AppFA: A Novel Approach to Detect Malicious Android Applications on the Network

Table 6

Experimental results of traffic clustering.

Number of HTTP flows for generating signature seeds	Number of flows correctly clustered	Number of misclustered flows
2	201,357	21,863
3	218,946	4,274
4	221,384	1,836
5	222,619	601