Research on standardization of the Android malware detection results

Abstract

Diverse antivirus engines have different naming rules for Android malwares, so that they return detection results of the same application in different expression forms. This paper researches the naming methods of the malwares by the engines, and institutes a standardized naming rule for the malwares which is easy to understand. This paper also designs a method to standardize the Android application's detection results provided by the engines. The method uses the character recognition and the sample matching to realize the unification of the detection results, and obtain the results in standard form which have clear meanings and available for evaluation. The experimental results show that the method can effectively unify various forms of detection results, and provide explicit and rich application identification information.