This comprehensive guide to Android malware introduces current threats facing the world's most widely used operating system. After exploring the history of attacks seen in the wild since the time Android first launched, including several malware families previously absent from the literature, you'll practice static and dynamic approaches to analysing real malware specimens. Next, you'll examine the machine-learning techniques used to detect malicious apps, the types of classification models that defenders can use, and the various features of malware specimens that can become input to these models. You'll then adapt these machine-learning strategies to the identification of malware categories like banking trojans, ransomware, and SMS fraud. You'll learn: How historical Android malware can elevate your understanding of current threats; How to manually identify and analyse current Android malware using static and dynamic reverse-engineering tools; How machine-learning algorithms can analyse thousands of apps to detect malware at scale.

"A comprehensive introduction to Android malware and its analysis."
—Maik Morgenstern, CTO at AV-TEST

"An indispensable resource for both security professionals and enthusiasts, offering unparalleled insights into the intricacies of Android malware and empowering readers to effectively guard against this pervasive threat."
—Dimitrios Valsamaras, Senior Security Researcher at Microsoft (formerly worked on Android at Google)

"Comprehensive and exceptionally user friendly, The Android Malware Handbook should be considered essential reading for anyone with an interest in computer viruses, computer software testing, and computer hacking."
—Midwest Book Review

Qian Han, Research Scientist at Meta since 2021, received his PhD in Computer Science from Dartmouth College and his Bachelor’s in Electronic Engineering from Tsinghua University, Beijing, China.

Salvador Mandujano, Security Engineering Manager at Google, has led product security engineering, malware reverse engineering and payments security teams. Before Google, he held senior security research and architecture positions at Intel and Nvidia. He has a PhD in Artificial Intelligence from Tecnológico de Monterrey, an MSc in Computer Science from Purdue, an MBA from The University of Texas, and a BSc in Computer Engineering from Universidad Nacional Autónoma de México.

Sebastian Porst is manager of Google’s Android Application Security Research team, which tries to predict or research novel attacks on Android devices and Android users by malware or through app vulnerabilities. He has an MSc Masters from Trier University of Applied Sciences, Germany in 2007.

V.S. Subrahmanian is the Walter P. Murphy Professor of Computer Science and Buffet Faculty Fellow in the Buffet Institute of Global Affairs at Northwestern University. Prof. Subrahmanian is one of the world’s foremost experts at the intersection of AI and security issues. He has written eight books, edited ten, and published over 300 refereed articles.

Sai Deep Tetali, Principal Engineer and Tech Lead Manager at Meta, works on privacy solutions for augmented and virtual reality applications. He spent 5 years at Google developing machine learning techniques to detect Android malware and has a PhD from University of California Los Angeles.

Yanhai Xiong is currently an Assistant Professor in the Department of Computer Science and Engineering at the University of Louisville. She has a PhD from Nanyang Technological University focusing on applying AI techniques to improve the efficiency of electric vehicle infrastructure and a BS in Engineering from the University of Science and Technology of China.