On-Device Detection of Repackaged Android Malware via Traffic Clustering

Table 2

Flow statistical features.

---

Bytes sent by the app and bytes sent by the server

Numbers of outgoing and incoming packets

Mean and std. dev. of the outgoing and incoming packet sizes’ flow duration

Mean and std. dev. of the interpacket time

---