SaveDroid is an Android malware detection system built on an optimised K-Nearest Neighbours model designed to stay accurate even when attackers try to evade detection through feature manipulation. The study evaluates the model on a balanced dataset of 36,000 Android apps using hybrid static and dynamic features, and reports up to 99.6% detection accuracy after optimisation, with strong resilience against Feature Injection and Feature Removal attacks.
Read the paper preprint