Mobile botnets detection using deep learning techniques

Document Type : Original Article

Authors

1 Master's student, Shahid Bahonar University of Kerman, Kerman, Iran

2 Associate Professor, Shahid Bahonar University of Kerman, Kerman, Iran

3 Assistant Professor, Shahid Bahonar University of Kerman, Kerman, Iran

Abstract

Smartphones are now well integrated with advanced capabilities and technologies such as the Internet. Today, due to the facilities and capabilities and the widespread use of smart mobile devices, mobile security has become a vital issue worldwide. Smartphones are not properly protected compared to computers and computer networks, and users do not consider security updates. Recently, mobile devices and networks have been targeted by one of the most dangerous cyber threats known as botnets. Mobile Bantent An enhanced example of Boutons has the ability to perform malicious operations such as denial of service attacks, data theft, eavesdropping, and more. Bunters use three communication protocols: HTTP, SMS and Bluetooth to communicate with each other; So when users are not connected to the Internet, botnets are able to communicate with each other. In this study, to identify mobile batonet from 14 Android baton families, including 1932 samples of Android mobile devices applications and 4304 samples of safe and secure Android mobile devices applications have been used. Application permissions were extracted for reverse engineering to automatically classify and detect types of botnets, then based on these permissions, each application was converted to an equivalent image using the proposed method. Labeled images were then used to train convolutional neural networks. The results of evaluation and comparison of this method with classical methods including backup vector machine and decision tree showed that the proposed method is able to achieve higher efficiency in detecting different types of botnets and separating it from healthy programs

Keywords


Smiley face

[1]    M. La Polla, F. Martinelli, and D. Sgandurra, "A survey on security for mobile devices," IEEE communications surveys & tutorials, vol. 15, no. 1, pp. 446-471, 2012.
[2]    Y. Zeng, K. G. Shin, and X. Hu, "Design of SMS commanded-and-controlled and P2P-structured mobile botnets," in Proceedings of the fifth ACM conference on Security and Privacy in Wireless and Mobile Networks, 2012, pp. 137-148.
[3]    A. Ezzatneshan, S. Kamel Tabbakh Farizani, M. Kheirabadi, and R. Ghaemi, "Providing a new solution to botnet detection in a Markov chain-based network," Electronic and Cyber Defense, vol. 9, no. 3, pp. 59-71, 2021.(in Persian)
[4]    H. Akbari and S. Safavi, "Estimate botnet using vicarious servers in distributed denial of service attacks," Journal of Electronical & Cyber Defence, pp. 95-109.(in Persian)
[5]    A. Flo and A. Josang, "Consequences of botnets spreading to mobile devices," in Short-Paper Proceedings of the 14th Nordic Conference on Secure IT Systems (NordSec 2009), 2009, pp. 37-43: Citeseer.
[6]    N. Sakthipriya, V. Govindasamy, and V. Akila, "Review of Deep Learning Approaches for IoT Botnet Detection," in Proceedings of International Conference on Communication and Computational Technologies, 2023, pp. 521-533: Springer.
[7]    M. Gopinath and S. C. Sethuraman, "A comprehensive survey on deep learning based malware detection techniques," Computer Science Review, vol. 47, p. 100529, 2023.
[8]    S. Hamzenejadi, M. Ghazvini, and S. Hosseini, "Mobile botnet detection: a comprehensive survey," International Journal of Information Security, pp. 1-39, 2022.
[9]    M. Moodi, M. Ghazvini, and H. Moodi, "A hybrid intelligent approach to detect android botnet using smart self-adaptive learning-based PSO-SVM," Knowledge-Based Systems, vol. 222, p. 106988, 2021.
[10] X. Meng and G. Spanoudakis, "MBotCS: A mobile botnet detection system based on machine learning," in International Conference on Risks and Security of Internet and Systems, 2015, pp. 274-291: Springer.
[11] Z. Abdullah, M. M. Saudi, and N. B. Anuar, "ABC: android botnet classification using feature selection and classification algorithms," Advanced Science Letters, vol. 23, no. 5, pp. 4717-4720, 2017.
[12] C. Tansettanakorn, S. Thongprasit, S. Thamkongka, and V. Visoottiviseth, "ABIS: a prototype of android botnet identification system," in 2016 Fifth ICT International Student Project Conference (ICT-ISPC), 2016, pp. 1-5: IEEE.
[13] S. Anwar, J. M. Zain, Z. Inayat, R. U. Haq, A. Karim, and A. N. Jabir, "A static approach towards mobile botnet detection," in 2016 3rd International Conference on Electronic Design (ICED), 2016, pp. 563-567: IEEE.
[14] J. f. Alqatawna and H. Faris, "Toward a detection framework for android botnet," in 2017 International Conference on New Trends in Computing Sciences (ICTCS), 2017, pp. 197-202: IEEE.
[15] S. Hojjatinia, S. Hamzenejadi, and H. Mohseni, "Android botnet detection using convolutional neural networks," in 2020 28th Iranian Conference on Electrical Engineering (ICEE), 2020, pp. 1-6: IEEE.
[16] S. Y. Yerima and M. K. Alzaylaee, "Mobile botnet detection: a deep learning approach using convolutional neural networks," in 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA), 2020, pp. 1-8: IEEE.
[17] S. Y. Yerima and Y. To, "A deep learning-enhanced botnet detection system based on Android manifest text mining," in 2022 10th International Symposium on Digital Forensics and Security (ISDFS), 2022, pp. 1-6: IEEE.
[18] S. Balasunthar and Z. Abdullah, "Comparison of Convolutional Neural Network and Artificial Neural Network for Android Botnet Attack Detection," Applied Information Technology And Computer Science, vol. 3, no. 2, pp. 32-49, 2022.
[19] M. Faghihniya, R. Jalaei, and H. Shojaee Yas, "Kavosh: Offering an Analysis Method and the Impact of Normal Network Traffic on Selection and Extraction Based on the Minkowski Distance," Electronic and Cyber Defense, vol. 9, no. 1, pp. 137-147, 2021.(in Persian)
[20] A. M. Almuhaideb and D. Y. Alynanbaawi, "Applications of artificial intelligence to detect android botnets: A Survey," IEEE Access, vol. 10, pp. 71737-71748, 2022.
[21] R. Mishra and S. K. Jha, "Survey on Botnet Detection Techniques," in Internet of Things and Its Applications: Springer, 2022, pp. 441-449.
Volume 11, Issue 2 - Serial Number 42
No. 42, Summer
July 2023
Pages 31-43
  • Receive Date: 12 June 2022
  • Revise Date: 20 January 2023
  • Accept Date: 17 May 2023
  • Publish Date: 22 June 2023