Seeing the Unseen: Revealing Mobile Malware Hidden Communications via Energy Consumption and Artificial Intelligence

Abstract : Modern malware uses advanced techniques to hide from static and dynamic analysis tools. To achieve stealthiness when attacking a mobile device, an effective approach is the use of a covert channel built by two colluding applications to locally exchange data. Since this process is tightly coupled with the used hiding method, its detection is a challenging task, also worsened by the very low transmission rates. As a consequence, it is important to investigate how to reveal the presence of malicious software by using general indicators such as the energy consumed by the device. In this perspective, the paper aims to spot malware covertly exchanging data by using two detection methods based on artificial intelligence tools such as neural networks and decision trees. To verify their effectiveness, seven covert channels have been implemented and tested over a measurement framework using Android devices. Experimental results show the feasibility and effectiveness of the proposed approach to detect the hidden data exchange between colluding applications.
Document type :
Journal articles
Complete list of metadatas

Cited literature [50 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-01247495
Contributor : Jean-François Lalande <>
Submitted on : Tuesday, December 22, 2015 - 11:00:01 AM
Last modification on : Thursday, February 7, 2019 - 4:21:07 PM
Long-term archiving on : Wednesday, March 23, 2016 - 2:06:05 PM

Files

seeing_the_unseen.pdf
Files produced by the author(s)

Identifiers

Citation

Luca Caviglione, Mauro Gaggero, Jean-François Lalande, Wojciech Mazurczyk, Marcin Urbanski. Seeing the Unseen: Revealing Mobile Malware Hidden Communications via Energy Consumption and Artificial Intelligence. IEEE Transactions on Information Forensics and Security, Institute of Electrical and Electronics Engineers, 2016, 11 (4), pp.799-810. ⟨10.1109/TIFS.2015.2510825⟩. ⟨hal-01247495⟩

Share

Metrics

Record views

1237

Files downloads

1532