Static and Dynamic Analysis for Android Malware Detection

Abstract

In this work, we perform a comparitive study on the behavior of malware and benign applications using its static and dynamic features. In static analysis, the permissions required for an application are considered. But in dynamic, we use a tool called Droidbox. Droidbox is an android sandbox which can monitor some app actions like network activities, file system activities, cryptographic activities, information leakage, etc. Here, we consider these actions as well as dynamic API calls of applications. We propose to implement an android malware detector that can detect an app whether it is malware or not, prior to installation.