Table 8 Top 10 API calls logged from benign samples where the hybrid approach was better than the state-based approach (Dataset2)
From: Machine learning-based dynamic analysis of Android apps with improved code coverage
API signatures | State | Hybrid | Difference |
|---|---|---|---|
Landroid/os/Process;->myPid | 761 | 878 | 117 |
Ljava/lang/ClassLoader;->loadClass | 637 | 698 | 61 |
Ljava/lang/Class;->getClassLoader | 715 | 775 | 60 |
Landroid/net/Uri;->parse | 2322 | 2378 | 56 |
Landroid/media/AudioManager;->getStreamVolume | 76 | 127 | 51 |
Ljava/lang/ClassLoader | 1130 | 1177 | 47 |
Ljava/util/GregorianCalendar;->getTime | 1196 | 1236 | 40 |
Landroid/content/ContentResolver | 1223 | 1258 | 35 |
Ljava/io/File;->delete | 1221 | 1256 | 35 |
Ljava/io/File;->mkdir | 1961 | 1996 | 35 |