Reassessing feature-based Android malware detection in a contemporary context
Table 27
Performance of all core ML models trained on HTTP features or a combination of both TCP and HTTP features.
Note that models trained only on TCP features are shown in Table 25.