EMULATOR vs REAL PHONE: Android Malware Detection Using Machine Learning

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.The Android operating system has become the most popular operating system for smartphones and tablets leading to a rapid rise in malware. Sophisticated Android malware employ detection avoidance techniques in order to hide their malicious activities from analysis tools. These include a wide range of anti-emulator techniques, where the malware programs attempt to hide their malicious activities by detecting the emulator. For this reason, countermeasures against anti-emulation are becoming increasingly important in Android malware detection. Analysis and detection based on real devices can alleviate the problems of anti-emulation as well as improve the effectiveness of dynamic analysis. Hence, in this paper we present an investigation of machine learning based malware detection using dynamic analysis on real devices. A tool is implemented to automatically extract dynamic features from Android phones and through several experiments, a comparative analysis of emulator based vs. device based detection by means of several machine learning algorithms is undertaken. Our study shows that several features could be extracted more effectively from the on-device dynamic analysis compared to emulators. It was also found that approximately 24% more apps were successfully analysed on the phone. Furthermore, all of the studied machine learning based detection performed better when applied to features extracted from the on-device dynamic analysis

Global distribution and interannual variations of mesospheric and lower thermospheric neutral wind diurnal tide: 2. Nonmigrating tide

Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/94716/1/jgra18976.pd

The geospace response to variable inputs from the lower atmosphere:a review of the progress made by Task Group 4 of CAWSES-II

The advent of new satellite missions, ground-based instrumentation networks, and the development of whole atmosphere models over the past decade resulted in a paradigm shift in understanding the variability of geospace, that is, the region of the atmosphere between the stratosphere and several thousand kilometers above ground where atmosphere-ionosphere-magnetosphere interactions occur. It has now been realized that conditions in geospace are linked strongly to terrestrial weather and climate below, contradicting previous textbook knowledge that the space weather of Earth's near space environment is driven by energy injections at high latitudes connected with magnetosphere-ionosphere coupling and solar radiation variation at extreme ultraviolet wavelengths alone. The primary mechanism through which energy and momentum are transferred from the lower atmosphere is through the generation, propagation, and dissipation of atmospheric waves over a wide range of spatial and temporal scales including electrodynamic coupling through dynamo processes and plasma bubble seeding. The main task of Task Group 4 of SCOSTEP's CAWSES-II program, 2009 to 2013, was to study the geospace response to waves generated by meteorological events, their interaction with the mean flow, and their impact on the ionosphere and their relation to competing thermospheric disturbances generated by energy inputs from above, such as auroral processes at high latitudes. This paper reviews the progress made during the CAWSES-II time period, emphasizing the role of gravity waves, planetary waves and tides, and their ionospheric impacts. Specific campaign contributions from Task Group 4 are highlighted, and future research directions are discussed

Solar Cycle Variability of Nonmigrating Tides in the 5.3 and 15 μm Infrared Cooling of the Thermosphere (100–150 km) from SABER

This paper discusses the solar cycle variation of the DE3 and DE2 nonmigrating tides in the nitric oxide (NO) 5.3 μm and carbon dioxide (CO2) 15 μm infrared cooling between 100 and 150 km altitude and ±40° latitude. Tidal diagnostics of SABER NO and CO2 cooling rate data (2002–2013) indicate DE3 (DE2) amplitudes during solar maximum are on the order of 1 (0.5) nW/m3 in NO near 125 km, and on the order of 60 (30) nW/m3 in CO2 at 100 km, which translates into roughly 15–30% relative to the monthly zonal mean. The NO cooling shows a pronounced (factor of 10) solar cycle dependence (lower during solar minimum) while the CO2 cooling does not vary much from solar min to solar max. Photochemical modeling reproduces the observed solar cycle variability and allows one to delineate the physical reasons for the observed solar flux dependence of the tides in the infrared cooling, particularly in terms of warmer/colder background temperature versus smaller/larger tidal temperatures during solar max/min, in addition to cooling rate variations due to vertical tidal advection and tidal density variations. Our results suggest that (i) tides caused by tropospheric weather impose a substantial—and in the NO 5.3 μm case solar cycle dependent—modulation of the infrared cooling, mainly due to tidal temperature, and (ii) observed tides in the infrared cooling are a suitable proxy for tidal activity including its solar cycle dependence in a part of Earth's atmosphere where direct global temperature observations are lacking

On theconsistency of model, ground-based and satellite observations of tidal signatures: Initial results from theCAWSES tidal campaigns

Comparisons between tidal wind signatures diagnosed from satellite and ground-based observations and a general circulations model for two (September–October 2005, March–April 2007) of the four Climate and Weather of the Sun-Earth System (CAWSES) Global Tidal Campaign observation periods are presented (CAWSES is an international program sponsored by Scientific Committee on Solar-Terrestrial Physics). Specific comparisons are made between model (extended Canadian Middle Atmosphere Model), satellite (Thermosphere Ionosphere Mesosphere Energetics and Dynamics (TIMED)), meteor, MF and incoherent scatter radar (ISR), and lidar tidal signatures in the mesosphere and lower thermosphere. The satellite and ground-based signatures are in good agreement and demonstrate for the first time that the tidal wind fields observed by both types of observations are consistent with each other. This is the first time that such agreement has been reported and effectively resolves the long-standing issue between ground-based radar and satellite optical measurements of winds. This level of agreement, which has proved elusive in the past, was accomplished by superposing the significant tidal components from the satellite analyses to reconstruct the fields observed by the ground stations. Particularly striking in these comparisons is the extent to which the superposed fields show strong geographic variability. This variability is also seen in the component superpositions generated from the extended Canadian Middle Atmosphere Model (eCMAM), although differences in the geographic patterns are evident

Global distribution and interannual variations of mesospheric and lower thermospheric neutral wind diurnal tide: 1. Migrating tide

Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/95689/1/jgra18975.pd

An empirical model of the Earth's horizontal wind fields: HWM07

The new Horizontal Wind Model (HWM07) provides a statistical representation of the horizontal wind fields of the Earth's atmosphere from the ground to the exosphere (0-500 km). It represents over 50 years of satellite, rocket, and ground-based wind measurements via a compact Fortran 90 subroutine. The computer model is a function of geographic location, altitude, day of the year, solar local time, and geomagnetic activity. It includes representations of the zonal mean circulation, stationary planetary waves, migrating tides, and the seasonal modulation thereof. HWM07 is composed of two components, a quiet time component for the background state described in this paper and a geomagnetic storm time component (DWM07) described in a companion paper

TIMED Doppler Interferometer: Overview and recent results

Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/94617/1/jgra18230.pd