Logo image
Back
Machine Learning for Android Scareware Detection
Journal article   Open access   Peer reviewed

Machine Learning for Android Scareware Detection

Sikha Bagui and Hunter Brock
Journal of information technology research, Vol.15(1)
03/25/2022
DOI: https://doi.org/10.4018/JITR.298326
Web of Science ID: WOS:000836690500027

Metrics

102 Record Views
3 Times Cited - Web of Science

Abstract

With the steady rise in the use of smartphones, specifically Android smartphones, there is an ongoing need to build strong intrusion detection systems to protect ourselves from malicious software attacks. This work focuses on a sub-group of android malware, scareware. The novelty of this work lies in being able to detect the various scareware families individually using a small number of network attributes, determined by a recursive feature elimination process based on information gain. No work has yet been done on analyzing the scareware families individually. Results of this work show that the number of bytes initially sent back and forth, packet size, amount of time between flows and flow duration are the most important attributes that would be needed to classify a scareware attack. Three classifiers, Decision Tree, Naive Bayes, and OneR, were used for classification. The highest average classification accuracy (79.5%) was achieved by the Decision Tree classifier with a minimum of 44 attributes.
url
Machine Learning for Android Scareware DetectionView
Published (Version of record)link to articleCC BY V4.0,  Open

Related links

Details

Logo image