Malware detection through machine learning techniques

Malware attack is a never-ending cyber security issue. Since traditional approaches are less efficient in detecting newly appeared malware, researchers are applying machine learning methods. In this research we started by an overview of the domain and went over available malware datasets. Then we di...

Full description

Saved in:
Bibliographic Details
Main Authors: Amer, Ahmed, Abdul Aziz, Normaziah
Format: Article
Language:English
Published: The World Academy of Research in Science and Engineering 2019
Subjects:
Online Access:http://irep.iium.edu.my/76535/1/76535_Malware%20detection%20through%20machine.pdf
http://irep.iium.edu.my/76535/
http://www.warse.org/IJATCSE/static/pdf/file/ijatcse82852019.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Universiti Islam Antarabangsa Malaysia
Language: English
Description
Summary:Malware attack is a never-ending cyber security issue. Since traditional approaches are less efficient in detecting newly appeared malware, researchers are applying machine learning methods. In this research we started by an overview of the domain and went over available malware datasets. Then we discussed disadvantages of traditional Anti-Malware methods and reviewed possible Machine Learning techniques used in this domain. A study on EMBER dataset has been made with an objective of improving the baseline Gradient Boosted Decision Tree model by optimizing its hyper-parameter and eliminating noisy features from the dataset. EMBER dataset consists of 1.1M observations of static features extracted from executable files. Our optimized model has achieved 99.38% accuracy with 0.004 false positive rate in 7 minutes running time. We conclude that Machine Learning techniques are practical to be applied as anti-malware solutions including for Zero-day attacks.