Security

Google reveals Android Robocop AI to spot and destroy malware

Dead or alive, preferably dead, you're coming with me

By Iain Thomson in San Francisco

7 SHARE

In its ongoing quest to trap and kill Android malware, Google has, as usual, turned to machine learning – and is reporting some success.

Speaking at the Structure Security conference in San Francisco today, Adrian Ludwig, head of Android security, said the ads giant has trained systems using telemetry data from handsets – information such as which apps are installed and uninstalled, the behavior of the software, and so on, presumably.

These device statistics would, we imagine, be gathered from Google Play services, which pings the California mothership with telemetry from devices. Ludwig wasn't particularly precise about this data collection, funnily enough. Ultimately, the goal is to craft an AI system capable of automatically identifying and removing malware judging from code's behavior rather than its signatures.

Gradually, the learning system improved its game, Ludwig said: six months ago the software was only successfully flagging up five per cent of malware samples thrown at it. As of last week, that figure is now 55 per cent, meaning it's now making a dent into Android infection rates by spotting and zapping nasties either on the Play store or on people's gadgets, or both.

AI quickly cooks malware that AV software can't spot

READ MORE

Google's Play Protect system can highlight and remove any evil software discovered during scans of handhelds – presumably it could check with the Robocop AI back at base on whether or not a given app is naughty or nice. In addition to this, Google could use the AI to automatically weed malicious applications out of its Play store.

At the beginning of the year, we're told, about 0.6 per cent of Android's two billion user base was infected by malware. Ludwig said that figure was now 0.25 per cent, thanks to this AI software.

"When you ask where Android security was six years ago, it was nowhere near as good as desktop computing," Ludwig told the conference. "Now we've left desktop computers in the dust."

Google is, obviously, not the first to use AI for classifying malware. However, the internet goliath has a big advantage over other industry players due to the volume of data at its fingertips. Ludwig said Android users cover every country on Earth, and every socioeconomic class. We even found out today that Bill Gates is an Android user. That means there's a wealth of Android usage data flowing into Google from all corners of the planet, and all layers of society, that can be used to train the system on what bad apps look like.

Still, it requires human supervision. Every so often, software nasties slip past Google's code-checking systems and into the official Play store, for instance.

"Machine learning isn't pixie dust," Ludwig said. "You've got to have people reviewing and checking along the way. But it is making a major difference." ®

Sign up to our NewsletterGet IT in your inbox daily

7 Comments

More from The Register

Data centre mergers and acquisitions hit $20bn in 2017 feeding frenzy

All-time high for industry

AI military upstart attacked by Russian malware, Twitter fires up TensorFlow, and more

Roundup Including bad news for IBM Watson Health

Spun-out Nexsan now prowling the market for growth and acquisitions

The only way is up

Google slurps cloudy single-sign-on concern Bitium

Ad giant has an 'Identity Vision' and now sees it more clearly

Palo Alto Networks rattles tin, wants $1.5bn for, er, stuff and things

Loan notes to build war chest – yet firm denies it's eyeing up a fresh buyout

It's getting more and more Azure'd: For Microsoft, sorry seems to be the hardest word

Overheating data centres, Bing Visual Search, acquisitions – it's the week at Redmond

In not terrifying news at all, Google just keeps on growing: Revenue, profit, headcount up

Q1 tax rate plunge, cost of traffic to feed ad machine jumps

Medicxi launches $300m European late-stage life sciences fund backed by Google company

Verily joins Novartis and the European Investment Fund

Behold! Blocks and Files is born again as storage tech website returns

Storage news and views website ready for the coming zettabyte era

BMC binned by Bain and buds, bought by investment company

New owner signals M&A possibilities – could a CA acqui-merge be back on the table?