<?xml version="1.0" encoding="UTF-8"?>
<article article-type="Research Article">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher">journal-of-information-and-optimization-sciences</journal-id>
      <journal-title-group>
        <journal-title>Journal of Information and Optimization Sciences</journal-title>
      </journal-title-group>
      <issn publication-format="electronic">2169-0103</issn>
      <issn publication-format="print">0252-2667</issn>
      <publisher>
        <publisher-name>Taru Publications</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.47974/JIOS-1616</article-id>
      <title-group>
        <article-title>A relational rule-based system for PDF malware detection</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author" corresp="yes">
          <name>
            <surname>Salame</surname>
            <given-names>Geet C.</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, School of Computational Sciences, COEP Technological University, Pune, Maharashtra, 411005, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Shinde</surname>
            <given-names>Nirlepa T.</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, School of Computational Sciences, COEP Technological University, Pune, Maharashtra, 411005, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Baad</surname>
            <given-names>Prajakta P.</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, School of Computational Sciences, COEP Technological University, Pune, Maharashtra, 411005, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Kshirsagar</surname>
            <given-names>Deepak D.</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, School of Computational Sciences, COEP Technological University, Pune, Maharashtra, 411005, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Tanwar</surname>
            <given-names>Surendra Singh</given-names>
          </name>
          <aff>Department of Electrical Engineering, Engineering College Bikaner, Bikaner, Rajasthan, 334004, India</aff>
        </contrib>
      </contrib-group>
      <volume>45</volume>
      <issue>4</issue>
      <fpage>925</fpage>
      <lpage>934</lpage>
      <pub-date date-type="pub">
        <day>08</day>
        <month>06</month>
        <year>2024</year>
      </pub-date>
      <abstract>
        <p>Malware attacks are one of the significant issues in the cyber security domain. Many sectors, including financial, healthcare, IoT, etc., are affected by malicious activities through malware attacks. Every day, new malware variants are being released, and traditional solutions cannot detect new malware variants. This paper proposes a methodology using relational rules to detect Portable Document Format (PDF) malware. The methodology includes data pre-processing, relational rules, and PDF malware detection. The proposed methodology obtains 89 relational rules from PART, OneR, and JRip rule-based models. These 89 rules are applied, and the performance is tested on Evasive-PDFMal2022. The methodology achieves a higher accuracy of 99.1223% with 89 relational rules on Evasive-PDFMal2022. Further, the proposed methodology is also compared with traditional malware detection systems.</p>
      </abstract>
      <kwd-group>
        <kwd>PDF malware</kwd>
        <kwd>Malware detection</kwd>
        <kwd>Relational rules</kwd>
        <kwd>Machine learning</kwd>
      </kwd-group>
      <custom-meta-group>
        <custom-meta>
          <meta-name>access</meta-name>
          <meta-value>open</meta-value>
        </custom-meta>
        <custom-meta>
          <meta-name>retracted</meta-name>
          <meta-value>no</meta-value>
        </custom-meta>
      </custom-meta-group>
    </article-meta>
  </front>
</article>
