Research on family classification based on graph similarity

With the continuous development of mobile devices, the rapid increase in the number of Android malware poses a huge threat to malware detection systems. By classifying malware samples into families, the features shared by malware in the same family can be utilized in the malware detection method, to achieve the effect of improving the detection rate of malware. In this paper, a family classification method based on graph similarity is proposed, which constructs a family matrix and a weight matrix for malicious families and performs family classification by calculating the similarity between the software and each family. Experiments show that the classification accuracy rate of this method for the Kmin family, Inconosys family, Ginimi family, and DroidKungFu family in the Drebin dataset is over 90%.