An enhanced android malware detection framework with ranked features selection on static analysis / (Record no. 104649)

MARC details
000 -LEADER
fixed length control field 04018ntm a2200337 i 4500
003 - CONTROL NUMBER IDENTIFIER
control field MY-KuUP
005 - DATE AND TIME OF LATEST TRANSACTION
control field 20260407155818.0
006 - FIXED-LENGTH DATA ELEMENTS--ADDITIONAL MATERIAL CHARACTERISTICS
fixed length control field t||||fr|||| 000 0
007 - PHYSICAL DESCRIPTION FIXED FIELD--GENERAL INFORMATION
fixed length control field ta
008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION
fixed length control field 260407t20252025my a|||fr|||| 000 0 eng d
020 ## - INTERNATIONAL STANDARD BOOK NUMBER
International Standard Book Number THE0010447 (Local)
Qualifying information Hardback
040 ## - CATALOGING SOURCE
Original cataloging agency UMPSA
Language of cataloging eng
Transcribing agency UMPSA
Description conventions rda
090 ## - LOCALLY ASSIGNED LC-TYPE CALL NUMBER (OCLC); LOCAL CALL NUMBER (RLIN)
Classification number (OCLC) (R) ; Classification number, CALL (RLIN) (NR) FKOM .R34 2025 r Thesis
100 1# - MAIN ENTRY--PERSONAL NAME
Personal name Rahiwan Nazar Romli,
Relator term author.
245 10 - TITLE STATEMENT
Title An enhanced android malware detection framework with ranked features selection on static analysis /
Statement of responsibility, etc. Rahiwan Nazar Romli
264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE
Place of production, publication, distribution, manufacture Kuantan, Pahang :
Name of producer, publisher, distributor, manufacturer UMPSA,
Date of production, publication, distribution, manufacture, or copyright notice 2025
264 #4 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE
Date of production, publication, distribution, manufacture, or copyright notice © 2025
300 ## - PHYSICAL DESCRIPTION
Extent xii, 131 pages :
Other physical details illustration (some colour) ;
Dimensions 30 cm. +
Accompanying material 1 CD-ROM.
336 ## - CONTENT TYPE
Source rdacontent
Content type term text
337 ## - MEDIA TYPE
Source rdamedia
Media type term unmediated
338 ## - CARRIER TYPE
Source rdacarrier
Carrier type term volume
347 ## - DIGITAL FILE CHARACTERISTICS
Source rda
File type text file
Encoding format PDF
500 ## - GENERAL NOTE
General note Faculty of Computing
502 ## - DISSERTATION NOTE
Dissertation note Thesis (Doctor of Philosophy) -- Universiti Malaysia Pahang Al Sultan Abdullah - 2025
504 ## - BIBLIOGRAPHY, ETC. NOTE
Bibliography, etc. note Include bibliographical reference
520 3# - SUMMARY, ETC.
Summary, etc. Android emerges as the dominant mobile operating system globally. Driven by its high demand and open-source nature, it becomes a prime target for malware. Feature selection in Android malware analysis is a crucial process involving thousands of attributes. Selecting relevant attributes become increasingly challenging due to the need to thoroughly examine the application. Static analysis is one of the approaches considered as simpler and faster because it extracts malware features without executing the application. However, a major problem in static analysis is the selection of irrelevant attributes, which lead to misleading results for learning algorithms, overfitting, reduced generalizability and increased runtime. The study aims to improve the Android malware detection framework by strengthening its static analysis capabilities for optimal feature selection, refining the extracted malware features through an enhanced frequency-based optimization process, and finally validating the performance of the improved framework using real-world Android malware to ensure high detection accuracy and robustness. This study proposes an enhancement to the Android malware detection framework in the feature selection. It started with the automation in both feature extraction and binary feature vector generation. Additionally, the core Android malware detection framework is integrated with Feature Frequency Analysis to rank and filter the significant feature attributes. The enhanced framework is evaluated using 3011 benign applications from various categories in the official Google Play Store and 4995 malware applications from the AndroZoo dataset. Six machine learning algorithms, which are Random Forest, K-Nearest Neighbor (KNN), J48, Naïve Bayes, AdaBoostM1 and Voted Perceptron were tested on the enhanced framework with four different dataset-splitting techniques. Results indicated that the malware detection accuracy is improved with an optimised number of features as compared to the previous studies with 29 features and 95.3% precision. The finding is validated using regression analysis for each algorithm with 50 iterations. Random Forest Algorithm with cross-validation exhibited the highest performance relative to the benchmark studies and other classification methods with 95% accuracy. Consequently, the process of automated feature extraction effectively targets the features without limitations on the file size or quantity. It enhances the computational time with average 0.35s and reliable in identifying the significant features. For the future works, the combination or mapping of these two features, API Call and Permission could potentially lead to improved accuracy and reliability to better results and both could be used to achieve higher accuracy and acquire more reliable comparisons.
610 20 - SUBJECT ADDED ENTRY--CORPORATE NAME
Corporate name or jurisdiction name as entry element Faculty of Computing
General subdivision Dissertations
650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element Universities and colleges
General subdivision Dissertations
650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element Theses
General subdivision Dissertations
942 ## - ADDED ENTRY ELEMENTS (KOHA)
Source of classification or shelving scheme Library of Congress Classification
Koha item type Thesis
Holdings
Withdrawn status Lost status Source of classification or shelving scheme Damaged status Not for loan Permanent Location Current Location Date acquired Total Checkouts Full call number Barcode Date last seen Price effective from Koha item type
  Not lost Library of Congress Classification   Not for loan UMPLIB PEKAN UMPLIB PEKAN 07/04/2026   FKOM .R34 2025 r Thesis T000004786 07/04/2026 07/04/2026 Thesis
  Not lost Library of Congress Classification   Final Processing UMPLIB PEKAN UMPLIB PEKAN 07/04/2026   CD13994 T000004787 07/04/2026 07/04/2026 Thesis

Perpustakaan Universiti Malaysia Pahang Al-Sultan Abdullah
26600 Pekan, Pahang Darul Makmur
Phone: +609 431 5063 (Gambang) / +609 431 5035 (Pekan)
Email: umplibrary@umpsa.edu.my

Connect With Us