An Ensemble Machine Learning Approach for Detecting and Classifying Malware Attacks on Mobile Devices.
Saved in:
| Title: | An Ensemble Machine Learning Approach for Detecting and Classifying Malware Attacks on Mobile Devices. |
|---|---|
| Authors: | Alsharif, Eiman1 (AUTHOR) tu4359251@taibahu.edu.sa, Alharby, Maher2 (AUTHOR) mharby@taibahu.edu.sa |
| Source: | Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. ). Oct2025, Vol. 50 Issue 19, p15825-15841. 17p. |
| Subjects: | Malware, Android (Operating system), Ensemble learning, Supervised learning, Mobile apps, Web-based user interfaces, Malware prevention, Data scrubbing, Feature selection |
| Abstract: | The widespread use of mobile devices makes them targets for cybercriminals, especially with the rise of malware. Existing malware detection studies have limitations. These include focusing on subsets of datasets, using single classification approaches, and lacking usability in practical applications. This research develops a stacking ensemble method for detecting and classifying malware attacks on Android devices, employing supervised machine learning algorithms like Random Forest, Decision Tree, Gaussian Naive Bayes, K-Nearest Neighbors, and Logistic Regression. Using the CIC-AndMal2017 dataset, we apply data preprocessing techniques to address missing data and data imbalance. We employ various feature selection methods, including Random Forest Importance, Principal Component Analysis, and Correlation-Based Selection, to help reduce data dimensionality. We also utilize a grid search technique for hyperparameter tuning. We assess model performance using evaluation metrics, including accuracy, precision, recall, and F1 score. Additionally, we measure training and prediction times to ensure efficiency. The stacking technique achieved remarkable results, with 99.86% across all metrics (accuracy, precision, recall, and F1 score) for binary classification. For multi-class classification, the results were 97.0% accuracy, 97.03% precision, 97.07% recall, and 97.03% F1 score. Finally, we develop a user-friendly web application to enhance the accessibility and usability of the proposed models in detecting Android malware, ensuring broader adoption and practical application of the developed models. [ABSTRACT FROM AUTHOR] |
| Copyright of Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. ) is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
|
Full text is not displayed to guests.
Login for full access.
|
|
| FullText | Links: – Type: pdflink Text: Availability: 1 |
|---|---|
| Header | DbId: egs DbLabel: Engineering Source An: 188475253 AccessLevel: 6 PubType: Academic Journal PubTypeId: academicJournal PreciseRelevancyScore: 0 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: An Ensemble Machine Learning Approach for Detecting and Classifying Malware Attacks on Mobile Devices. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Alsharif%2C+Eiman%22">Alsharif, Eiman</searchLink><relatesTo>1</relatesTo> (AUTHOR)<i> tu4359251@taibahu.edu.sa</i><br /><searchLink fieldCode="AR" term="%22Alharby%2C+Maher%22">Alharby, Maher</searchLink><relatesTo>2</relatesTo> (AUTHOR)<i> mharby@taibahu.edu.sa</i> – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22Arabian+Journal+for+Science+%26+Engineering+%28Springer+Science+%26+Business+Media+B%2EV%2E+%29%22">Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. )</searchLink>. Oct2025, Vol. 50 Issue 19, p15825-15841. 17p. – Name: Subject Label: Subjects Group: Su Data: <searchLink fieldCode="DE" term="%22Malware%22">Malware</searchLink><br /><searchLink fieldCode="DE" term="%22Android+%28Operating+system%29%22">Android (Operating system)</searchLink><br /><searchLink fieldCode="DE" term="%22Ensemble+learning%22">Ensemble learning</searchLink><br /><searchLink fieldCode="DE" term="%22Supervised+learning%22">Supervised learning</searchLink><br /><searchLink fieldCode="DE" term="%22Mobile+apps%22">Mobile apps</searchLink><br /><searchLink fieldCode="DE" term="%22Web-based+user+interfaces%22">Web-based user interfaces</searchLink><br /><searchLink fieldCode="DE" term="%22Malware+prevention%22">Malware prevention</searchLink><br /><searchLink fieldCode="DE" term="%22Data+scrubbing%22">Data scrubbing</searchLink><br /><searchLink fieldCode="DE" term="%22Feature+selection%22">Feature selection</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: The widespread use of mobile devices makes them targets for cybercriminals, especially with the rise of malware. Existing malware detection studies have limitations. These include focusing on subsets of datasets, using single classification approaches, and lacking usability in practical applications. This research develops a stacking ensemble method for detecting and classifying malware attacks on Android devices, employing supervised machine learning algorithms like Random Forest, Decision Tree, Gaussian Naive Bayes, K-Nearest Neighbors, and Logistic Regression. Using the CIC-AndMal2017 dataset, we apply data preprocessing techniques to address missing data and data imbalance. We employ various feature selection methods, including Random Forest Importance, Principal Component Analysis, and Correlation-Based Selection, to help reduce data dimensionality. We also utilize a grid search technique for hyperparameter tuning. We assess model performance using evaluation metrics, including accuracy, precision, recall, and F1 score. Additionally, we measure training and prediction times to ensure efficiency. The stacking technique achieved remarkable results, with 99.86% across all metrics (accuracy, precision, recall, and F1 score) for binary classification. For multi-class classification, the results were 97.0% accuracy, 97.03% precision, 97.07% recall, and 97.03% F1 score. Finally, we develop a user-friendly web application to enhance the accessibility and usability of the proposed models in detecting Android malware, ensuring broader adoption and practical application of the developed models. [ABSTRACT FROM AUTHOR] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. ) is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=188475253 |
| RecordInfo | BibRecord: BibEntity: Identifiers: – Type: doi Value: 10.1007/s13369-025-10011-5 Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 17 StartPage: 15825 Subjects: – SubjectFull: Malware Type: general – SubjectFull: Android (Operating system) Type: general – SubjectFull: Ensemble learning Type: general – SubjectFull: Supervised learning Type: general – SubjectFull: Mobile apps Type: general – SubjectFull: Web-based user interfaces Type: general – SubjectFull: Malware prevention Type: general – SubjectFull: Data scrubbing Type: general – SubjectFull: Feature selection Type: general Titles: – TitleFull: An Ensemble Machine Learning Approach for Detecting and Classifying Malware Attacks on Mobile Devices. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Alsharif, Eiman – PersonEntity: Name: NameFull: Alharby, Maher IsPartOfRelationships: – BibEntity: Dates: – D: 01 M: 10 Text: Oct2025 Type: published Y: 2025 Identifiers: – Type: issn-print Value: 2193567X Numbering: – Type: volume Value: 50 – Type: issue Value: 19 Titles: – TitleFull: Arabian Journal for Science & Engineering (Springer Science & Business Media B.V. ) Type: main |
| ResultId | 1 |
