The growing popularity of the Android platform has led to an explosion of malware threats targeted at it. The operating system and malware on Android is constantly improving, so it is very difficult to develop a protection system that will work for a long time without the need for changes. Such a system was developed – MaMaDroid, it detects malicious programs for the behavior of applications.
MaMaDroid works in four stages:
1 Checking the bytecode to restore the graffiti call
2 Extract the sequence
3 Simulation of the Markov chain
4 Classification – malicious software or not.
The authors collected a collection of 43,490 Android applications, 8,447 benign and 35,493 malicious applications. This included a combination of applications from October 2010 to May 2016, which would allow the sustainability of the classification over time to study.
Therefore, MAMADROID receives high accuracy in general, and also to keep it for years, which is very important due to the continuous evolution of the Android ecosystem.
