Paper published in a book (Scientific congresses, symposiums and conference proceedings)
Euphony: Harmonious Unification of Cacophonous Anti-Virus Vendor Labels for Android Malware
Hurier, Médéric; Suarez-Tangil, Guillermo; Dash, Santanu Kumar et al.
2017In MSR 2017
Peer reviewed
 

Files


Full Text
PID4727047.pdf
Author preprint (565.83 kB)
Download

All documents in ORBilu are protected by a user license.

Send to



Details



Keywords :
malware; android; ground-truth; datasets; labelling
Abstract :
[en] Android malware is now pervasive and evolving rapidly. Thousands of malware samples are discovered every day with new models of attacks. The growth of these threats has come hand in hand with the proliferation of collective repositories sharing the latest specimens. Having access to a large number of samples opens new research directions aiming at efficiently vetting apps. However, automatically inferring a reference ground-truth from those repositories is not straightforward and can inadvertently lead to unforeseen misconceptions. On the one hand, samples are often mis-labeled as different parties use distinct naming schemes for the same sample. On the other hand, samples are frequently mis-classified due to conceptual errors made during labeling processes. In this paper, we analyze the associations between all labels given by different vendors and we propose a system called EUPHONY to systematically unify common samples into family groups. The key novelty of our approach is that no a-priori knowledge on malware families is needed. We evaluate our approach using reference datasets and more than 0.4 million additional samples outside of these datasets. Results show that EUPHONY provides competitive performance against the state-of-the-art.
Research center :
University of Luxembourg: Interdisciplinary Centre for Security, Reliability and Trust - SNT
Disciplines :
Computer science
Author, co-author :
Hurier, Médéric ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Suarez-Tangil, Guillermo;  University College London - UCL
Dash, Santanu Kumar;  University College London - UCL
Bissyande, Tegawendé François D Assise  ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Le Traon, Yves ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Klein, Jacques ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > Computer Science and Communications Research Unit (CSC)
Cavallaro, Lorenzo;  Royal Holloway, University of London
External co-authors :
yes
Language :
English
Title :
Euphony: Harmonious Unification of Cacophonous Anti-Virus Vendor Labels for Android Malware
Publication date :
21 May 2017
Event name :
The 14th International Conference on Mining Software Repositories
Event place :
Buenos Aires, Argentina
Event date :
from 20-05-2017 to 21-05-2017
Audience :
International
Main work title :
MSR 2017
Peer reviewed :
Peer reviewed
Focus Area :
Security, Reliability and Trust
FnR Project :
FNR5921289 - Static Analysis For Android Security: Building The Map Of Android Inter-application Communication, 2013 (01/05/2014-30/04/2017) - Jacques Klein
Available on ORBilu :
since 15 June 2017

Statistics


Number of views
249 (34 by Unilu)
Number of downloads
372 (20 by Unilu)

Scopus citations®
 
71
Scopus citations®
without self-citations
62

Bibliography


Similar publications



Contact ORBilu