Niringiye Godfrey, Bruce Ndibanje, HoonJae Lee, ByungGook Lee
언어
영어(ENG)
URL
https://www.earticle.net/Article/A462012
※ 원문제공기관과의 협약기간이 종료되어 열람이 제한될 수 있습니다.
원문정보
초록
영어
Ransomware is one of the most significant cybersecurity threats facing the world. In this research we designed and constructed a custom cybersecurity AI dataset for ransomware detection. We then evaluated the dataset using different machine learning models. The dataset was constructed using Cuckoo Sandbox where raw ransomware samples were analyzed to extract key features such as API calls, DLL usage, file operations, network activity, process creation and registry changes. These were then carefully labeled as either ransomware or benign. For evaluation purposes, the custom cybersecurity AI dataset was utilized to train and test various machine learning models. The dataset was split into 80% for training and 20% for testing. Logistic Regression, Random Forest, K-Nearest Neighbors (KNN), and XGBoost models were used to evaluate the resulting custom Cybersecurity AI Dataset. We obtained higher results of accuracy, precision, recall, and F1 scores evaluation metrics. Moreover, our results demonstrate the robustness of a combination of well-designed custom Cybersecurity AI Datasets and machine learning techniques in enhancing ransomware detection mechanisms as well as providing a framework for future cybersecurity applications
목차
Abstract 1. Introduction 2. Background and Motivation. 3. Proposed Method 3.1 Cuckoo Sandbox Environment Construction 3.2 Ransomware Raw Sample Collection 3.3 Data Processing 3.4 Data Labeling 3.5 Ransomware Cybersecurity AI Dataset 3.6 Ransomware Cybersecurity AI Dataset Evaluation through Machine Learning 4. Results and Analysis 5. Conclusion and Future Research 6. Acknowledgement 7. References
키워드
Cybersecurity AI DatasetRansomware Sample CollectionData ProcessingLabelingMachine Learning Models
저자
Niringiye Godfrey [ Department of Computer Engineering, Dongseo University ]
Bruce Ndibanje [ Cybersecurity Consultant, TechDivision, Rome, Italy ]
HoonJae Lee [ Professor, Dept. of Information Security, Dongseo University ]
Corresponding Author
ByungGook Lee [ Professor, Dept. of Computer Engineering, Dongseo University ]