This study aims to explore and showcase the strengths and weaknesses of diverse machine-learning approaches in classifying malware, with a specific focus on portable executable (PE) files. Overcoming common challenges in machine learning, such as overfitting and underfitting, is addressed through the use of ensemble methods and preprocessing techniques, including feature selection and hyperparameter tuning. The main goal is to improve the performance of classifiers in distinguishing between malicious and benign PE files. Through a comparative analysis of machine learning methods like random forests, decision trees, and gradient boosting, the research emphasizes the superiority of the random forests algorithm, achieving an impressive accuracy rate of 99%. By thoroughly assessing the merits and drawbacks of each algorithm, the study provides valuable insights into effectively managing diverse malware categories. This paper underscores the importance of ensemble methods, feature engineering, and preprocessing in enhancing classifier performance for malware classification, particularly in the context of portable executable files.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Machine Learning Techniques for Enhanced Malware Detection in Portable Executable Files

  • Walid El Mouhtadi,
  • Yassine Maleh,
  • Soufyane Mounir

摘要

This study aims to explore and showcase the strengths and weaknesses of diverse machine-learning approaches in classifying malware, with a specific focus on portable executable (PE) files. Overcoming common challenges in machine learning, such as overfitting and underfitting, is addressed through the use of ensemble methods and preprocessing techniques, including feature selection and hyperparameter tuning. The main goal is to improve the performance of classifiers in distinguishing between malicious and benign PE files. Through a comparative analysis of machine learning methods like random forests, decision trees, and gradient boosting, the research emphasizes the superiority of the random forests algorithm, achieving an impressive accuracy rate of 99%. By thoroughly assessing the merits and drawbacks of each algorithm, the study provides valuable insights into effectively managing diverse malware categories. This paper underscores the importance of ensemble methods, feature engineering, and preprocessing in enhancing classifier performance for malware classification, particularly in the context of portable executable files.