DOI: 10.5281/zenodo.439596
title: Flowpermissions

description: * Distinct Flow Graphs and Data (Using Categories)<br>
  * *Distinct Flows by Malicious Category Using Full Flow Names* This graph depicts the frequency of flows appearing within each Malicious cateogry defined by the MalGenome project, and includes the popular applications we processed under the "Normal" category for comparison purposes. The frequency is defined by the number of applications within a category that use a particular flow, divided by the total number of applications in that category, and is represented by the size of the marks in the scatter plot.<br>
  * *Distinct Flow Categories by Malicious Category, Level 1* This graph, similar to the one described above, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location.Location, as are their corresponding sinks.<br>
  * *Distinct Flow Categories by Malicious Category, Level 2* This graph, similar to the first one described above, depicts the frequency of flow minus two levels of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location, as are their corresponding sinks.<br>
  * *Distinct Flow Categories by Malicious Category, Level 3* This graph, similar to the first one described above, depicts the frequency of flow minus three levels of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android, as are their corresponding sinks.<br>
* Distinct Flow Graphs and Data (General Malware Vs. Normal)<br>
  * *Distinct Flows Using Full Flow Names* This graph depicts the frequency of flows appearing within each Malicious cateogry defined by the MalGenome project, and includes the popular applications we processed under the "Normal" category for comparison purposes. The frequency is defined by the number of applications within a category that use a particular flow, divided by the total number of applications in that category, and is represented by the size of the marks in the scatter plot.<br>
  * *Distinct Flows Cateogories, Level 1* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location.Location, as are their corresponding sinks.<br>
  * *Distinct Flows Cateogories, Level 2* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android.location, as are their corresponding sinks.<br>
  * *Distinct Flows Categories, Level 3* This graph, similar to the first graph, depicts the frequency of flow minus one level of distinction. For example, the flow sources android.location.Location:getLatitude and android.location.Location:getLongitude are now grouped under android, as are their corresponding sinks.

<strong>Attribute info</strong><br>
    1. Category<br>
    2. Flow Source<br>
    3. Flow Sink<br>
    4. Distinct APK count<br>
    5. Total Distinct APKs