Detection and Visualization of Android Malware Behavior

Figure 8

Dendrograms of the tested application. (a) Graph of the DroidKungFu4 in full features, and (b) graph of the malicious functions invoked by DroidKungFu4. The full package name of DroidKungFu4 is com.evilsunflower.reader.evilXindong13.

(a) Dendrogram in full features (Goodware, Adware, and Malware) for DroidKungFu4

(b) Graph visualization of the detected malware in the case of DroidKungFu4