Reconstruction of Android Applications' Network Behavior Based on Application Layer Traffic

摘要: In recent years, a dramatic change was bring to us with the rapid development of intelligent terminal technology and popularity mobile services. Android platforms alone have produced staggering revenues, which has attracted cybercriminals increased malware in markets at an alarming rate. However, phone network traffic is used analyze malicious software recently, but this method lack visual way understand behavior as well without integrity explanation. paper, we introduced that can reconstructed applications' based on application layer traffic. We reconstruct two ways, namely, time sequence model connection model, applications by reconstructed, it provides interaction process explanation shows malwares include normal