Signature based ransomware detection based on optimizations approaches using RandomClassifier and CNN algorithms

Kanti Singh Sangher (), Archana Singh () and Hari Mohan Pandey ()
Additional contact information
Kanti Singh Sangher: Centre for Development of Advanced Computing
Archana Singh: Amity University
Hari Mohan Pandey: Bournemouth University

International Journal of System Assurance Engineering and Management, 2024, vol. 15, issue 5, No 7, 1687-1703

Abstract: Abstract As Ransomware encrypts user files to prevent access to infected systems its harmful impacts must be quickly identified and remedied. It can be challenging to identify the metrics and parameters to check, especially when using unknown ransomware variants in tests. The proposed work uses machine learning techniques to create a general model that can be used to detect the variations of ransomware families while observing the characteristics of malware. However, early detection is impeded by a dearth of data during the initial phases of an attack, which results in low detection accuracy and a high proportion of false alarms. To overcome these restrictions, our research suggests a revolutionary technique, in machine learning techniques we have proposed RandomClassifier with SMOTE optimizer based on the results received from LazyPredictAutoML, and then deep learning algorithm ANN using Root Mean Square Propagation (Adam) has been implemented to get the hidden patterns which were not accessible in the machine learning approach. The further study focused on improving CNN’s performance over RMSprop & Adam, which maintains per-parameter learning rates that are adjusted based on the average of most recent weight gradient magnitudes, using the Adam optimizer. The best option for internet and non-stationary issues is CNN with Adam (e.g. noisy). As gradients grow sparser toward the end of optimization, Adam somewhat surpasses RMSprop. Adam uses CNN and uses the average of the second moments of the gradients (the uncentered variance). The proposed model reported 5.14 ms of prediction time and 99.18% accuracy.

Keywords: RandomClassifier; ANN; CNN; RMSprop; SMOTE; Adam; Ransomware (search for similar items in EconPapers)
Date: 2024
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
http://link.springer.com/10.1007/s13198-023-02017-9 Abstract (text/html)
Access to the full text of the articles in this series is restricted.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:ijsaem:v:15:y:2024:i:5:d:10.1007_s13198-023-02017-9

Ordering information: This journal article can be ordered from
http://www.springer.com/engineering/journal/13198

DOI: 10.1007/s13198-023-02017-9

Access Statistics for this article

International Journal of System Assurance Engineering and Management is currently edited by P.K. Kapur, A.K. Verma and U. Kumar

More articles in International Journal of System Assurance Engineering and Management from Springer, The Society for Reliability, Engineering Quality and Operations Management (SREQOM),India, and Division of Operation and Maintenance, Lulea University of Technology, Sweden
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().