From Signals to Behaviors: Evidence-Based Android Malware Detection

본문 미리보기

arXiv:2607.23272v1 Announce Type: new Abstract: Android malware remains a persistent threat, and detecting it accurately is a long-standing open problem. Whether an app is malicious depends on what it actually does and the context in which it does it, not on the surface signals it happens to exhibit. Existing detectors instead reason about proxies for behavior, such as learned features or local code slices, and flag whatever deviates from these proxies as malicious. But deviation is not malicio