AndrODet is proposed, a mechanism to detect three popular types of obfuscation in Android applications, namely identifier renaming, string encryption, and control flow obfuscation that leverages online learning techniques, thus being suitable for resource-limited environments that need to operate in a continuous manner.