I find your behavior disturbing: Static and dynamic app behavioral analysis for detection of Android malware
Detecting Android malware using sequences of system calls