{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T11:06:23Z","timestamp":1772103983992,"version":"3.50.1"},"reference-count":13,"publisher":"Wiley","license":[{"start":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T00:00:00Z","timestamp":1587340800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2020,4,20]]},"abstract":"<jats:p>Android malware detection is an important research topic in the security area. There are a variety of existing malware detection models based on static and dynamic malware analysis. However, most of these models are not very successful when it comes to evasive malware detection. In this study, we aimed to create a malware detection model based on a natural language model called skip-gram to detect evasive malware with the highest accuracy rate possible. In order to train and test our proposed model, we used an up-to-date malware dataset called Argus Android Malware Dataset (AMD) since the AMD contains various evasive malware families and detailed information about them. Meanwhile, for the benign samples, we used Comodo Android Benign Dataset. Our proposed model starts with extracting skip-gram-based features from instruction sequences of Android applications. Then it applies several machine learning algorithms to classify samples as benign or malware. We tested our proposed model with two different scenarios. In the first scenario, the random forest-based classifier performed with 95.64% detection accuracy on the entire dataset and 95% detection accuracy against evasive only samples. In the second scenario, we created a test dataset that contained zero-day malware samples only. For the training set, we did not use any sample that belongs to the malware families in the test set. The random forest-based model performed with 37.36% accuracy rate against zero-day malware. In addition, we compared our proposed model\u2019s malware detection performance against several commercial antimalware applications using VirusTotal API. Our model outperformed 7 out of 10 antimalware applications and tied with one of them on the same test scenario.<\/jats:p>","DOI":"10.1155\/2020\/6726147","type":"journal-article","created":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T23:32:02Z","timestamp":1587425522000},"page":"1-10","source":"Crossref","is-referenced-by-count":14,"title":["Combat Mobile Evasive Malware via Skip-Gram-Based Malware Detection"],"prefix":"10.1155","volume":"2020","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9249-3700","authenticated-orcid":true,"given":"Alper","family":"Egitmen","sequence":"first","affiliation":[{"name":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Irfan","family":"Bulut","sequence":"additional","affiliation":[{"name":"OM Partners, Koralenhoeve 23, 2160, Wommelgem, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R. Can","family":"Aygun","sequence":"additional","affiliation":[{"name":"University of California, Engineering VI, Los Angeles, CA 90095, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A. Bilge","family":"Gunduz","sequence":"additional","affiliation":[{"name":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Omer","family":"Seyrekbasan","sequence":"additional","affiliation":[{"name":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A. Gokhan","family":"Yavuz","sequence":"additional","affiliation":[{"name":"Computer Engineering Department, Yildiz Technical University, Istanbul, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"8","first-page":"204","volume-title":"Unknown malcode detection using opcode representation","year":"2008"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.01.007"},{"key":"14","first-page":"568","volume-title":"Learning latent byte-level feature representation for malware detection","year":"2018"},{"key":"15","first-page":"435","volume":"3","year":"2014","journal-title":"International Journal of Electronics and Computer Science Engineering"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1613\/jair.614"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177729586"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.11.008"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2947861"},{"key":"23","doi-asserted-by":"crossref","first-page":"1027","DOI":"10.1007\/s00500-019-03940-5","volume":"24","year":"2020","journal-title":"Soft Computing"},{"key":"24","year":"2018"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1109\/jrproc.1952.273898"},{"key":"32","first-page":"5","volume":"45","year":"2001","journal-title":"Machinelearning"},{"key":"33","year":"2014"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2020\/6726147.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2020\/6726147.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2020\/6726147.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,5,15]],"date-time":"2020-05-15T00:54:28Z","timestamp":1589504068000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2020\/6726147\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,20]]},"references-count":13,"alternative-id":["6726147","6726147"],"URL":"https:\/\/doi.org\/10.1155\/2020\/6726147","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"value":"1939-0114","type":"print"},{"value":"1939-0122","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,4,20]]}}}