Publication: A new mobile botnet classification based on permission and API calls
dc.Conferencecode | 132013 | |
dc.Conferencedate | 6 September 2017 through 8 September 2017 | |
dc.Conferencename | 7th International Conference on Emerging Security Technologies, EST 2017 | |
dc.FundingDetails | Universiti Sains Islam Malaysia,�USIM: USIM/FRGS/FST/32/50114 Ministry of Higher Education, Malaysia,�MOHE | |
dc.FundingDetails | The authors would like to express their gratitude to Ministry of Higher Education (MOHE), Malaysia and Universiti Sains Islam Malaysia (USIM) for the support and facilities provided. This research paper is supported by MOHE grant: [USIM/FRGS/FST/32/50114]. | |
dc.citedby | 5 | |
dc.contributor.affiliations | Faculty of Science and Technology | |
dc.contributor.affiliations | Universiti Sains Islam Malaysia (USIM) | |
dc.contributor.author | Yusof M. | en_US |
dc.contributor.author | Saudi M.M. | en_US |
dc.contributor.author | Ridzuan F. | en_US |
dc.date.accessioned | 2024-05-28T08:27:38Z | |
dc.date.available | 2024-05-28T08:27:38Z | |
dc.date.issued | 2017 | |
dc.description.abstract | Currently, mobile botnet attacks have shifted from computers to smartphones due to its functionality, ease to exploit, and based on financial intention. Mostly, it attacks Android due to its popularity and high usage among end users. Every day, more and more malicious mobile applications (apps) with the botnet capability have been developed to exploit end users' smartphones. Therefore, this paper presents a new mobile botnet classification based on permission and Application Programming Interface (API) calls in the smartphone. This classification is developed using static analysis in a controlled lab environment and the Drebin dataset is used as the training dataset. 800 apps from the Google Play Store have been chosen randomly to test the proposed classification. As a result, 16 permissions and 31 API calls that are most related with mobile botnet have been extracted using feature selection and later classified and tested using machine learning algorithms. The experimental result shows that the Random Forest Algorithm has achieved the highest detection accuracy of 99.4% with the lowest false positive rate of 16.1% as compared to other machine learning algorithms. This new classification can be used as the input for mobile botnet detection for future work, especially for financial matters. � 2017 IEEE. | |
dc.description.nature | Final | en_US |
dc.identifier.ArtNo | 8090410 | |
dc.identifier.doi | 10.1109/EST.2017.8090410 | |
dc.identifier.epage | 127 | |
dc.identifier.isbn | 9781540000000 | |
dc.identifier.scopus | 2-s2.0-85041178082 | |
dc.identifier.spage | 122 | |
dc.identifier.uri | https://www.scopus.com/inward/record.uri?eid=2-s2.0-85041178082&doi=10.1109%2fEST.2017.8090410&partnerID=40&md5=3f24ef3bb85629335c9f226172936645 | |
dc.identifier.uri | https://oarep.usim.edu.my/handle/123456789/8809 | |
dc.language | English | |
dc.language.iso | en_US | |
dc.publisher | Institute of Electrical and Electronics Engineers Inc. | en_US |
dc.relation.ispartof | Proceedings - 2017 7th International Conference on Emerging Security Technologies, EST 2017 | |
dc.source | Scopus | |
dc.subject | android botnet | en_US |
dc.subject | machine learning | en_US |
dc.subject | mobile botnet classification | en_US |
dc.subject | random forest algorithm | en_US |
dc.subject | static analysis | en_US |
dc.subject | Android (operating system) | en_US |
dc.subject | Application programming interfaces (API) | en_US |
dc.subject | Artificial intelligence | en_US |
dc.subject | Botnet | en_US |
dc.subject | Classification (of information) | en_US |
dc.subject | Decision trees | en_US |
dc.subject | Learning systems | en_US |
dc.subject | Smartphones | en_US |
dc.subject | Static analysis | en_US |
dc.subject | Botnet detections | en_US |
dc.subject | Detection accuracy | en_US |
dc.subject | End users | en_US |
dc.subject | False positive rates | en_US |
dc.subject | Google plays | en_US |
dc.subject | Mobile applications | en_US |
dc.title | A new mobile botnet classification based on permission and API calls | |
dc.type | Conference Paper | en_US |
dspace.entity.type | Publication |