TY - JOUR
T1 - Android Malware Detection Method Combining Multi-Frequency Features and Convolutional Neural Networks
AU - Wang, Jian
AU - Liu, Xue Hua
AU - Huang, Meng Yuan
AU - Zhou, Pei Yi
AU - Xu, Yuan
N1 - Publisher Copyright:
© 2013 IEEE.
PY - 2025
Y1 - 2025
N2 - With the rapid evolution of Android malware variants, traditional detection methods exhibit significant limitations in addressing complex patterns and adversarial attacks. This paper proposes a dual-modal feature extraction and fusion approach that integrates Convolutional Neural Networks (CNN) with Fourier frequency domain analysis for Android malware detection. Firstly, a novel feature extraction framework based on frequency domain analysis is constructed, which dynamically adjusts the boundary between high-frequency and low-frequency components through adaptive frequency selection. This framework effectively captures both the global patterns and local details of malware, significantly enhancing the robustness of frequency domain features. Secondly, a bidirectional recursive optimization-based feature fusion mechanism is designed, enabling deep integration of high-frequency, low-frequency, and spatial domain features through multiple rounds of iterative interaction. Experimental results demonstrate that the proposed method outperforms existing approaches in terms of accuracy, recall, and adversarial sample detection capability. Notably, it exhibits outstanding stability and performance in handling malware variants, offering an efficient and reliable technical framework for Android malware detection.
AB - With the rapid evolution of Android malware variants, traditional detection methods exhibit significant limitations in addressing complex patterns and adversarial attacks. This paper proposes a dual-modal feature extraction and fusion approach that integrates Convolutional Neural Networks (CNN) with Fourier frequency domain analysis for Android malware detection. Firstly, a novel feature extraction framework based on frequency domain analysis is constructed, which dynamically adjusts the boundary between high-frequency and low-frequency components through adaptive frequency selection. This framework effectively captures both the global patterns and local details of malware, significantly enhancing the robustness of frequency domain features. Secondly, a bidirectional recursive optimization-based feature fusion mechanism is designed, enabling deep integration of high-frequency, low-frequency, and spatial domain features through multiple rounds of iterative interaction. Experimental results demonstrate that the proposed method outperforms existing approaches in terms of accuracy, recall, and adversarial sample detection capability. Notably, it exhibits outstanding stability and performance in handling malware variants, offering an efficient and reliable technical framework for Android malware detection.
KW - Adversarial android malware detection
KW - convolutional neural networks (CNN)
KW - cyber security
KW - dual-modal features
KW - feature fusion
KW - frequency domain analysis
UR - https://www.scopus.com/pages/publications/105001209677
U2 - 10.1109/ACCESS.2025.3550124
DO - 10.1109/ACCESS.2025.3550124
M3 - Article
AN - SCOPUS:105001209677
SN - 2169-3536
VL - 13
SP - 45874
EP - 45884
JO - IEEE Access
JF - IEEE Access
ER -