Android Malware Classification by CNN-LSTM

Amenova S., Turan C., Zharkynbek D.

2022 International Conference on Smart Information Systems and Technologies, SIST 2022, Nur-Sultan, Kazakhstan, 28 - 30 April 2022 identifier

  • Publication Type: Conference Paper / Full Text
  • Doi Number: 10.1109/sist54437.2022.9945816
  • City: Nur-Sultan
  • Country: Kazakhstan
  • Keywords: Android malware, CNN-LSTM, Deep Learning, Malware classification, Static analysis
  • Süleyman Demirel University Affiliated: No


© 2022 IEEE.Mobile devices play a crucial role and have become an essential part of people's life particularly with online applications such as shopping, learning, mailing, etc. Android OS has continued to drive the market for other operating systems since 2012. Traditional Android malware detection methods, such as static, dynamic, hybrid analysis, or the Bayesian model, may show less accuracy to detect recent Android malware. We propose a deep learning method for Android malware detection using Convolutional Neural Network (CNN) and Long Short Term Memory (LSTM). CNN provides efficient feature extraction from data and the use of additional LSTM layers improves prediction accuracy. According to the test results, CNN-LSTM can provide reliable malware prediction in Android applications. We train and test our approach using the CICMalDroid2020 dataset. The test results show that the CNN-LSTM classifier exceeds with an accuracy of 94%.