Global Site Navigation (use tab and down arrow)

Canadian Institute for Cybersecurity

Android Botnet dataset

To give a comprehensive evaluation of Android botnets, we gathered a large collection of Android botnet samples representing 14 botnet families. Our accumulated dataset combines some botnet samples from the Android Genome Malware project, malware security blog, VirusTotal and samples provided by well-known anti-malware vendor. Overall, our dataset includes 1929 samples spawning a period of 2010 (the first appearance of Android botnet) to 2014.

The Android Botnet dataset consists of 14 families:

Family, Year of discovery, No. of samples

  1. AnserverBot, 2011, 244
  2. Bmaster, 2012, 6
  3. DroidDream, 2011, 363
  4. Geinimi, 2010, 264
  5. MisoSMS, 2013, 100
  6. NickySpy, 2011, 199
  7. Not Compatible, 2014, 76
  8. PJapps, 2011, 244
  9. Pletor, 2014, 85
  10. RootSmart, 2012, 28
  11. Sandroid, 2014, 44
  12. TigerBot, 2012, 96
  13. Wroba, 2014, 100
  14. Zitmo, 2010, 80

The full research paper outlining the details of the dataset and its underlying principles:

  • Andi Fitriah A. Kadir, Natalia Stakhanova, Ali A. Ghorbani, "Android Botnet: What URLs are telling us", 9th International Conference on Network and System Security (NSS), November 3-5, 2015,New York City, USA.

For more information, contact A.Habibi.L@unb.ca.