SmartMal: A Service-Oriented Behavioral Malware Detection Framework for Mobile Devices

Table 4

Idioms and terms defined in DoS attack cases.

𝜏	Statistics intervals
𝑣^𝜏𝑖(𝑘)	𝑖th devices behavior in the interval 𝑘
𝑁^𝜏(𝑘)	Total amount of devices in the interval 𝑘
𝑣^𝜏(𝑘)	{𝑣^𝜏𝑖(𝑘),𝑖=1,2,…,𝑁^𝜏(𝑘)} the vector in interval 𝑘
𝑋^𝜏(𝑘)	Probability distribution for normalized 𝑣^𝜏(𝑘)
𝐿(𝑘1,𝑘2)	Similarity for 𝑋^𝜏(𝑘1) and 𝑋^𝜏(𝑘2)
𝑊0(𝑘)	The observation window for 𝑋(𝑘)
𝑊1(𝑘)	The sampling observation window for 𝑋(𝑘)
𝐷𝐼(𝑘)	Internal distance for probability correlation 𝑋(𝑘)
𝐷𝐸(𝑘)	External distance for probability correlation 𝑋(𝑘)
𝑀	Abnormal probability distribution set