Machine Learning Techniques for Enhanced Malware Detection in Portable Executable Files
摘要
This study aims to explore and showcase the strengths and weaknesses of diverse machine-learning approaches in classifying malware, with a specific focus on portable executable (PE) files. Overcoming common challenges in machine learning, such as overfitting and underfitting, is addressed through the use of ensemble methods and preprocessing techniques, including feature selection and hyperparameter tuning. The main goal is to improve the performance of classifiers in distinguishing between malicious and benign PE files. Through a comparative analysis of machine learning methods like random forests, decision trees, and gradient boosting, the research emphasizes the superiority of the random forests algorithm, achieving an impressive accuracy rate of 99%. By thoroughly assessing the merits and drawbacks of each algorithm, the study provides valuable insights into effectively managing diverse malware categories. This paper underscores the importance of ensemble methods, feature engineering, and preprocessing in enhancing classifier performance for malware classification, particularly in the context of portable executable files.