The feature selection based on AndroidManifest.xml

Abstract

Nowadays, Android malicious applications are rampant, and information security is facing serious challenges. To prevent being decompiled, Android malicious applications often use software packers to protect themselves. After decompilation, the only available file is the AndroidManifest.xml file. Therefore, when detecting shell applications, the researchers can only rely on the features provided by the AndroidManifest.xml file, including permissions and intent filters. How to select effective features from the AndroidManifest.xml file is the key to detect Android malicious applications. This paper proposes the feature selection method for Android malware detection based on AndroidManifest.xml.