Flowpermissions

* Distinct Flow Graphs and Data (Using Categories)<br> * *Distinct Flows by Malicious Category Using Full Flow Names* This graph depicts the frequency of flows appearing within each Malicious cateogry defined by the MalGenome project, and includes the popular applications we processed under the "Normal" category for comparison purposes. The frequency is defined by the number of applications within a category that use a particular flow, divided by the total number of applications in that category, and is represented by the size of the marks in the scatter plot.<br> * *Distinct Flow Categories by Malicious Category, Level 1* This graph, similar to the one described above, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location.Location, as are their corresponding sinks.<br> * *Distinct Flow Categories by Malicious Category, Level 2* This graph, similar to the first one described above, depicts the frequency of flow minus two levels of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location, as are their corresponding sinks.<br> * *Distinct Flow Categories by Malicious Category, Level 3* This graph, similar to the first one described above, depicts the frequency of flow minus three levels of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android, as are their corresponding sinks.<br> * Distinct Flow Graphs and Data (General Malware Vs. Normal)<br> * *Distinct Flows Using Full Flow Names* This graph depicts the frequency of flows appearing within each Malicious cateogry defined by the MalGenome project, and includes the popular applications we processed under the "Normal" category for comparison purposes. The frequency is defined by the number of applications within a category that use a particular flow, divided by the total number of applications in that category, and is represented by the size of the marks in the scatter plot.<br> * *Distinct Flows Cateogories, Level 1* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location.Location, as are their corresponding sinks.<br> * *Distinct Flows Cateogories, Level 2* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location, as are their corresponding sinks.<br> * *Distinct Flows Categories, Level 3* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android, as are their corresponding sinks. <strong>Attribute info</strong><br> 1. Category<br> 2. Flow Source<br> 3. Flow Sink<br> 4. Distinct APK count<br> 5. Total Distinct APKs按分类划分的差异化信息流图与数据集 * 基于完整流名称的恶意分类下差异化信息流：该图展示了由恶意基因组（MalGenome）项目定义的各类恶意分类中信息流的出现频次，并纳入我们预处理的热门应用的「正常」分类作为对照。频次计算方式为：某一分类中使用特定信息流的应用数量，除以该分类的总应用数，该值通过散点图中标记的大小体现。 * 按恶意分类划分的一级差异化信息流分类（层级1）：该图与上述图表类似，展示了降一级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android.location.Location`分类下，其对应的信息流汇亦同。 * 按恶意分类划分的二级差异化信息流分类（层级2）：该图与上述首张图表类似，展示了降两级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android.location`分类下，其对应的信息流汇亦同。 * 按恶意分类划分的三级差异化信息流分类（层级3）：该图与上述首张图表类似，展示了降三级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android`分类下，其对应的信息流汇亦同。 * 通用恶意软件与正常应用对比的差异化信息流图与数据集 * 基于完整流名称的差异化信息流：该图展示了由恶意基因组（MalGenome）项目定义的各类恶意分类中信息流的出现频次，并纳入我们预处理的热门应用的「正常」分类作为对照。频次计算方式为：某一分类中使用特定信息流的应用数量，除以该分类的总应用数，该值通过散点图中标记的大小体现。 * 一级差异化信息流分类（层级1）：该图与首张图表类似，展示了降一级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android.location.Location`分类下，其对应的信息流汇亦同。 * 二级差异化信息流分类（层级2）：该图与首张图表类似，展示了降两级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android.location`分类下，其对应的信息流汇亦同。 * 三级差异化信息流分类（层级3）：该图与首张图表类似，展示了降三级区分度的信息流频次。例如，信息流源`android.location.Location:getLatitude`与`android.location.Location:getLongitude`现被归至`android`分类下，其对应的信息流汇亦同。 属性信息 1. 分类（Category） 2. 信息流源（Flow Source） 3. 信息流汇（Flow Sink） 4. 唯一安卓安装包（APK）计数（Distinct APK count） 5. 总唯一安卓安装包数（Total Distinct APKs）