Research Article
Automatic Analysis Architecture of IoT Malware Samples
Figure 5
Clusters generated for all architectures using the execution traces obtained in the dynamic analysis. The n-gram size used for the syscalls sequence is four. The edges connect those samples with a similarity index greater than 0.8.
(a) |
(b) |