Analysis and Evaluation of SafeDroid v2.0, a Framework for Detecting Malicious Android Applications

Table 7

Comparison with similar solutions. ML reports the number of tested machine learning algorithms; FSR means further security research feature. PRM refers to permission based analysis; INT refers to application intent; STR refers to string-based analysis (Section 2).

API based	additional			dataset	mal.
framework	features	ML	FSR	size	apps	F1	FPR
DroidApiMiner [8]	—	4	no	19978	19.9%	97.8%	2.2%
OpSec [9]	PRM	n/a	no	1758	79.5%	97.5%	2.2%
DMDAM [10]	PRM	15	no	170	41.2%	77.0%	n/a
IFE [11]	—	1	no	1100	50.0%	98.1%	8%
Anastasia [12]	PRM,INT	9	no	29864	62.5%	97.3%	5%
SBMD [13]	STR,PMR	6	no	10000	50.0%	97.0%	10%
SeraphimDroid [14]	PRM	5	no	400	50.0%	87.1%	n/a
SafeDroid v2.0	—	6	yes	25346	40.0%	98.9%	0.6%