PICAndro: Packet InspeCtion-Based Android Malware Detection

Table 4

Comparative analysis of 2-class and 5-class classification by PICAndro using flow-based and session-based network granularity.

Classification type	Network granularity	Image size	Precision	Recall	F-measure	Accuracy
2 class	Flow	20 × 20	98.97	96.59	97.76	99.12
		25 × 25	96.49	94.95	95.71	98.29
		28 × 28	98.54	97.00	97.76	99.10
		30 × 30	98.33	96.85	97.58	99.04
	Session	20 × 20	98.41	96.75	97.57	99.09
		25 × 25	95.80	94.20	94.99	98.10
		28 × 28	94.49	93.62	94.05	97.79
		30 × 30	95.54	95.64	95.59	98.33
5 class	Flow	20 × 20	98.51	98.46	98.49	98.91
		25 × 25	97.07	96.74	96.88	97.74
		28 × 28	97.61	97.58	97.59	98.28
		30 × 30	97.99	97.86	97.92	98.43
	Session	20 × 20	98.17	97.94	98.05	98.56
		25 × 25	97.14	97.07	97.10	98.01
		28 × 28	97.36	97.19	97.27	98.09
		30 × 30	97.45	97.21	97.33	98.15

Bold value highlights best performance results.