Mal-Netminer: Malware Classification Approach Based on Social Network Analysis of System Call Graph

Figure 12

An evaluation of the node-level metrics on both Trojan and worm classes using the in-degree and betweenness centralities.

(a) Average in-degree centrality (Trojan)

(b) Average in-degree centrality (worm)

(c) Average betweenness centrality (Trojan)

(d) Average betweenness centrality (worm)