Skip to main content

Table 3 Similarity metric to apply to each behavior factor

From: Detecting and classifying method based on similarity matching of Android malware behavior with profile

Behavior factor

Behavior target

Similarity metric

Sending SMS

Premium-rate

Binary (0 or 1)

Calling

Premium-rate

Binary (0 or 1)

Sending sensitive information

System information, private information

Jaccard index [0, 1]

Converting data

Destination URL

Modified levenshtein distance [0, 1]

Cipher algorithm (DES, AES, Blowfish)

Binary (0 or 1)

Encoding algorithm (Gzip or not)

Binary (0 or 1)