MDoctor: A mobile malware prognosis application

Eemil Lagerspetz, Hien Thi Thu Truong, Sasu Tarkoma, N. Asokan

    Research output: Chapter in Book/Report/Conference proceedingConference contributionScientificpeer-review

    5 Citations (Scopus)


    Mobile malware is on the rise as the global number of smartphone users grows exponentially. Traditional malware detection and scanning tools only detect malware when devices are actually infected. In previous work, we saw that the presence of applications that occur often with known malware can indicate not only infection status but also potential risk of infection. In this paper, we present Doctor - a malware prognosis application based on crowd sourced data. Doctor includes a server component and an easy-to-use Android client application. Doctor visualizes the health of the device as a pie chart, slices representing applications. Each slice is split into four sections, corresponding to different lightweight indicators of infection. Sections of each slice are colored from green to red. The greater the amount of red, the greater the risk of infection. This front-end application provides users a new function for malware prognosis which is currently missing in existing mobile anti-malware tools.

    Original languageEnglish
    Title of host publicationProceedings 2014 IEEE 34th International Conference on Distributed Computing Systems Workshops, ICDCSW 2014
    Number of pages6
    ISBN (Electronic)9781479941810
    Publication statusPublished - 29 Aug 2014
    MoE publication typeA4 Article in a conference publication
    EventInternational Conference on Distributed Computing Systems Workshops - Madrid, Spain
    Duration: 30 Jun 20143 Jul 2014
    Conference number: 34


    WorkshopInternational Conference on Distributed Computing Systems Workshops
    Abbreviated titleICDCSW


    • Android
    • Mobile malware
    • Prognosis

    Fingerprint Dive into the research topics of 'MDoctor: A mobile malware prognosis application'. Together they form a unique fingerprint.

    Cite this