Skip to main navigation Skip to search Skip to main content

Potential Component Leaks in Android Apps: An Investigation into a New Feature Set for Malware Detection

  • Li Li
  • , Kevin Allix
  • , Daoyuan Li
  • , Alexandre Bartel
  • , Tegawendé F. Bissyandé
  • , Jacques Klein
  • University of Luxembourg
  • Technische Universität Darmstadt

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

We discuss the capability of a new feature set for malware detection based on potential component leaks (PCLs). PCLs are defined as sensitive data-flows that involve Android inter-component communications. We show that PCLs are common in Android apps and that malicious applications indeed manipulate significantly more PCLs than benign apps. Then, we evaluate a machine learning-based approach relying on PCLs. Experimental validations show high performance for identifying malware, demonstrating that PCLs can be used for discriminating malicious apps from benign apps.

Original languageEnglish
Title of host publicationProceedings - 2015 IEEE International Conference on Software Quality, Reliability and Security, QRS 2015
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages195-200
Number of pages6
ISBN (Electronic)9781467379892
DOIs
StatePublished - 21 Sep 2015
Externally publishedYes
EventIEEE International Conference on Software Quality, Reliability and Security, QRS 2015 - Vancouver, Canada
Duration: 3 Aug 20155 Aug 2015

Publication series

NameProceedings - 2015 IEEE International Conference on Software Quality, Reliability and Security, QRS 2015

Conference

ConferenceIEEE International Conference on Software Quality, Reliability and Security, QRS 2015
Country/TerritoryCanada
CityVancouver
Period3/08/155/08/15

Fingerprint

Dive into the research topics of 'Potential Component Leaks in Android Apps: An Investigation into a New Feature Set for Malware Detection'. Together they form a unique fingerprint.

Cite this