Detecting and classifying method based on similarity matching of Android malware behavior with profile

SpringerPlus

Table 6 The classification accuracy and the number of cluster according to changes of weight (e.g., Method 1)

No	Weight of behavior factor				Number of clusters		Accuracy
No	SS	CS	SIS	CDS	Malware	Benign	Accuracy
1	0.25	0.25	0.25	0.25	8	4	0.98
2	0.27	0.27	0.24	0.22	6	2	0.98
3	0.29	0.29	0.23	0.19	6	2	0.98
4	0.31	0.31	0.22	0.16	6	2	0.98
5	0.33	0.33	0.21	0.13	6	1	0.98
6	0.35	0.35	0.20	0.10	6	1	0.98

The number of clusters means that the number of groups that malware/benign samples are classified into. Italic text means that the tendency of classification accuracy is changed. At this point, we believe, our system reaches a local optimum for the best performance