| DREBIN |
Static Analysis + Linear SVM |
Fast static classification, low overhead. |
Legacy ML models, vulnerable to obfuscation, No XAI. |
| Alfaw et al. (2025) |
TFLite, CNN/RNN/LSTM |
High accuracy (98.07%), local execution. |
Heavy memory allocation, No XAI, no remediation. |
| MaMaDroid |
Markov Chains + Random Forest |
Resilient to Android OS updates over time. |
Heavy graph extraction, unsuitable for on-device use. |
| App Permission Mgr |
Android Framework APIs |
Instant privacy dashboard, user-friendly UI. |
Static rules only, no ML, cannot detect chaining. |
| Exodus Privacy |
REST Platform API |
Transparent tracker identification, open-source. |
Passive viewer, depends on server reports. |
| Hypatia |
ClamAV Signatures (Hashes) |
100% offline, zero battery drain. |
Signature-based; blind to zero-day malware. |
| Malwarebytes Mobile |
Cloud Intelligence + VPN |
Comprehensive defense ecosystem. |
Cloud-dependent, resource-heavy, invasive, No XAI. |
| INT8 TFLite MLP + XAI + Rules |
100% offline, TinyML INT8 (<50KB), XAI, Chaining. |
Bound by static analysis manifest scope. |