GSIDroid:一个可疑的子图驱动和可解释的Android恶意软件检测系统
Hong Huang1, Weitao Huang1, Feng Jiang2
1School of Computer Science and Engineering, Sichuan University of Science & Engineering, Zigong 643000, China.
Sensors (Basel, Switzerland)
|July 12, 2025
概括
GSIDroid通过子图分析和可解释性增强了Android恶意软件检测. 这种机器学习方法提高了安全性,并帮助网络安全专业人员了解恶意行为.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 机器学习 机器学习
背景情况:
- 安卓恶意软件带来了重大的经济和安全风险.
- 现有的机器学习方法往往缺乏子图分析和可解释性.
- 基于图形的检测方法可能是计算密集型,忽视节点语义.
研究的目的:
- 介绍GSIDroid,这是一个用于子图驱动和可解释的Android恶意软件检测的新框架.
- 为了提高检测性能,减少计算开销,并提高用户安全性.
- 为网络安全专业人员提供透明和可分析的检测结果.
主要方法:
- 开发了一个子图驱动的框架 (GSIDroid) 用于Android恶意软件检测.
- 集成的深层和浅层语义功能与权限信息.
- 集成的全球和本地解释性模块用于透明的分析.
主要成果:
- 在14520个样本中,GSIDroid获得了97.14%的F1得分.
- 解释模块成功识别了关键节点和权限特性.
- 证明了增强的检测性能和减少的计算开销.
结论:
- GSIDroid为Android恶意软件检测提供了一个有效和可解释的解决方案.
- 该框架帮助网络安全专家进行严格的恶意软件分析和了解恶意行为.
- GSIDroid 增强了实际部署,并支持进一步的安全研究.
相关概念视频
Stereotype Content Model
14.9K
The Stereotype Content Model (SCM) was first proposed by Susan Fiske and her colleagues (Fiske, Cuddy, Glick & Xu, 2002; see also Fiske, 2012 and Fiske, 2017). The SCM specifies that when someone encounters a new group, they will stereotype them based on two metrics: warmth—or that group’s perceived intent, and how likely they are to provide help or inflict harm—and competence—or their ability to carry out that objective. Depending on the warmth-competence...
14.9K
Leaky Scanning
5.2K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.2K
Deleterious Substances in Aggregate
259
Deleterious substances in aggregates can be detrimental to the quality and durability of concrete. These substances include organic impurities like loam, which interfere with cement hydration and are usually present in the sand. These prevent a good bond between aggregate and cement paste. Organic impurities can be detected using the colorimetric test, where the darkness of a solution after agitation indicates the level of organic content.
Another type of impurity is clay and fine material that...
Another type of impurity is clay and fine material that...
259
Detection of Black Holes
2.3K
Although black holes were theoretically postulated in the 1920s, they remained outside the domain of observational astronomy until the 1970s.
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
2.3K
Viruses with RNA Genomes
132
RNA viruses are categorized into positive-strand, negative-strand, or double-stranded groups based on their genomic structure and replication mechanisms. This classification dictates how they exploit host cellular machinery for protein synthesis and replication. Some RNA viruses also utilize reverse transcription as part of their life cycle, further diversifying their replication strategies.Positive-Strand RNA VirusesPositive-strand RNA viruses have genomes that function directly as messenger...
132
Viruses of Archaea
81
Archaeal viruses play a crucial role in the ecosystems of extremophilic archaea, particularly those belonging to the phyla Euryarchaeota and Crenarchaeota. By shaping host evolution and facilitating gene transfer, these viruses influence microbial communities and contribute to genetic diversity in extreme environments. The archaea they infect thrive in acidic hot springs and hydrothermal vents characterized by high temperatures and low pH. Archaeal viruses exhibit remarkable structural...
81


