Dendroid: A text mining approach to analyzing and classifying code structures in Android malware families

作者：

Highlights：

• We analyze the statistical features of the code structures of Android malware.

• We describe Dendroid, a text mining approach to classify and analyze Android malware.

• Dendograms derived from hierarchical clustering reveal evolutionary relationships.

• Experiments show that Dendroid is an accurate and scalable support tool for analysts.

摘要

•We analyze the statistical features of the code structures of Android malware.•We describe Dendroid, a text mining approach to classify and analyze Android malware.•Dendograms derived from hierarchical clustering reveal evolutionary relationships.•Experiments show that Dendroid is an accurate and scalable support tool for analysts.

论文关键词：Malware analysis,Software similarity and classification,Text mining,Information retrieval,Smartphones,Android OS

论文评审过程：Available online 13 August 2013.

论文官网地址：https://doi.org/10.1016/j.eswa.2013.07.106