TARU PUBLICATIONS
Journal of Information and Optimization Sciences cover

Journal of Information and Optimization Sciences

(Since 1980)
Hybrid ·Peer-reviewed·ISSN (Online): 2169-0103·ISSN (Print): 0252-2667

WoS  JIF 2026 : 0.4 (Q4)

Powered by:Powered by

Monthly Journal: Publishes theoretical and applied research on topics in information and optimization sciences.

Issues up to 2022 co-published with and available at:Taylor & Francis
submissions@tarupublications.com
Taru Online First Current IssueSpecial IssuesBrowse all Issues
Journal of Information and Optimization Sciences
Open Access Research Article

A relational rule-based system for PDF malware detection

* , , , ,

* Corresponding author · click or hover a name for details

pp. 925–934Vol. 45Issue 4May 2024DOI: 10.47974/JIOS-1616XML
Published Online:
08 Jun 2024
Article type:
Research Article
Language:
EN
Article no.:
JIOS-1616
Pages:
925–934

Abstract

Malware attacks are one of the significant issues in the cyber security domain. Many sectors, including financial, healthcare, IoT, etc., are affected by malicious activities through malware attacks. Every day, new malware variants are being released, and traditional solutions cannot detect new malware variants. This paper proposes a methodology using relational rules to detect Portable Document Format (PDF) malware. The methodology includes data pre-processing, relational rules, and PDF malware detection. The proposed methodology obtains 89 relational rules from PART, OneR, and JRip rule-based models. These 89 rules are applied, and the performance is tested on Evasive-PDFMal2022. The methodology achieves a higher accuracy of 99.1223% with 89 relational rules on Evasive-PDFMal2022. Further, the proposed methodology is also compared with traditional malware detection systems.

Keywords

PDF malwareMalware detectionRelational rulesMachine learning

Subject Classifications

Primary 68T99

References

[1] Abhay Pratap Singh Mahendra Singh, “Real time malware detection in encrypted network traffic using machine learning with time based features”, Journal of Discrete Mathematical Sciences & Cryptography, Vol. 26 (2023).
[2] Morolong, Mamoqenelo P., Shava, Fungai Bhunu & Gamundani, AttleeM. Cloud computing security in health cyber physical systems, Journal of Discrete Mathematical Sciences and Cryptography, 26:5, 1553–1568 (2023), DOI: 10.47974/JDMSC-1821. 
[3] IT threat evolution in Q3 2023. Non-mobile statistics, SECURELIST by Kaspersky, Available at- https://securelist.com/it-threat-evolution-q3-2023-non-mobile-statistics/111228/ (2023).
[4] Rutuja R. Patil, Gagandeep Kaur, Himank Jain, Ayush Tiwari, Soham Joshi, Keshav Rao, “Machine learning approach for phishing website detection: A literature survey” Journal of Discrete Mathematical Sciences & Cryptography, Vol. 25 (2022).
[5] Sharma, S., Raja, L., Bhatnagar, V., Sharma, D., Bhagirath, S. N., & Poonia, R. C. Hybrid HOG-SVM encrypted face detection and recognition model. Journal of Discrete Mathematical Sciences and Cryptography, 25(1), 205–218 (2022). 
[6] Roy, A., Razia, S., Parveen, N., Rao, A. S., Nayak, S. R., & Poonia, R. C. Fuzzy rule based intelligent system for user authentication based on user behaviour. Journal of Discrete Mathematical Sciences and Cryptography, 23(2), 409–417 (2020). 
[7] Cybersecurity threatscape: Q3 2023, by Positive technologies, available at - https://www.ptsecurity.com/ww-en/analytics/cybersecurity-threatscape-2023-q3/ (2023). 
[8] Issakhani, Maryam, Princy Victor, Ali Tekeoglu, and Arash Habibi Lashkari. “PDF Malware Detection based on Stacking Learning.” In ICISSP, pp. 562-570 (2022).
[9] Yerima, Suleiman Y., and Abul Bashar. “Explainable Ensemble Learning Based Detection of EvasiveMalicious PDF Documents.” Electronics 12, no. 14: 3148 (2023).
[10] Abu Al-Haija, Qasem, Ammar Odeh, and Hazem Qattous. “PDF Malware Detection Based on Optimizable Decision Trees.” Electronics 11, no. 19 : 3142 (2022).
[11] Chandran, P., Rajini Hema, and M. Jeyakarthic. “Invasive weed optimization with stacked long short-term memory for pdf malware detection and classification.” International Journal of Health Sciences : 4187-4204 (2022). 
[12] PM, Pruthvi Priya, and P. Hemavathi. “PDF Malware Detection System based on Machine Learning Algorithm.” In 2022 International Conference on Automation, Computing and Renewable Systems (ICACRS), pp. 538-542. IEEE (2022).
[13] Hossain, GM Sakhawat, Kaushik Deb, Helge Janicke, and Iqbal H. Sarker. “PDF Malware Detection: Towards Machine Learning Modeling with Explainability Analysis.” IEEE Access (2024).
[14] Khan, Bilal, Muhammad Arshad, and Sarwar Shah Khan. “Comparative analysis of machine learning models for PDF malware detection: Evaluating different training and testing criteria.” Journal of Cybersecurity 5 : 1-11 (2023).
[15] Corum, Andrew, Donovan Jenkins, and Jun Zheng. “Robust PDF malware detection with image visualization and processing techniques.” In 2019 2nd International Conference on Data Intelligence and Security (ICDIS), pp. 108-114. IEEE (2019).
[16] Jeong, Young-Seob, Jiyoung Woo, and Ah Reum Kang. “Malware detection on byte streams of pdf files using convolutional neural networks.” Security and Communication Networks 2019 (2019).
[17] Zhang, J. “MLPdf: An Effective Machine Learning Based Approach for PDF Malware Detection. arXiv 2018.” arXiv preprint arXiv:1808.06991 (2018).
[18] Kshirsagar, Deepak, and Pooja Agrawal. “A study of feature selection methods for android malware detection.” Journal of Information and Optimization Sciences 43, no. 8: 2111-2120 (2022).
[19] Agrawal, Pooja V., Deepak D. Kshirsagar, and Anish R. Khobragade. “Symmetric uncertainty based feature selection method in android malware detection.” In Recent Advances in Material, Manufacturing, and Machine Learning, pp. 934-941. CRC Press (2023).
[20] Vaidya, Atharva, and Deepak Kshirsagar. “Analysis of feature selection techniques to detect dos attacks using rule-based classifiers.” In Applied Information Processing Systems: Proceedings of ICCET 2021, pp. 311-319. Springer Singapore (2022).

Views: 194Downloads: 81Citations: 0