A comparative study of static, dynamic and hybrid analysis techniques for android malware detection

With the popularity and increase in the number of smartphone users, the spread of mobile malware on Android platform has increased. Current intelligent terminal based on the Android has occupied most of the market, and the number of malware aiming at Android platform is also increasing with the increase in the smartphone users. The popularity of the smartphones, the large market share of android and the openness of the android market make android more sensitive platform for malware attacks. From a scientific point of view for understanding the threat to security and privacy, it is important for an analyst to analyze the behavior of the malicious application. Since a single approach may not be enough for detecting the malware against the advanced techniques, multiple approaches can be used for effective malware detection. This paper emphasizes on different types of android malware analysis techniques such as static analysis, dynamic analysis and hybrid analysis (combination of static and dynamic analysis). This paper also includes different approaches of these analysis techniques along with their functionality used for malware detection and a comparative study between these three types of analysis is highlighted. In this research, the effectiveness of hybrid analysis is also analyzed in comparison with static and dynamic analysis. Keywords—Android malware, Static analysis, Dynamic analysis, Hybrid analysis ________________________________________________________________________________________________________

[1]  L. Cavallaro,et al.  A System Call-Centric Analysis and Stimulation Technique to Automatically Reconstruct Android Malware Behaviors , 2013 .

[2]  Sahin Albayrak,et al.  Using static analysis for automatic assessment and mitigation of unwanted and malicious activities within Android applications , 2011, 2011 6th International Conference on Malicious and Unwanted Software.

[3]  Lei Zhang,et al.  Attack Tree Based Android Malware Detection with Hybrid Analysis , 2014, 2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications.

[4]  T. Gireesh Kumar,et al.  Static and Dynamic Analysis for Android Malware Detection , 2018, CloudCom 2018.

[5]  Christopher Krügel,et al.  Limits of Static Analysis for Malware Detection , 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).

[6]  Konrad Rieck,et al.  DREBIN: Effective and Explainable Detection of Android Malware in Your Pocket , 2014, NDSS.

[7]  Xuxian Jiang,et al.  Catch Me If You Can: Evaluating Android Anti-Malware Against Transformation Attacks , 2014, IEEE Transactions on Information Forensics and Security.