pBMDS: a behavior-based malware detection system for cellphone devices

Computing environments on cellphones, especially smartphones, are becoming more open and general-purpose, thus they also become attractive targets of malware. Cellphone malware not only causes privacy leakage, extra charges, and depletion of battery power, but also generates malicious traffic and drains down mobile network and service capacity. In this work we devise a novel behaviorbased malware detection system named pBMDS, which adopts a probabilistic approach through correlating user inputs with system calls to detect anomalous activities in cellphones. pBMDS observes unique behaviors of the mobile phone applications and the operating users on input and output constrained devices, and leverages a Hidden Markov Model (HMM) to learn application and user behaviors from two major aspects: process state transitions and user operational patterns. Built on these, pBMDS identifies behavioral differences between malware and human users. Through extensive experiments on major smartphone p...

• Type: Conference
• Year: 2010
• Where: WISEC
• Authors: Liang Xie, Xinwen Zhang, Jean-Pierre Seifert, Sencun Zhu
• Keywords: Cellphone Malware, Keywords Cellphone Malware, Major Smartphone Platforms, Wireless Network, WISEC 2010