AppFA: A Novel Approach to Detect Malicious Android Applications on the Network

Table 5

Data summary.

Traffic set	Apps	Quantity	Number of collected flows (TCP and UPD)	Amount of data (bytes)
TrafficSet 1	Selected malicious apps; (for testing accuracy of traffic clustering and detection rates)	93	223,220	53.8 G
TrafficSet 2	Benign apps; (for testing false positive rates of AppFA)	100	305,103	64.0 G
TrafficSet 3	All malicious apps; (for malicious apps detection in local networks)	1260	≈3.1 million	187.2 G