LiDAR: A Light-Weight Deep Learning-Based Malware Classifier for Edge Devices

Table 3

Malicious and benign features discovered by Grad-CAM.

(a)

SMS spam dataset			E-mail spam dataset
No.	Weight value	Features	No.	Weight value	Features
1	0.0023	call	1	0.0159	click
2	0.0016	free	2	0.0141	run
3	0.0016	www	3	0.0088	could
4	0.0014	stop	4	0.0086	file
5	0.0013	txt	5	0.0074	remov
6	0.0013	repli	6	0.0070	modem
7	0.0010	cash	7	0.0068	send
…			…
800	-0.0017	see	31,860	-0.0144	link
801	-0.0017	heart	31,861	-0.0178	make
802	-0.0018	give	31,862	-0.0237	one
803	-0.0018	weekend	31,863	-0.0334	nbsp
804	-0.0031	get	31,864	-0.0454	emailaddr
805	-0.0038	got	31,865	-0.1133	httpaddr

(b)

Android malware dataset
2019			2020
No.	Weight value	Features	No.	Weight value	Features
1	0.0118	android.app->; android.view	1	0.0180	android.app->; android.view
2	0.0094	android.content->; android.content	2	0.0142	android.view->; android.content
3	0.0088	android.content->; android.app	3	0.0135	android.os->; java.lang
4	0.0082	android.webkit->; java.lang	4	0.0130	android.content->; java.lang
5	0.0081	android.app->; android.content	5	0.0124	android.content->; android.app
6	0.0068	android.app->android.os	6	0.0094	android.view->; android.view
7	0.0058	android.view->; android.view	7	0.0092	android.net->; android.net
…			…
4,667	-0.0051	java.net->java.lang	13,201	-0.0018	android.content.res->; java.lang
4,668	-0.0056	android.view->java.lang	13,202	-0.0023	android.database.sqlite->; android.database.sqlite
4,669	-0.0064	java.io->java.io	13,203	-0.0025	android.webkit->; android.util
4,670	-0.0065	android.widget->; java.lang	13,204	-0.0064	java.io->java.io
4,671	-0.0069	android.content->; android.os	13,205	-0.0065	android.view->; android.util
4,672	-0.0081	android.widget->; android.util	13,206	-0.0068	android.widget->; android.util