Methods and Systems of Dynamically Determining Feature Sets for the Efficient Classification of Mobile Device Behaviors

摘要

Methods and devices for detecting suspicious or performance-degrading mobile device behaviors may include monitoring the activities of the software application by collecting behavior information, generating a behavior vector that includes a behavior feature that identifies an aspect of a monitored activity of the software application, applying the generated behavior vector to a classifier model to generate analysis results, using the analysis results to update the behavior feature so that it identifies a different aspect of the monitored activity, regenerating the behavior vector to include the updated behavior feature, and applying the regenerated behavior vector to the classifier model to determine whether the software application is non-benign.