Research Article

Automatic Analysis Architecture of IoT Malware Samples

Figure 5

Clusters generated for all architectures using the execution traces obtained in the dynamic analysis. The n-gram size used for the syscalls sequence is four. The edges connect those samples with a similarity index greater than 0.8.
(a)
(b)