Android Malware Detection
Detection of Android Malware using Machine Learning
@kaggle.subhajournal_android_malware_detection
Detection of Android Malware using Machine Learning
@kaggle.subhajournal_android_malware_detection
Android Malware detection using machine learning is an approach to detecting and classifying malicious applications for Android devices. One of the precise way to identify the suspiciousness of applications is by monitoring the network on which the android device is connected. Machine learning is a subset of artificial intelligence which focuses on the development of computer programs that can access data and use it to learn for themselves. This technology can be used to build models that evaluate incoming data in order to make predictions and detect anomalies. This can be applied to the detection of malicious Android applications, by building a model that looks for patterns associated with malware behaviour. The model could use a variety of features, such as permissions requested, API calls made, network activity, etc. Once trained the model can then be deployed to classify any new application as malicious or non-malicious.
CREATE TABLE android_malware (
"unnamed_0" BIGINT -- Unnamed: 0,
"flow_id" VARCHAR,
"n__source_ip" VARCHAR -- Source IP,
"n__source_port" BIGINT -- Source Port,
"n__destination_ip" VARCHAR -- Destination IP,
"n__destination_port" DOUBLE -- Destination Port,
"n__protocol" DOUBLE -- Protocol,
"n__timestamp" VARCHAR -- Timestamp,
"n__flow_duration" BIGINT -- Flow Duration,
"n__total_fwd_packets" BIGINT -- Total Fwd Packets,
"n__total_backward_packets" BIGINT -- Total Backward Packets,
"total_length_of_fwd_packets" DOUBLE,
"n__total_length_of_bwd_packets" DOUBLE -- Total Length Of Bwd Packets,
"n__fwd_packet_length_max" DOUBLE -- Fwd Packet Length Max,
"n__fwd_packet_length_min" DOUBLE -- Fwd Packet Length Min,
"n__fwd_packet_length_mean" DOUBLE -- Fwd Packet Length Mean,
"n__fwd_packet_length_std" DOUBLE -- Fwd Packet Length Std,
"bwd_packet_length_max" DOUBLE,
"n__bwd_packet_length_min" DOUBLE -- Bwd Packet Length Min,
"n__bwd_packet_length_mean" DOUBLE -- Bwd Packet Length Mean,
"n__bwd_packet_length_std" DOUBLE -- Bwd Packet Length Std,
"flow_bytes_s" DOUBLE,
"n__flow_packets_s" DOUBLE -- Flow Packets/s,
"n__flow_iat_mean" DOUBLE -- Flow IAT Mean,
"n__flow_iat_std" DOUBLE -- Flow IAT Std,
"n__flow_iat_max" DOUBLE -- Flow IAT Max,
"n__flow_iat_min" DOUBLE -- Flow IAT Min,
"fwd_iat_total" DOUBLE,
"n__fwd_iat_mean" DOUBLE -- Fwd IAT Mean,
"n__fwd_iat_std" DOUBLE -- Fwd IAT Std,
"n__fwd_iat_max" DOUBLE -- Fwd IAT Max,
"n__fwd_iat_min" DOUBLE -- Fwd IAT Min,
"bwd_iat_total" DOUBLE,
"n__bwd_iat_mean" DOUBLE -- Bwd IAT Mean,
"n__bwd_iat_std" DOUBLE -- Bwd IAT Std,
"n__bwd_iat_max" DOUBLE -- Bwd IAT Max,
"n__bwd_iat_min" DOUBLE -- Bwd IAT Min,
"fwd_psh_flags" DOUBLE,
"n__bwd_psh_flags" DOUBLE -- Bwd PSH Flags,
"n__fwd_urg_flags" BIGINT -- Fwd URG Flags,
"n__bwd_urg_flags" BIGINT -- Bwd URG Flags,
"n__fwd_header_length" BIGINT -- Fwd Header Length,
"n__bwd_header_length" BIGINT -- Bwd Header Length,
"fwd_packets_s" DOUBLE,
"n__bwd_packets_s" DOUBLE -- Bwd Packets/s,
"n__min_packet_length" DOUBLE -- Min Packet Length,
"n__max_packet_length" DOUBLE -- Max Packet Length,
"n__packet_length_mean" DOUBLE -- Packet Length Mean,
"n__packet_length_std" DOUBLE -- Packet Length Std,
"n__packet_length_variance" DOUBLE -- Packet Length Variance,
"fin_flag_count" DOUBLE,
"n__syn_flag_count" DOUBLE -- SYN Flag Count,
"n__rst_flag_count" DOUBLE -- RST Flag Count,
"n__psh_flag_count" DOUBLE -- PSH Flag Count,
"n__ack_flag_count" DOUBLE -- ACK Flag Count,
"n__urg_flag_count" DOUBLE -- URG Flag Count,
"n__cwe_flag_count" VARCHAR -- CWE Flag Count,
"n__ece_flag_count" DOUBLE -- ECE Flag Count,
"n__down_up_ratio" VARCHAR -- Down/Up Ratio,
"n__average_packet_size" DOUBLE -- Average Packet Size,
"n__avg_fwd_segment_size" DOUBLE -- Avg Fwd Segment Size,
"n__avg_bwd_segment_size" DOUBLE -- Avg Bwd Segment Size,
"n__fwd_header_length_1" DOUBLE -- Fwd Header Length.1,
"fwd_avg_bytes_bulk" VARCHAR,
"n__fwd_avg_packets_bulk" DOUBLE -- Fwd Avg Packets/Bulk,
"n__fwd_avg_bulk_rate" DOUBLE -- Fwd Avg Bulk Rate,
"n__bwd_avg_bytes_bulk" DOUBLE -- Bwd Avg Bytes/Bulk,
"n__bwd_avg_packets_bulk" DOUBLE -- Bwd Avg Packets/Bulk,
"bwd_avg_bulk_rate" DOUBLE,
"subflow_fwd_packets" DOUBLE,
"n__subflow_fwd_bytes" DOUBLE -- Subflow Fwd Bytes,
"n__subflow_bwd_packets" DOUBLE -- Subflow Bwd Packets,
"n__subflow_bwd_bytes" DOUBLE -- Subflow Bwd Bytes,
"init_win_bytes_forward" DOUBLE,
"n__init_win_bytes_backward" DOUBLE -- Init Win Bytes Backward,
"n__act_data_pkt_fwd" DOUBLE -- Act Data Pkt Fwd,
"n__min_seg_size_forward" DOUBLE -- Min Seg Size Forward,
"active_mean" DOUBLE,
"n__active_std" DOUBLE -- Active Std,
"n__active_max" DOUBLE -- Active Max,
"n__active_min" DOUBLE -- Active Min,
"idle_mean" DOUBLE,
"n__idle_std" DOUBLE -- Idle Std,
"n__idle_max" DOUBLE -- Idle Max,
"n__idle_min" DOUBLE -- Idle Min,
"label" VARCHAR
);Anyone who has the link will be able to view this.