A Proposed Artificial Intelligence Model for Android-Malware Detection

Fatma Taher, Omar Al Fandi, Mousa Al Kfairy, Hussam Al Hamadi, Saed Alrabaee

Research output: Contribution to journalArticlepeer-review

1 Citation (Scopus)


There are a variety of reasons why smartphones have grown so pervasive in our daily lives. While their benefits are undeniable, Android users must be vigilant against malicious apps. The goal of this study was to develop a broad framework for detecting Android malware using multiple deep learning classifiers; this framework was given the name DroidMDetection. To provide precise, dynamic, Android malware detection and clustering of different families of malware, the framework makes use of unique methodologies built based on deep learning and natural language processing (NLP) techniques. When compared to other similar works, DroidMDetection (1) uses API calls and intents in addition to the common permissions to accomplish broad malware analysis, (2) uses digests of features in which a deep auto-encoder generates to cluster the detected malware samples into malware family groups, and (3) benefits from both methods of feature extraction and selection. Numerous reference datasets were used to conduct in-depth analyses of the framework. DroidMDetection’s detection rate was high, and the created clusters were relatively consistent, no matter the evaluation parameters. DroidMDetection surpasses state-of-the-art solutions MaMaDroid, DroidMalwareDetector, MalDozer, and DroidAPIMiner across all metrics we used to measure their effectiveness.

Original languageEnglish
Article number67
Issue number3
Publication statusPublished - Sept 2023


  • NLP
  • android
  • clustering
  • deep learning
  • malware
  • static analysis

ASJC Scopus subject areas

  • Communication
  • Human-Computer Interaction
  • Computer Networks and Communications


Dive into the research topics of 'A Proposed Artificial Intelligence Model for Android-Malware Detection'. Together they form a unique fingerprint.

Cite this