Evaluating the risk of Android application: Design and implementation of static analysis system

A risk-evaluation-based system for static analysis of Android application is proposed as a reference model. As the known malicious software and normal applications are continuously collected and decompiled, the content in the application can be extracted and stored in local repository. A feature discovery routine is periodically executed to find the characteristic of malware families. For application to be evaluated, the risk information of the application is the similarity to the features discovered in the system.