Malware Threat Affecting Financial Organization Analysis Using Machine Learning Approach

Romil Rawat, Sanjaya Kumar Sarangi, Yagya Nath Rimal, P. William, Snehil Dahima, Sonali Gupta and K. Sakthidasan Sankaran
Additional contact information
Romil Rawat: University of Extremadura, Spain
Sanjaya Kumar Sarangi: Utkal University, Bhubaneswar, India
Yagya Nath Rimal: Pokhara University, Nepal
P. William: Sanjivani College of Engineering, SPPU, Pune-India
Snehil Dahima: SIES College of Management Studies, India
Sonali Gupta: J.C. Bose University of Science and Technology, India
K. Sakthidasan Sankaran: Hindustan Institute of Technology and Science, India

International Journal of Information Technology and Web Engineering (IJITWE), 2022, vol. 17, issue 1, 1-20

Abstract: Since 2014, Emotet has been using man-in-the-browsers (MITB) attacks to target companies in the finance industry and their clients. Its key aim is to steal victims' online money-lending records and vital credentials as they go to their banks' websites. Without analyzing network packet payload computing (PPC), IP address labels, port number traces, or protocol knowledge, the authors have used machine learning (ML) modeling to detect Emotet malware infections and recognize Emotet-related congestion flows in this work. To classify Emotet-associated flows and detect Emotet infections, the output outcome values are compared by four separate popular ML algorithms: RF (random forest), MLP (multi-layer perceptron), SMO (sequential minimal optimization technique), and the LRM (logistic regression model). The suggested classifier is then improved by determining the right hyperparameter and attribute set range. Using network packet (computation) identifiers, the random forest classifier detects Emotet-based flows with 99.9726% precision and a 92.3% true positive rating.

Date: 2022
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/IJITWE.304051 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jitwe0:v:17:y:2022:i:1:p:1-20

Access Statistics for this article

International Journal of Information Technology and Web Engineering (IJITWE) is currently edited by Ghazi I. Alkhatib

More articles in International Journal of Information Technology and Web Engineering (IJITWE) from IGI Global
Bibliographic data for series maintained by Journal Editor ().