The rapid rise of malware threatens global cybersecurity, demanding robust detection of known and unknown threats. Traditional machine learning struggles with imbalanced datasets, yielding biased models with poor malware detection rates. MalwarNet, a pioneering framework, addresses this through a novel SMOTE-KNN approach, integrating Synthetic Minority Over-sampling Technique (SMOTE, k = 5) with KNN boundary filtering. Its pipeline includes preprocessing (feature extraction, imputation, normalization), balancing, scaling, splitting, training six algorithms (Gradient Boosting, Random Forest, Decision Tree, KNN, AdaBoost, Logistic Regression), and evaluation via accuracy, precision, recall, F1-score, and ROC-AUC. On two public malware datasets, it achieves 98% accuracy and 99% recall, excelling in finance, healthcare, and critical sectors.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

MalwarNet: An Imbalance-Aware Machine Learning-Based Malware Detection and Classification System

  • Md. Nura Alam Sabuj,
  • S. M. Hira Ahmed,
  • Md. Jahidul Islam,
  • Abdul Hasib,
  • Saurav Chandra Das,
  • Md. Naimul Pathan

摘要

The rapid rise of malware threatens global cybersecurity, demanding robust detection of known and unknown threats. Traditional machine learning struggles with imbalanced datasets, yielding biased models with poor malware detection rates. MalwarNet, a pioneering framework, addresses this through a novel SMOTE-KNN approach, integrating Synthetic Minority Over-sampling Technique (SMOTE, k = 5) with KNN boundary filtering. Its pipeline includes preprocessing (feature extraction, imputation, normalization), balancing, scaling, splitting, training six algorithms (Gradient Boosting, Random Forest, Decision Tree, KNN, AdaBoost, Logistic Regression), and evaluation via accuracy, precision, recall, F1-score, and ROC-AUC. On two public malware datasets, it achieves 98% accuracy and 99% recall, excelling in finance, healthcare, and critical sectors.