Runtime Detection Framework for Android Malware

Table 1

Notations for the confidence value calculation.

	An observed sequence of dangerous API invocations,
	Document frequency, the number of documents the term occurs in
	Transition probability distribution,
	Emission probability distribution,
	Initial probability distribution,
	Hidden Markov model,
	The number of states
	The number of traces
	The number of dangerous API invocations