Mal-Netminer: Malware Classification Approach Based on Social Network Analysis of System Call Graph

Table 4

Measures of social network analysis for malware analysis.

Scope	Category	Measure name
Node level	Centrality	Average in-degree centrality
		Average weighted in-degree centrality
Network level	Degree distribution	Portion of calls with in-degree of 1
		Portion of calls with out-degree of 1
		Portion of calls with weighted in-degree of 1
		Portion of calls with weighted out-degree of 1
	Cohesion	Average distance