SmartMal: A Service-Oriented Behavioral Malware Detection Framework for Mobile Devices

Algorithm 2

Pseudocode of abnormal behavior analysis for mobile networks.

INITIATION: Set values of 𝑡,𝑁,𝑀

INPUT: 𝑉(𝑘),𝑡,𝑁,𝑀

OUTPUT: 𝑋(𝑘)

Begin

(1) Obtain 𝑋(𝑘) and 𝑁(𝑘) from 𝑉(𝑘)

(2) Define the observation window 𝑊₀(𝑘)

(3) Select 𝑊₁(𝑘) from 𝑊₀(𝑘)/𝑀 by sampling

(4) Calculate the distance 𝐷₁(𝑘) and 𝐷_𝐸(𝑘)

(5) If   𝐷_𝐸(𝑘)>𝐷₁(𝑘)

(6)  𝑋(𝑘) is detected as anomaly

(7)  Set 𝑀=𝑀∪{𝑘}

(8) else   𝑋(𝑘) is normal

(9) Increase 𝑘 by one and go-back to (1)

End