Performance Analysis of Machine Learning Methods with Class Imbalance Problem in Android Malware Detection

Akintola, A.G. and Balogun, A.O. and Mojeed, H.A. and Usman-Hamza, F.E. and Salihu, S.A. and Adewole, K.S. and Balogun, G.B. and Sadiku, P.O. (2022) Performance Analysis of Machine Learning Methods with Class Imbalance Problem in Android Malware Detection. International Journal of Interactive Mobile Technologies, 16 (10). pp. 140-162.

Full text not available from this repository.
Official URL: https://www.scopus.com/inward/record.uri?eid=2-s2....

Abstract

Due to the exponential rise of mobile technology, a slew of new mobile security concerns has surfaced recently. To address the hazards connected with malware, many approaches have been developed. Signature-based detection is the most widely used approach for detecting Android malware. This approach has the disadvantage of being unable to identify unknown malware. As a result of this issue, machine learning (ML) for detecting malware apps was created. Conventional ML methods are concerned with increasing classification accuracy. However, the standard classification method performs poorly in recognizing malware applications due to the unbalanced real-world datasets. In this study, an empirical analysis of the detection performance of ML methods in the presence of class imbalance is conducted. Specifically, eleven (11) ML methods with diverse computational complexities were investigated. Also, the synthetic minority oversampling technique (SMOTE) and random undersampling (RUS) are deployed to address the class imbalance in the Android malware datasets. The experimented ML methods are tested using the Malgenome and Drebin Android malware datasets that contain features gathered from both static and dynamic malware approaches. According to the experimental findings, the performance of each experimented ML method varies across the datasets. Moreover, the presence of class imbalance deteriorated the performance of the ML methods as their performances were amplified with the deployment of data sampling methods (SMOTE and RUS) used to alleviate the class imbalance problem. Besides, ML models with SMOTE technique are superior to ML models based on the RUS method. It is therefore recommended to address the inherent class imbalance problem in Android Malware detection. © 2022. All Rights Reserved.

Item Type: Article
Impact Factor: cited By 0
Depositing User: Ms Sharifah Fahimah Saiyed Yeop
Date Deposited: 06 Jul 2022 08:20
Last Modified: 06 Jul 2022 08:20
URI: http://scholars.utp.edu.my/id/eprint/33187

Actions (login required)

View Item
View Item