Hamey, V. Varadharajan, and S. Chen, “Malytics : A Malware Detection Scheme,” IEEE Access, vol. 6, pp. 49418–49431, 2018, doi: 10.1109/ACCESS.2018.2864871.
S. M. Gene and W. Hongyan, “Analyzing and Recognizing Android Malware via,” in 2017 Int. Conf. Cyber-Enabled Distrib. Comput. Knowl. Discov., Changchun, China, Oct. 2017, pp. 17-20, doi: 10.1109/CyberC.2017.36.
Meng, X., “An integrated networkbased mobile botnet detection system,” Ph.D. dissertation, Dep. Comput. Sci., Univ. London, UK, 2018.
M. Ashawa and S. Morris, “Analysis of Android Malware Detection Techniques: A Systematic Review,” Int. J. Cyber-Security Digit. Forensics, vol. 8, no. 3, pp. 177–187, 2019, doi: 10.17781/p002605.
S. Y. Yerima, S. Sezer, and G. Mcwilliams, “Analysis of Bayesian Classification based Approaches for Android Malware Detection Analysis of Bayesian Classification based Approaches for Android Malware Detection,” IET Inf. Secur., vol. 8, no. 1, pp. 25–36, 2014, doi: 10.1049/iet-ifs.2013.0095.
M. Yusof, M. M. Saudi, and F. Ridzuan, “A new mobile botnet classification based on permission and API calls,” in Proc. - 2017 7th Int. Conf. Emerg. Secur. Technol. EST 2017, pp. 122–127, 2017, doi: 10.1109/EST.2017.8090410.
M. Ashawa and S. Morris, “Host-Based Detection and Analysis of Android Malware: Implication for Privilege Exploitation,” Int. J. Inf. Secur. Res., vol. 9, no. 2, pp. 871–880, 2019, doi: 10.20533/ijisr.2042.4639.2019.0100.
M. Kazdagli, V. J. Reddi and M. Tiwari, “Quantifying and Improving the Efficiency of Hardware-based Mobile Malware Detectors,” in 49th Annu. IEEE/ACM Int. Symp. Microarchitecture (MICRO), Taipei, Taiwan, Oct. 2016, pp. 1–13, doi: 10.1109/MICRO.2016.7783740.
K. Ariyapala, G. D. Hoang, H. A. Huynh, K. N. Wee, and M. Conti, “A Host and Network Based Intrusion Detection For Android Smartphones,” in 2016 30th Int. Conf. Adv. Inf. Netw. Appl. Workshops (WAINA), Switzerland, Mar. 2016, pp. 849-854, doi: 10.1109/WAINA.2016.35.
X. Zhong, Y. Fu, L. Yu, R. Brooks, and G. K. Venayagamoorthy, “Stealthy Malware Traffic – Not as Innocent as It Looks,” in 2015 10th Int. Conf. Malicious Unwanted Softw. (MALWARE), Fajardo, PR, USA, Oct. 2015, pp. 110–116, doi: 10.1109/MALWARE.2015.7413691.
R. Barona and E. A. M. Anita, "A survey on data breach challenges in cloud computing security: Issues and threats," in 2017 Int. Conf. Circuit Power Comput. Technol. (ICCPCT), 2017, pp. 1-8, doi: 10.1109/ICCPCT.2017.8074287.
S. Hsiao and D. Kao, "The static analysis of WannaCry ransomware," in 2018 20th Int. Conf. Adv. Commun. Technol. (ICACT), 2018, pp. 153-158, doi: 10.23919/ICACT.2018.8323680.
E. B. Karbab and M. Debbabi, “ToGather : Automatic Investigation of Android Malware,” in Proc. 13th Int. Conf. Availab. Reliab. Secur., Aug. 2018, pp. 1-10, doi: 10.1145/3230833.3230870.
K. S. Yim, I. Malchev, A. Hsieh, and D. Burke, “Treble : Fast Software Updates by Creating an Equilibrium in an Active Software Ecosystem of Globally Distributed Stakeholders,” ACM Trans. Embed. Comput. Syst., vol. 18, no. 5, pp. 1-23, 2019, doi: 10.1145/3358237.
F. Alswaina and K. Elleithy, “Android malware family classification and analysis: Current status and future directions,” Electron., vol. 9, no. 6, pp. 1–20, 2020, doi: 10.3390/electronics9060942.
C. Uppin and G. George, “Analysis of Android Malware Using Data Replication Features Extracted by Machine Learning Tools,” Int. J. Sci. Res. Comput. Sci. Eng. Inf. Technol., vol. 5, no. 5, pp. 193–201, 2019, doi: 10.32628/CSEIT195532.
A. Talha and I. Alper, “An in-depth analysis of Android malware using hybrid techniques,” Digit. Investig., vol. 24, pp. 25–33, 2018, doi: 10.1016/j.diin.2018.01.001.
F. C. Mead, J. M. Zielinski, L. Watkins, and W. H. Robinson, “A Mobile Two-Way Wireless Covert Timing Channel Suitable for Peer-to-Peer Malware.” in 2017 IEEE 28th Annu. Int. Symp. Pers. Indoor Mob. Radio Commun. (PIMRC), 2017, pp. 1-6, doi: 10.1109/PIMRC.2017.8292638.
F. Li, A. Lai and D. Ddl, "Evidence of Advanced Persistent Threat: A case study of malware for political espionage," in 2011 6th Int. Conf. Malicious Unwanted Softw., 2011, pp. 102-109, doi: 10.1109/MALWARE.2011.6112333.
N. Tavabi, N. Bartley, A. Abeliuk, S. Soni, E. Ferrara, and K. Lerman, “Characterizing Activity on the Deep and Dark Web,” in Companion Proc. 2019 World Wide Web Conf., May 2019, pp. 206–213, doi: 10.1145/3308560.3316502.
K. Khanmohammadi, N. Ebrahimi, A. Hamou-lhadj, and R. Khoury, “Empirical study of android repackaged applications,” Empir. Softw. Eng., vol. 24, pp. 3587-3629, 2019, doi: 10.1007/s10664-019-09760-3s.
“Kaspersky Security Bulletin : OVERALL STATISTICS FOR 2017,” 2017. [Online].Available: https://media.kaspersky.com/jp/pdf/pr/Kaspersky_KSB2017_Statistics-PR-1045.pdf
K. Liu, S. Xu, G. Xu, D. Sun, and H. Liu, “A Review of Android Malware Detection Approaches Based on Machine Learning,” IEEE Access, vol. 8, pp. 124579–124607, 2020, doi: 10.1109/ACCESS.2020.3006143.
S. Turker and A. B. Can, “AndMFC: Android malware family classification framework,” in 2019 IEEE 30th Int. Symp. Pers. Indoor Mob. Radio Commun. PIMRC Workshops, 2019, pp. 1-6, doi: 10.1109/PIMRCW.2019.8880840.
Android, “Android Security & Privacy 2018 Year In Review,” Mar. 2019. [Online].Available: https://source.android.com/security/reports/Google_Android_Security_2018_Report_Final.pdf
M. Stone. (2019). A Deep Dive into Reversing Android Pre-Installed Apps Securing the System. [Online].Available: https://i.blackhat.com/USA-19/Thursday/us-19-Stone-Securing-The-System-A-Deep-Dive-Into-Reversing-Android-Preinstalled-Apps.pdf
R. Samani and G. Davis, “McAfee Mobile Threat Report: Mobile Malware Continues to Increase in Complexity and Scope,” McAfee, Santia Clara, CA, USA, McAfee Mobile Threat Report Q1, 2019. [Online]. Available: https://www.mcafee.com/enterprise/en-us/assets/reports/rp-mobile-threat-report-2019.pdf
R. Kumar, X. Zhang, W. Wang, R. U. Khan, J. Kumar, and A. Sharif, “A Multimodal Malware Detection Technique for Android IoT Devices Using Various Features,” IEEE Access, vol. 7, pp. 64411-64430, 2019, doi: 10.1109/ACCESS.2019.2916886.
N. Tavabi, N. Bartley, A. Abeliuk, S. Soni, E. Ferrara, and K. Lerman, “Characterizing Activity on the Deep and Dark Web,” in Companion Proc. 2019 World Wide Web Conf., May 2019, pp. 206–213, doi: 10.1145/3308560.3316502.
M. Al-Janabi and A. M. Altamimi, “A comparative analysis of machine learning techniques for classification and detection of malware,” in Proc. - 2020 21st Int. Arab Conf. Inf. Technol. ACIT 2020, 2020, doi: 10.1109/ACIT50332.2020.9300081.
H. Cai, N. Meng, B. Ryder and D. Yao, "DroidCat: Effective Android Malware Detection and Categorization via App-Level Profiling," IEEE Trans. Inf. Forensics Secur., vol. 14, no. 6, pp. 1455-1470, June 2019, doi: 10.1109/TIFS.2018.2879302.
R. Samani and G. Davis, “McAfee Mobile Threat Report: Mobile Malware Continues to Increase in Complexity and Scope,” McAfee, Santia Clara, CA, USA, McAfee Mobile Threat Report Q1, 2019. [Online]. Available: https://www.mcafee.com/enterprise/en-us/assets/reports/rp-mobile-threat-report-2019.pdf
R. Kumar, X. Zhang, W. Wang, R. U. Khan, J. Kumar, and A. Sharif, “A Multimodal Malware Detection Technique for Android IoT Devices Using Various Features,” IEEE Access, vol. 7, pp. 64411-64430, 2019, doi: 10.1109/ACCESS.2019.2916886.
P. J. Taylor, T. Dargahi, A. Dehghantanha, R. M. Parizi, and K. R. Choo, “A systematic literature review of blockchain cyber security,” Digit. Commun. Networks, vol. 6, no. 2, pp. 147–156, 2020, doi: 10.1016/j.dcan.2019.01.005.
Deloitte Cyber Threat Intelligence, “COVID-19 Global Cyber risks : Is a major cyberattack looming ?,” June 3, 2020. [Online].Available: https://www2.deloitte.com/content/dam/Deloitte/global/Documents/About-Deloitte/COVID-19/gx-cyber-covid-19-deloitte-global-cyber-covid-executive-briefing-issue-8release-date-6-3-2020-vf.pdf
M. Faou, “TURLA LIGHTNEURON One email away from remote code execution,” Eset, no. May, pp. 1–33, 2019, [Online]. Available: https://www.welivesecurity.com/wp-content/uploads/2019/05/ESET-LightNeuron.pdf
R. Brown and A. Rocha, “Entrepreneurial uncertainty during the Covid-19 crisis: Mapping the temporal dynamics of entrepreneurial finance,” J. Bus. Ventur. Insights, vol. 14, no. April, p. e00174, 2020, doi: 10.1016/j.jbvi.2020.e00174.
A. Balachandar, S. Abdul Alsowdh, and K. Arumugam, “Design and Development of Future Estimate in Confronting Ransomware,” J. Phys. Conf. Ser., vol. 1717, p. 012063, 2021, doi: 10.1088/1742-6596/1717/1/012063.
L. García and R. J. Rodríguez, "A Peek under the Hood of iOS Malware," in 2016 11th Int. Conf. Availab. Reliab. Secur. (ARES), Salzburg, Austria, 2016, pp. 590-598, doi: 10.1109/ARES.2016.15.
S. I. Imtiaz, S. ur Rehman, A. R. Javed, Z. Jalil, X. Liu, and W. S. Alnumay, “DeepAMD: Detection and identification of Android malware using high-efficient Deep Artificial Neural Network,” Futur. Gener. Comput. Syst., vol. 115, pp. 844–856, 2021, doi: 10.1016/j.future.2020.10.008.
L. Vokorokos, P. Drienik, O. Fortotira and J. Hurtuk, "Abusing mobile devices for Denial of Service attacks," 2015 IEEE 13th Int. Symp. Appl. Machine Intell. Inform. (SAMI), Slovakia, 2015, pp. 21-24, doi: 10.1109/SAMI.2015.7061886.
F. Martinelli, F. Mercaldo, V. Nardone, A. Santone, and G. Vaglini, “Simulation Modelling Practice and Theory Model checking and machine learning techniques for HummingBad mobile malware detection and mitigation,” Simul. Model. Pract. Theory, vol. 105, p. 102169, 2020, doi: 10.1016/j.simpat.2020.102169.
H. Wang, W. Zhang, S. Member, and H. He, “An Evolutionary Study of IoT Malware,” IEEE Internet Things J., vol. 8, no. 20, pp. 15422–15440, 2021, doi:10.1109/JIOT.2021.3063840
D. Schultes, “SequalsK — A Bidirectional Swift-Kotlin-Transpiler,” in IEEE/ACM 8th Int. Conf. Mob. Softw. Eng. Syst. (MobileSoft), Madrid, Spain, May 2021, pp. 73–83, doi: 10.1109/MobileSoft52590.2021.00017.
C. Li, D. He, S. Li, S. Zhu, S. Chan, and Y. Cheng, “Android-based Cryptocurrency Wallets: Attacks and Countermeasures,” in Proc. IEEE Int. Conf. Blockchain Blockchain, pp. 9–16, 2020, doi: 10.1109/Blockchain50366.2020.00010.
Y. Sun, Y. Chen, Y. Pan, and L. Wu, “Android Malware Family Classification Based on Deep Learning of Code Images,” Int. J. Comput. Sci., vol. 46, no. 4, 2019.
K. K. Tam, “Analysis and Classification of Android Malware,” Ph.D. dissertation, Inf. Secur. Dep., Univ. London, UK. 2016.
A. Cimitile, F. Martinelli, and F. Mercaldo, “Machine Learning Meets iOS Malware : Identifying Malicious Applications on Apple Environment,” in Proc. 3rd Int. Conf. Inf. Syst. Secur. Priv. Volume 1: ICISSP, 2017, pp. 487–492, doi: 10.5220/0006217304870492.
J. Li, L. Sun, Q. Yan, Z. Li, W. Srisa-an and H. Ye, "Significant Permission Identification for Machine-Learning-Based Android Malware Detection," IEEE Trans. Industr. Inform., vol. 14, no. 7, pp. 3216-3225, July 2018, doi: 10.1109/TII.2017.2789219.
N. Xie, X. Wang, W. Wang, and J. Liu, “Fingerprinting Android malware families,” Fornt. Comput. Sci., vol. 13, pp. 637–646, 2019, doi: 10.1007/s11704-017-6493-y.
S. Saeed, N. Z. Jhanjhi, M. Naqvi, M. Humayun, and S. Ahmed, “Ransomware: A framework for security challenges in internet of things,” in 2nd Int. Conf. Comput. Inf. Sci. ICCIS, 2020, pp. 1-6, doi: 10.1109/ICCIS49240.2020.9257660.
P. Patidar, and D. Kaushal, “Review of Information Protection on Android Application Devices,” Int. J. Sci. Res. Eng. Trends, vol. 6, no. 4, pp. 2751–2758, 2020.
R. Samani, “McAfee Mobile Threat Report Mobile Malware Is Playing Hide and Steal,” McAfee, Santia Clara, CA, USA, McAfee Mobile Threat Report Q1, 2020. [Online]. Available: https://www.mcafee.com/content/dam/consumer/en-us/docs/2020-Mobile-Threat-Report.pdf
P. Kocher et al., "Spectre Attacks: Exploiting Speculative Execution," in 2019 IEEE Symp. Secur. Priv. (SP), 2019, pp. 1-19, doi: 10.1109/SP.2019.00002.
F. Mercaldo and A. Santone, “Deep learning for image-based mobile malware detection,” J. Comput. Virol. Hacking Tech., vol. 16, no. 2, pp. 157–171, 2020, doi: 10.1007/s11416-019-00346-7.
M. La Polla, F. Martinelli and D. Sgandurra, "A Survey on Security for Mobile Devices," IEEE Commun. Surv. Tutor., vol. 15, no. 1, pp. 446-471, First Quarter 2013, doi: 10.1109/SURV.2012.013012.00028 .
S. Shahriar, S. Das, and S. Hossain, “Security threats in Bluetooth technology,” Comput. Secur., vol. 74, pp. 308–322, 2018, doi: 10.1016/j.cose.2017.03.008.
H. Chiang and W. Tsaur, "Mobile Malware Behavioral Analysis and Preventive Strategy Using Ontology," in IEEE Second Int. Conf. Soc. Comput., 2010, pp. 1080-1085, doi: 10.1109/SocialCom.2010.160.
C. Martin, L. Juil Legand, I.Burge, I. Joseph, N. Gill, Alicia, A. Marcus "Modelling the spread of mobile malware," Int. J. Comput. Aided Eng. Technology, vol. 2, no.1, pp. 3-14, doi: 10.1504/IJCAET.2010.029592.
S. Pirani, A. Johansen, and A. J. Mustill, “On the inclinations of the Jupiter Trojans,” Astronomy & Astrophysics, vol. 631, no. 2019, pp. 1–10, Oct. 2019, doi: 10.1051/0004-6361/201936600.
S. Kalpana and S. Karthikeyan, "A survey on rise of mobile malware and detection methods," in 2017 Int. Conf. Innovations Inf. Embed. Commun. Syst. (ICIIECS), 2017, pp. 1-5, doi: 10.1109/ICIIECS.2017.8276158.
W.-S. Chun and D.-W. Park, "Malicious code hiding android APP's distribution and hacking attacks and incident analysis," in 8th Int. Conf. Inf. Sci. Digit. Content Technol. (ICIDT2012), 2012, pp. 686-689.
S. Töyssy and M. Helenius, “About malicious software in smartphones,” J. Comput. Virol., vol. 3, no. 4, pp. 109–119, 2006, doi: 10.1007/s11416-006-0022-0.
S. Peng, S. Yu and A. Yang, "Smartphone Malware and Its Propagation Modeling: A Survey," in IEEE Commun. Surv. Tutor., vol. 16, no. 2, pp. 925-941, Second Quarter 2014, doi: 10.1109/SURV.2013.070813.00214.
Y. L. Ho and S. H. Heng, “Mobile and Ubiquitous Malware,” in Proc. 7th Int. Conf. Adv. Mob. Comput. Multimed., Dec. 2009, pp. 559–563, doi: 10.1145/1821748.1821856.
K. P. Grammatikakis, I. Koufos, N. Kolokotronis, C. Vassilakis and S. Shiaeles, "Understanding and Mitigating Banking Trojans: From Zeus to Emotet," in IEEE Int. Conf. Cyber Secur. Resil. (CSR), 2021, pp. 121-128, doi: 10.1109/CSR51186.2021.9527960.
H. Chi, “Integrate Mobile Devices into CS Security Education,” in Proc. 2015 Inf. Secur. Curric. Dev. Conf., Oct. 2015, pp. 1–4, https://doi.org/10.1145/2885990.2885991.
J. Malik and R. Kaushal, “Credroid : Android Malware Detection By Network Traffic Analysis,” in Proc. 1st ACM Workshop Priv. Aware Mob. Comput., Germany, pp. 28–36, 2016, doi: 10.1145/2940343.2940348.
Z. Chen et al., “Machine learning based mobile malware detection using highly imbalanced network traffic,” Inf. Sci. (Ny)., vol. 433–434, pp. 346–364, 2018, doi: 10.1016/j.ins.2017.04.044.
V. Svajcer, “When Malware Goes Mobile: Causes, Outcomes and Cures,” 2012. [Online].Available: https://www.sophos.com/en-us/enus/medialibrary/Gated%20Assets/white%20papers/Sophos_Malware_Goes_Mobile.pdf
Xie, X. Wang, W. Wang, and J. Liu, “Fingerprinting Android malware families,” Fornt. Comput. Sci., vol. 13, pp. 637–646, 2019, doi: 10.1007/s11704-017-6493-y.
H. Cai, N. Meng, B. Ryder and D. Yao, "DroidCat: Effective Android Malware Detection and Categorization via App-Level Profiling," IEEE Trans. Inf. Forensics Secur., vol. 14, no. 6, pp. 1455-1470, June 2019, doi: 10.1109/TIFS.2018.2879302.
J. Chen, C. Wang, Z. Zhao, K. Chen, R. Du and G. Ahn, "Uncovering the Face of Android Ransomware: Characterization and Real-Time Detection," in IEEE Trans. Inf. Forensics Secur., vol. 13, no. 5, pp. 1286-1300, May 2018, doi: 10.1109/TIFS.2017.2787905.
I. A. Chesti, M. Humayun, N. U. Sama and N. Jhanjhi, "Evolution, Mitigation, and Prevention of Ransomware," in 2020 2nd Int. Conf. Comput. Inf. Sci. (ICCIS), 2020, pp. 1-6, doi: 10.1109/ICCIS49240.2020.9257708.
T. M. Chen and Y. Rahulamathavan, “PIndroid : A novel Android malware detection,” Comput. Secur., vol. 68, pp. 36–46, 2017, doi: 10.1016/j.cose.2017.03.011.
S. Hojjatinia, S. Hamzenejadi and H. Mohseni, "Android Botnet Detection using Convolutional Neural Networks," in 2020 28th Iranian Conf. Electr. Eng. (ICEE), 2020, pp. 1-6, doi: 10.1109/ICEE50131.2020.9260674.
F. Pierazzi, G. Mezzour, Q. Han, M. Colajanni, and V. S. Subrahmanian, “A Data-driven Characterization of Modern Android Spyware,” ACM Trans. Manag. Inf. Syst., vol. 11, no. 1, pp. 1-38, 2020, doi: 10.1145/3382158.
Z. Yixiang and Z. Kang, "Review of iOS Malware Analysis," in 2017 IEEE Second Int. Conf. Data Sci. Cyberspace (DSC), 2017, pp. 511-515, doi: 10.1109/DSC.2017.104.
C-C. Hu, T-H. Jeng, and Y-M. Chen, “Dynamic Android Malware Analysis with De-Identification of Personal Identifiable Information,” in ICCBD '20: 2020 3rd Int. Conf. Comput. Big Data, Aug. 2020, pp. 30–36, doi: 10.1145/3418688.3418694.
D. Emm, R. Unuchek, M. Garnaeva, A. Ivanov, D. Makrushin, and F. Sinitsyn, “IT THREAT EVOLUTION IN Q2 2016,” 2016. [Online]. Available: https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07185743/Kaspersky_Q2_malware_report_ENG.pdf (Accessed 2nd July, 2021).
F. Mercaldo and A. Santone, “Deep learning for image-based mobile malware detection,” J. Comput. Virol. Hacking Tech., vol. 16, no. 2, pp. 157–171, 2020, doi: 10.1007/s11416-019-00346-7.
F. Wei, Y. Li, S. Roy, X. Ou, and W. Zhou, “Deep Ground Truth Analysis of Current Android Malware,” in Detetion of Intrusions and Malware, and Vulnerability Assessment, M. Ploychronakis, and M. Meier, Eds., Cham: Springer, 2015, pp. 252-276.
S. Garg and N. Baliyan, “Comparative analysis of Android and iOS from security viewpoint,” Comput. Sci. Rev., vol. 40, p. 100372, 2021, doi: 10.1016/j.cosrev.2021.100372.
A. M. Alashjaee, S. Duraibi and J. Song, "IoT-Taint: IoT Malware Detection Framework Using Dynamic Taint Analysis," in 2019 Int. Conf. Comput. Sci. Comput. Intell. (CSCI), 2019, pp. 1220-1223, doi: 10.1109/CSCI49370.2019.00229.
S. Garg and N. Baliyan, “Comparative analysis of Android and iOS from security viewpoint,” Comput. Sci. Rev., vol. 40, p. 100372, 2021, doi: 10.1016/j.cosrev.2021.100372.
P. Wu, D. Liu, J. Wang, B. Yuan, and W. Kuang, “Detection of Fake IoT App Based on Multidimensional Similarity,” IEEE Internet Things J., vol. 7, no. 8, pp. 7021–7031, 2020, doi: 10.1109/JIOT.2020.2981693.
H. Talal and R. Zagrouba, “A Robust Framework for MADS Based on DL Techniques on the IoT,” Electron., vol. 10, no. 21, p. 2723, Nov. 2021, doi: 10.3390/electronics10212723.
A. H. Amarullah, A. J. S. Runturambi and B. Widiawan, "Analyzing Cyber Crimes during COVID-19 Time in Indonesia," in 3rd Int. Conf. Comput. Commun. Internet (ICCCI), 2021, pp. 78-83, doi: 10.1109/ICCCI51764.2021.9486775.
K. Khariwal, J. Singh, and A. Arora, “IPDroid : Android Malware Detection using Intents and Permissions,” in 2020 Fourth World Conf. Smart Trends Syst. Secur. Sustain. (WorldS4), 2020, pp. 197-202, doi: 10.1109/WorldS450073.2020.9210414.
A. Talha and I. Alper, “An in-depth analysis of Android malware using hybrid techniques,” Digit. Investig., vol. 24, pp. 25–33, 2018, doi: 10.1016/j.diin.2018.01.001.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.