Table 2 Top 10 API calls logged from benign samples where the hybrid approach was better than the random-based approach (Dataset1)
From: Machine learning-based dynamic analysis of Android apps with improved code coverage
API Signatures | Random | Hybrid | Difference |
|---|---|---|---|
Landroid/net/Uri;->parse | 192 | 492 | 300 |
Ljava/util/zip/ZipInputStream;->read | 173 | 408 | 235 |
Ljava/security/MessageDigest;->digest | 297 | 519 | 222 |
Ljava/security/MessageDigest;->getInstance | 327 | 549 | 222 |
Lorg/apache/http/client/HttpClient;->execute | 56 | 264 | 208 |
Ljava/lang/reflect/Method;->getClass | 359 | 565 | 206 |
Ljava/lang/Class;->getName | 217 | 422 | 205 |
Landroid/content/Context;->getResources | 437 | 639 | 202 |
Ljava/util/TimerTask;->< init> | 575 | 774 | 199 |
Landroid/content/pm/PackageManager;->checkPermission | 164 | 359 | 195 |