Enhancing PDF Malware Detection through Logistic Model Trees  

作　　者：Muhammad Binsawad 

机构地区：[1]Department of Information Systems,King Abdulaziz University,P.O.Box 80217,Jeddah,21589,Saudi Arabia

出　　处：《Computers, Materials & Continua》2024年第3期3645-3663,共19页计算机、材料和连续体（英文）

基　　金：This research work was funded by Institutional Fund Projects under Grant No.(IFPIP:211-611-1443).

摘　　要：Malware is an ever-present and dynamic threat to networks and computer systems in cybersecurity,and because of its complexity and evasiveness,it is challenging to identify using traditional signature-based detection approaches.The study article discusses the growing danger to cybersecurity that malware hidden in PDF files poses,highlighting the shortcomings of conventional detection techniques and the difficulties presented by adversarial methodologies.The article presents a new method that improves PDF virus detection by using document analysis and a Logistic Model Tree.Using a dataset from the Canadian Institute for Cybersecurity,a comparative analysis is carried out with well-known machine learning models,such as Credal Decision Tree,Naïve Bayes,Average One Dependency Estimator,Locally Weighted Learning,and Stochastic Gradient Descent.Beyond traditional structural and JavaScript-centric PDF analysis,the research makes a substantial contribution to the area by boosting precision and resilience in malware detection.The use of Logistic Model Tree,a thorough feature selection approach,and increased focus on PDF file attributes all contribute to the efficiency of PDF virus detection.The paper emphasizes Logistic Model Tree’s critical role in tackling increasing cybersecurity threats and proposes a viable answer to practical issues in the sector.The results reveal that the Logistic Model Tree is superior,with improved accuracy of 97.46%when compared to benchmark models,demonstrating its usefulness in addressing the ever-changing threat landscape.

关 键 词：Malware detection PDF files logistic model tree feature selection CYBERSECURITY 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]