FeatureAnalytics: An approach to derive relevant attributes for
  analyzing Android Malware
  Ever increasing number of Android malware, has always been a concern for
cybersecurity professionals. Even though plenty of anti-malware solutions
exist, a rational and pragmatic approach for the same is rare and has to be
inspected further. In this paper, we propose a novel two-set feature selection
approach based on Rough Set and Statistical Test named as RSST to extract
relevant system calls. To address the problem of higher dimensional attribute
set, we derived suboptimal system call space by applying the proposed feature
selection method to maximize the separability between malware and benign
samples. Comprehensive experiments conducted on a dataset consisting of 3500
samples with 30 RSST derived essential system calls resulted in an accuracy of
99.9%, Area Under Curve (AUC) of 1.0, with 1% False Positive Rate (FPR).
However, other feature selectors (Information Gain, CFsSubsetEval, ChiSquare,
FreqSel and Symmetric Uncertainty) used in the domain of malware analysis
resulted in the accuracy of 95.5% with 8.5% FPR. Besides, empirical analysis of
RSST derived system calls outperform other attributes such as permissions,
opcodes, API, methods, call graphs, Droidbox attributes and network traces.
