Abstract—The diverse types of mobile applications are used regardless of time and place, as a number of Android mobile device users have been recently increased. However, the breach of privacy through illegal leakage of personal information and financial information inside mobile devices has occurred without users' notices, as the malicious mobile application is relatively increasing In order to reduce the damage caused by the malicious Android applications, the efficient detection mechanism should be developed to determine normal and malicious apps correctly. In this paper, we aggregated real-time system call events activated from malware samples distributed by Android Malware Genome Project. After extracting the basic difference feature and characteristics of system call events pattern from each normal and malicious applications, we can determine whether any given anonymous mobile application is malicious or normal one.

Index Terms—Android, malicious mobile applications, system call events, similarity.

You Joung Ham and Hyung Woo Lee are with Dept. of Computer Engineering, Hanshin University, Rep. of Korea (e-mail: you86400@hanmail.net, hwlee@hs.ac.kr).

Cite:You Joung Ham and Hyung-Woo Lee, "Detection of Malicious Android Mobile Applications Based on Aggregated System Call Events," International Journal of Computer and Communication Engineering vol. 3, no. 2, pp. 149-154, 2014.