Scholarlink

<p>Malware proliferation continues to jeopardize global data security and user privacy, necessitating robust detection and classification mechanisms. In this research, we propose Malware Detection using Cascade Machine Learning (MDCML) classifier designed to detect anomalies in Portable Executable (PE) files and classify them into malware families with high precision. The model integrates three machine learning algorithms such as Random Forest, Bagging and Boosting, fine-tuned through extensive hyperparameter optimization, significantly enhancing detection and classification performance. To extract features from raw textual data, we have utilized a TF-IDF based inter-class dispersion architecture, transforming unstructured opcode data into structured feature maps that emphasize contextual importance. The model uses cascade approach which enhances performance by passing uncertain or misclassified samples from one classifier to the next, enabling successive stages to refine predictions. It is evaluated on two public datasets-Big-2015 and Mal-API-2019, both of which contain a diverse set of malware families. The study includes a comprehensive experimentation on multi-class classification tasks. Performance was evaluated across diverse sample sizes, execution times and optimization strategies to ensure robust analysis. An accuracy of 98.97% and 95.42% on the respective datasets highlights the superior performance of the proposed framework over traditional machine learning models, showcasing significant advancements. This research underscores the concept of the hybrid MDCML classifier in improving malware detection and classification, thereby enhancing data security and privacy.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Feature-Driven Malware Detection using Cascade Machine Learning Models

  • 期刊论文

  • 发表日期：

    2025年9月3日

查看全文
  • Anisha Mahato,
  • Rana Majumdar,
  • Swarup Kr Ghosh

摘要

Malware proliferation continues to jeopardize global data security and user privacy, necessitating robust detection and classification mechanisms. In this research, we propose Malware Detection using Cascade Machine Learning (MDCML) classifier designed to detect anomalies in Portable Executable (PE) files and classify them into malware families with high precision. The model integrates three machine learning algorithms such as Random Forest, Bagging and Boosting, fine-tuned through extensive hyperparameter optimization, significantly enhancing detection and classification performance. To extract features from raw textual data, we have utilized a TF-IDF based inter-class dispersion architecture, transforming unstructured opcode data into structured feature maps that emphasize contextual importance. The model uses cascade approach which enhances performance by passing uncertain or misclassified samples from one classifier to the next, enabling successive stages to refine predictions. It is evaluated on two public datasets-Big-2015 and Mal-API-2019, both of which contain a diverse set of malware families. The study includes a comprehensive experimentation on multi-class classification tasks. Performance was evaluated across diverse sample sizes, execution times and optimization strategies to ensure robust analysis. An accuracy of 98.97% and 95.42% on the respective datasets highlights the superior performance of the proposed framework over traditional machine learning models, showcasing significant advancements. This research underscores the concept of the hybrid MDCML classifier in improving malware detection and classification, thereby enhancing data security and privacy.