关键词: 隐马尔可夫模型, 支持向量机, 恶意行为, 智能终端

Abstract:

A detection method was proposed to analyze the malicious behavior on Android, that combines hidden-Markov model (HMM) with support vector machine (SVM) for modeling as well as construct model for behaviors like networking and data accessing. This model takes advantage of both HMM and SVM and overcomes the shortcomings inside, and it is suitable for classification using dynamic behavior sequences. Experiments show that this method can capture the abnormal behaviors with high accuracy rate and lower false positive rate.

Key words: hidden-Markov model, support vector machine, malware, smartphone