Abstract: Exploiting the specific permission mechanism of Android system, we introduce contrasting permission patterns to represent the essential differences between malwares and clean applications and present an ensemble classifier for automatically detecting Android malwares. Each contrasting permission pattern is regarded as a weak classifier and votes for the final decision. Experiments on real applications demonstrate that the proposed classifier outperforms commonly used classifiers in Android malware detection.