Table 4 Top 10 API calls logged from benign samples where the hybrid approach was better than the random-based approach (Dataset2)
From: Machine learning-based dynamic analysis of Android apps with improved code coverage
API signatures | Random | Hybrid | Difference |
|---|---|---|---|
Ljava/lang/Class;->getName | 1622 | 2764 | 1142 |
Ljava/util/zip/ZipInputStream;->read | 817 | 1943 | 1126 |
Ljava/security/MessageDigest;->update | 866 | 1983 | 1117 |
Ljava/security/MessageDigest;->digest | 934 | 2040 | 1106 |
Ljava/security/MessageDigest;->getInstance | 1079 | 2177 | 1098 |
Ljava/util/Date | 811 | 1847 | 1036 |
Ljava/lang/reflect/Method;->getClass | 2052 | 3058 | 1006 |
Ljava/util/Date;->< init> | 784 | 1785 | 1001 |
Ljava/util/List | 784 | 1785 | 1001 |
Landroid/content/Context;->bindService | 434 | 1396 | 962 |