Optimized Malware Detection Framework Using Principal Components Analysis

Funmilayo Jumoke Akinshola-Awe; Afolayan Obiniyi; Oluwakayode Owa

doi:10.4028/p-6aL8TX

Paper Titles

Mobile-Optimised Deep Learning Architecture for Multi-Crop Disease Detection Using CNN and SVM
p.87

Mirai Botnet DDoS Attack Simulation Using Build Your Own Botnet (BYOB)
p.101

Empirical Data from the Case Study on the State of the Art of Cybercrime in Nigeria
p.113

An EfficientNet-Based Framework for Real-Time and Reliable Intrusion Detection in Vehicular Networks
p.135

Optimized Malware Detection Framework Using Principal Components Analysis
p.147

Investigating the Efficacy of Deep Learning Techniques in Detecting Advanced Persistent Threats (APTs)
p.163

Virtual Reality for Mechanical and Mechatronic Engineering Education in Africa: A Review of Applications and Future Prospects
p.181

Enhancing Language Acquisition for Beginners: A Data-Driven Approach
p.201

Design and Implementation of a Cooperative Management System
p.211

HomeEngineering HeadwayEngineering Headway Vol. 37Optimized Malware Detection Framework Using...

Optimized Malware Detection Framework Using Principal Components Analysis

Abstract:

Software that can damage an information system asset is considered a malware, such information systems have been rendered to several destructive attacks mainly due to the emergence of the Internet. Conventional Antimalware software is not effective at eliminating malware due to its many evasion techniques such as polymorphism and code obfuscation. Antimalware software is ineffectual and defenseless against zero-day attacks as it can only eliminate malware for which it has signatures. K Nearest Neighbor, Decision Tree and Support Vector Machine are some of the leading classifiers that has successfully detect and classify Malware but optimal accuracy of detection has not been achieved, in addition, false positives and false negatives persists because the hyperparameters of these classifiers were not optimized and noise was not filtered out of the datasets using feature selection technique. The aim of this research is to develop an optimized malware detection and classification framework employing Principal Components Analysis to mitigate the curse of dimensionality while utilizing optimal hyperparameters of chosen classifiers to boost accuracy of malware detection and classification as well as reduction of false positives and false negatives. This research employed K Nearest Neighbor, Decision Tree, and Support Vector Machine to detect and classify malware with CICMalmem dataset to train the model. Grid search optimization was combined with K-fold cross-validation to optimize the hyperparameters of the selected classifiers in order to boost the model's performance and achieve high detection accuracy as well as low false positives and low false negatives. Machine learning performance metrics such as the F1 Score, Precision, Recall, and Confusion Matrix were used to evaluate the Research Model. K Nearest Neighbor generated Zero False Positives while KNN, Decision Tree and Support Vector Machine achieved Accuracy of 99%, 98.64, and 100% respectively.

You might also be interested in these eBooks

The 3rd International Conference of Multidisciplinary Engineering and Applied Sciences (ICMEAS): Selected papers in advanced engineering

View Preview

Info:

Periodical:

Engineering Headway (Volume 37)

Pages:

147-161

DOI:

https://doi.org/10.4028/p-6aL8TX

Citation:

Cite this paper

Online since:

March 2026

Authors:

Funmilayo Jumoke Akinshola-Awe*, Afolayan Obiniyi, Oluwakayode Owa

Keywords:

CICMalmem, Dataset, Grid Search, Machine Learning, Malware, Principal Components Analysis

Export:

RIS, BibTeX

Price:

Permissions CCC:

Request Permissions

Permissions PLS:

Request Permissions

Сopyright:

Citation:

* - Corresponding Author

References

[1] F. A. Aboaoja, Zainal, A. Ali, A. Ghaleb, A. M. Alsolami, F. A. & M. A. Rassam, Dynamic Extraction of Initial Behavior for Evasive Malware Detection. Mathematics, 11(2), 2023, 1–23