arrow
返回

PDF Malware Detection: Toward Machine Learning Modeling With Explainability Analysis

delete2024-01-01
delete1
delete
OA
AI
G
G.M. Sakhawat Hossain
K
Kaushik Deb *
H
Helge Janicke
I
Iqbal H. Sarker *
DOI:10.1109/ACCESS.2024.3357620delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The Portable Document Format (PDF) is one of the most widely used file types, thus fraudsters insert harmful code into victims' PDF documents to compromise their equipment. Conventional solutions and identification techniques are often insufficient and may only partially prevent PDF malware because of their versatile character and excessive dependence on a certain typical feature set. The primary goal of this work is to detect PDF malware efficiently in order to alleviate the current difficulties. To accomplish the goal, we first develop a comprehensive dataset of 15958 PDF samples taking into account the non-malevolent, malicious, and evasive behaviors of the PDF samples. Using three well-known PDF analysis tools (PDFiD, PDFINFO, and PDF-PARSER), we extract significant characteristics from the PDF samples of our newly created dataset. In addition, we generate a number of derivations of features that have been experimentally proven to be helpful in classifying PDF malware. We develop a method to build an efficient and explicable feature set through the proper empirical analysis of the extracted and derived features. We explore different baseline machine learning classifiers and demonstrate an accuracy improvement of approx. 2% for the Random Forest classifier utilizing the selected feature set. Furthermore, we demonstrate the model's explainability by creating a decision tree that generates rules for human interpretation. Eventually, we make a comparison with previous studies and point out some important findings.
Keyword:
Cybersecurity
PDF malware
data analytics
machine learning
decision rule
explainable AI
human interpretation

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

暂无机构信息
引用论文

引用论文

Heterocyclic chelating agents. Part I. Metal complexes of 4-2′-pyridylimidazole
err1967-01-01
err0
PREAI
errW. J. Eilbeck; F. Holmes; G. G. Phillips; A. E. Underhill
err分享
err收藏
X-ray studies of cobaltate aminomethylphosphonic acid polymeric complex
err1980-01-01
err0
PREAI
errT. Głowiak; W. Sawka-Dobrowolska; B. Jeżowska-Trzebiatowska; A. Antonów
err分享
err收藏
Measuring Mosquito-borne Viral Suitability in Myanmar and Implications for Local Zika Virus Transmission
err2018-01-01
err0
errOAAI
errPablo Noel Perez-Guzman; Luiz Carlos Junior Alcantara; Uri Obolski; Maricelia M. de Lima; Elizabeth A. Ashley; Frank Smithuis; Peter Horby; Richard J. Maude; Zaw Lin; Aye Mon Mon Kyaw; José Lourenço
err分享
err收藏
Investigação de surto de doença de Chagas aguda na região extra-amazônica, Rio Grande do Norte, Brasil, 2016
err2018-02-05
err0
errOAAI
errAlexander Vargas; Juliane Maria Alves Siqueira Malta; Veruska Maia da Costa; Leandro Del Grande Cláudio; Renato Vieira Alves; Gilmar da Silva Cordeiro; Lúcia Maria Abrantes Aguiar; Jadher Percio
err分享
err收藏
Time to Achievement of Clinically Significant Outcomes After Isolated Arthroscopic Partial Meniscectomy: A Multivariate Analysis
err2020-12-01
err0
errOAAI
errAlexander Beletsky; Anirudh K. Gowd; Joseph N. Liu; Brandon J. Manderle; Adam B. Yanke; Brian Forsythe; Brian J. Cole; Nikhil Verma
err分享
err收藏
Brain alterations in low-frequency fluctuations across multiple bands in obsessive compulsive disorder强迫症多波段低频波动的大脑变化
err2016-10-22
err0
PREAI
errMònica Giménez; Andrés Guinea-Izquierdo; Victoria Villalta-Gil; Ignacio Martínez-Zalacaín; Cinto Segalàs; Marta Subirà; Eva Real; Jesús Pujol; Ben J Harrison; Josep Maria Haro; Joao R Sato; Marcelo Q Hoexter; Narcís Cardoner; Pino Alonso; José Manuel Menchón; Carles Soriano-Mas
err分享
err收藏
学者 查看更多内容