## 4 Materials and Methods
### Threat and Protection Levels Evaluation
\begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**Models** & **P(M)** & **P(M \(\downarrow\) data)** & **BF \({}_{\text{M}}\)** & **BF \({}_{\text{10}}\)** & **error \%** \\ \hline RM Factor 1 + Correlation + SEND_SMS + RECIEVE_SMS + RM & 0.050 & 0.966 & 535.883 & 1.000 & \\ Factor 1 * Correlation & 0.050 & 0.034 & 0.674 & 0.035 & 0.070 \\ \hline RM Factor 1 + Correlation + SEND_SMS + RM Factor 3 * Correlation & 0.050 & \(1.044\times 10^{-21}\) & \(1.984\times 10^{-20}\) & \(1.081\times 10^{-21}\) & 0.537 \\ \hline RM Factor 2 + Correlation + RM Factor 1 * Correlation & 0.050 & \(1.005\times 10^{-29}\) & \(1.910\times 10^{-28}\) & \(1.041\times 10^{-29}\) & 0.979 \\ \hline RM Factor 2 + SEND_SMS + RECIEVE_SMS + RM Factor 2 * Correlation & 0.050 & \(3.255\times 10^{-38}\) & \(6.184\times 10^{-37}\) & \(3.370\times 10^{-38}\) & 0.411 \\ \hline RM Factor 2 + Correlation + SEND_SMS + RM Factor 3 * Correlation & 0.050 & \(1.184\times 10^{-38}\) & \(2.250\times 10^{-13}\) & \(1.226\times 10^{-38}\) & 0.321 \\ \hline \hline \end{tabular}
\end{table} 
Table 6: Correlation model comparison of some selected permissions. \begin{table}
\begin{tabular}{c c c c c} \hline \hline  & **Precision** & **Recall** & **F1 Score** & **Support** & **AUC** \\ \hline Protection level & 0.917 & 1.000 & 0.957 & \(11\) & 0.996 \\ Threat level & 1.000 & 0.909 & 0.952 & \(11\) & 0.975 \\ \hline \hline \end{tabular}
\end{table} 
Table 5: Evaluation metrics. \begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**Models** & **P(M)** & **P(M \(\mathbf{\mid}\)data)** & **BF\({}_{\mathbf{M}}\)** & **BF\({}_{\mathbf{10}}\)** & **error \%** \\ \hline RM Factor 3 + Correlation + RECEIVE\_SMS + RM Factor 1 * & 0.050 & \(5.025\times 10^{-39}\) & \(9.547\times 10^{-38}\) & \(5.203\times 10^{-39}\) & 0.960 \\ \hline RM Factor 3 + RECEIVE\_SMS + RM Factor 2 * Correlation & 0.050 & \(1.378\times 10^{-41}\) & \(2.617\times 10^{-40}\) & \(1.426\times 10^{-41}\) & 0.173 \\ \hline RM Factor 3 + Correlation + SEND\_SMS + RM Factor 3 * & 0.050 & \(3.116\times 10^{-49}\) & \(5.919\times 10^{-48}\) & \(3.226\times 10^{-49}\) & 0.265 \\ Correlation & 0.050 & \(3.116\times 10^{-49}\) & \(5.919\times 10^{-48}\) & \(3.226\times 10^{-49}\) & 0.265 \\ \hline Correlation + RECEIVE\_SMS & 0.050 & \(1.790\times 10^{-13}\) & \(3.402\times 10^{-32}\) & \(1.854\times 10^{-38}\) & 0.007 \\
**Models** & **P(M)** & **P(M \(\mathbf{\mid}\)data)** & **BF\({}_{\mathbf{M}}\)** & **BF\({}_{\mathbf{10}}\)** & **error \%** \\ \hline SEND\_SMS + RECEIVE\_SMS & 0.050 & \(1.347\times 10^{-13}\) & \(5.599\times 10^{-32}\) & \(1.395\times 10^{-33}\) & 0.580 \\ Correlation + SEND\_SMS & 0.050 & \(8.379\times 10^{-14}\) & \(1.592\times 10^{-32}\) & \(8.676\times 10^{-34}\) & 0.885 \\ \hline Correlation + SEND\_SMS + RECEIVE\_SMS & 0.050 & \(3.802\times 10^{-14}\) & \(7.224\times 10^{-33}\) & \(3.937\times 10^{-34}\) & 0.793 \\ \hline Null model (incl. subject) & 0.050 & \(7.182\times 10^{-13}\) & \(1.365\times 10^{-37}\) & \(7.437\times 10^{-35}\) & 0.529 \\ \hline SEND\_SMS & 0.050 & \(5.468\times 10^{-13}\) & \(1.039\times 10^{-35}\) & \(5.662\times 10^{-35}\) & 0.740 \\ Correlation & 0.050 & \(1.428\times 10^{-13}\) & \(2.714\times 10^{-41}\) & \(1.479\times 10^{-35}\) & 0.660 \\ \hline \hline \end{tabular} Note. All models include subject.  
\end{table} 
Table 6: _Cont._  
Figure 17: Model posterior distribution showing the correlation between the observed data (protection level) and the inferred data (threat level). Figure 17a shows the observed and inferred relationship of the RM factor and the density levels as detailed in Table 6. Figure 17b shows the protection and threat level correlation model output which demonstrates how the inferred and observed parameters in Figure 17c are related with reference to the ROC curve (Figure 17d). However, if an error in the measurement is not correlated with the observed and unobserved random parameters, then the correlation of the unobserved parameter is greater than that of the observed random parameters accordingly.