Dominant Feature Selection and Machine Learning-Based Hybrid Approach to Analyze Android Ransomware

Table 3

Difference in clean and ransomware applications.

	Clean applications	Ransomware applications
Characteristics	These applications do not contain malicious code in the source code. These are safe for device.	These applications do contain malicious code in the source code. Malware authors, i.e., attackers may inject the code to affect the device users.
Installation	Upon installation of clean applications, it performs its dedicated task and does not harm either the device or user’s data.	Ransomware applications encrypt the confidential data and file in system upon installation. These can even lock the device and demand ransom to unlock it.