{"id":"https://openalex.org/W4389622975","doi":"https://doi.org/10.1016/j.heliyon.2023.e23574","title":"Analyzing and comparing the effectiveness of malware detection: A study of machine learning approaches","display_name":"Analyzing and comparing the effectiveness of malware detection: A study of machine learning approaches","publication_year":2023,"publication_date":"2023-12-12","ids":{"openalex":"https://openalex.org/W4389622975","doi":"https://doi.org/10.1016/j.heliyon.2023.e23574","pmid":"https://pubmed.ncbi.nlm.nih.gov/38187275","pmcid":"https://www.ncbi.nlm.nih.gov/pmc/articles/10770453"},"language":"en","primary_location":{"id":"doi:10.1016/j.heliyon.2023.e23574","doi":"https://doi.org/10.1016/j.heliyon.2023.e23574","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.heliyon.2023.e23574","pdf_url":null,"source":{"id":"https://openalex.org/S2898612692","display_name":"Heliyon","issn_l":"2405-8440","issn":["2405-8440"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","ki-jl-1","norway-1","poland-40","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Heliyon","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.heliyon.2023.e23574","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084115136","display_name":"Muhammad Azeem","orcid":"https://orcid.org/0000-0001-9020-9999","observed_orcids":["https://orcid.org/0000-0001-9020-9999"]},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Muhammad Azeem","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Danish Khan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Danish Khan","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016606411","display_name":"Saman Iftikhar","orcid":"https://orcid.org/0000-0002-5675-1570","observed_orcids":["https://orcid.org/0000-0002-5675-1570"]},"institutions":[{"id":"https://openalex.org/I4210139873","display_name":"Arab Open University","ror":"https://ror.org/03vfnky71","country_code":"SA","type":"education","lineage":["https://openalex.org/I4210093932","https://openalex.org/I4210139873"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Saman Iftikhar","raw_affiliation_strings":["Faculty of Computer Studies, Arab Open University, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Studies, Arab Open University, Saudi Arabia","institution_ids":["https://openalex.org/I4210139873"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000292407","display_name":"Shaikhan Bawazeer","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210139873","display_name":"Arab Open University","ror":"https://ror.org/03vfnky71","country_code":"SA","type":"education","lineage":["https://openalex.org/I4210093932","https://openalex.org/I4210139873"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Shaikhan Bawazeer","raw_affiliation_strings":["Faculty of Computer Studies, Arab Open University, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Studies, Arab Open University, Saudi Arabia","institution_ids":["https://openalex.org/I4210139873"]}]},{"author_position":"last","author":{"id":null,"display_name":"Mohammed Alzahrani","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210139873","display_name":"Arab Open University","ror":"https://ror.org/03vfnky71","country_code":"SA","type":"education","lineage":["https://openalex.org/I4210093932","https://openalex.org/I4210139873"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Mohammed Alzahrani","raw_affiliation_strings":["Faculty of Computer Studies, Arab Open University, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Studies, Arab Open University, Saudi Arabia","institution_ids":["https://openalex.org/I4210139873"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5000292407","https://openalex.org/A5016606411","https://openalex.org/A5084115136"],"corresponding_institution_ids":["https://openalex.org/I16076960","https://openalex.org/I4210139873"],"apc_list":{"value":2100,"currency":"USD","value_usd":2100},"apc_paid":{"value":2100,"currency":"USD","value_usd":2100},"fwci":21.709,"has_fulltext":true,"cited_by_count":85,"citation_normalized_percentile":{"value":0.99647546,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"10","issue":"1","first_page":"e23574","last_page":"e23574"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.9990000128746033},{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.9819999933242798},{"id":"https://openalex.org/keywords/machine-learning-comparison","display_name":"machine learning comparison","score":0.5789999961853027},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.7350000143051147},{"id":"https://openalex.org/keywords/k-nearest-neighbors","display_name":"k-nearest neighbors","score":0.7390000224113464},{"id":"https://openalex.org/keywords/extra-trees","display_name":"extra trees","score":0.8939999938011169},{"id":"https://openalex.org/keywords/multilayer-perceptron","display_name":"multilayer perceptron","score":0.8339999914169312},{"id":"https://openalex.org/keywords/decision-tree","display_name":"decision tree","score":0.6460000276565552},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"logistic regression","score":0.9789999723434448},{"id":"https://openalex.org/keywords/tf-idf-feature-selection","display_name":"TF-IDF feature selection","score":0.8209999799728394},{"id":"https://openalex.org/keywords/entropy-based-feature-selection","display_name":"entropy-based feature selection","score":0.8009999990463257},{"id":"https://openalex.org/keywords/unsw-nb15","display_name":"UNSW-NB15","score":0.8640000224113464},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.6320000290870667}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8272435665130615},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7891770601272583},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7455881834030151},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.7370846271514893},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.7225191593170166},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6948078274726868},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6468016505241394},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5780560374259949},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.5758621692657471},{"id":"https://openalex.org/C81758059","wikidata":"https://www.wikidata.org/wiki/Q796584","display_name":"tf\u2013idf","level":3,"score":0.575396716594696},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.4822150468826294},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.45827364921569824},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4474131464958191},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.444989413022995},{"id":"https://openalex.org/C179717631","wikidata":"https://www.wikidata.org/wiki/Q2991667","display_name":"Multilayer perceptron","level":3,"score":0.4423671364784241},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.30185461044311523},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2213975191116333},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.15584462881088257},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.10637298226356506},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1016/j.heliyon.2023.e23574","doi":"https://doi.org/10.1016/j.heliyon.2023.e23574","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.heliyon.2023.e23574","pdf_url":null,"source":{"id":"https://openalex.org/S2898612692","display_name":"Heliyon","issn_l":"2405-8440","issn":["2405-8440"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","ki-jl-1","norway-1","poland-40","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Heliyon","raw_type":"journal-article"},{"id":"pmh:oai:pubmedcentral.nih.gov:10770453","doi":null,"is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/10770453","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC10770453/pdf/main.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Heliyon","raw_type":"Text"},{"id":"pmid:38187275","doi":null,"is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/38187275","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Heliyon","raw_type":"Journal Article"},{"id":"pmh:oai:doaj.org/article:19780e36c8474663a96a627b93942ed8","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/19780e36c8474663a96a627b93942ed8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Heliyon, Vol 10, Iss 1, Pp e23574- (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1016/j.heliyon.2023.e23574","doi":"https://doi.org/10.1016/j.heliyon.2023.e23574","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.heliyon.2023.e23574","pdf_url":null,"source":{"id":"https://openalex.org/S2898612692","display_name":"Heliyon","issn_l":"2405-8440","issn":["2405-8440"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","ki-jl-1","norway-1","poland-40","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Heliyon","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4389622975.pdf","grobid_xml":"https://content.openalex.org/works/W4389622975.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W68838900","https://openalex.org/W1607985412","https://openalex.org/W1943233084","https://openalex.org/W1991504529","https://openalex.org/W2522218842","https://openalex.org/W2554148185","https://openalex.org/W2580768492","https://openalex.org/W2726353492","https://openalex.org/W2798159728","https://openalex.org/W2801567173","https://openalex.org/W2805511146","https://openalex.org/W2889100747","https://openalex.org/W2910711617","https://openalex.org/W2914839014","https://openalex.org/W2944525791","https://openalex.org/W2950348902","https://openalex.org/W2982431998","https://openalex.org/W3003603507","https://openalex.org/W3008480811","https://openalex.org/W3044817893","https://openalex.org/W3088219655","https://openalex.org/W3119729076","https://openalex.org/W3135185324","https://openalex.org/W3153374099","https://openalex.org/W3157814027","https://openalex.org/W3167041328","https://openalex.org/W3195971125","https://openalex.org/W3202929541","https://openalex.org/W4205172136","https://openalex.org/W4214850595","https://openalex.org/W4220812507","https://openalex.org/W4230792291","https://openalex.org/W4234224236","https://openalex.org/W4235985462","https://openalex.org/W4245729972","https://openalex.org/W4250038501","https://openalex.org/W4312708589","https://openalex.org/W4365600828","https://openalex.org/W4377825895","https://openalex.org/W6732069952"],"related_works":["https://openalex.org/W3024833444","https://openalex.org/W4415917720","https://openalex.org/W4392464519","https://openalex.org/W4404030688","https://openalex.org/W7161554332","https://openalex.org/W7214547877","https://openalex.org/W4313307195","https://openalex.org/W4409724184","https://openalex.org/W4405440393","https://openalex.org/W7143895449"],"abstract_inverted_index":{"The":[0,138,187,200],"Internet":[1,36,72],"has":[2],"become":[3],"a":[4,59,66,169],"vital":[5],"source":[6],"of":[7,31,34,37,45,58,76,90,207,216],"knowledge":[8],"and":[9,23,40,53,85,107,132,192],"communication":[10],"in":[11,27,61],"recent":[12],"times.":[13],"Continuous":[14],"technological":[15],"advancements":[16],"have":[17,49,99],"changed":[18],"the":[19,28,35,46,62,71,142,153,183,195,213],"way":[20],"businesses":[21],"operate,":[22],"everyone":[24],"today":[25],"lives":[26],"digital":[29],"world":[30],"engineering.":[32],"Because":[33],"Things":[38],"(IoT)":[39],"its":[41],"applications,":[42],"people's":[43],"impressions":[44],"information":[47],"revolution":[48],"improved.":[50],"Malware":[51],"detection":[52,84,106],"categorization":[54],"are":[55,94],"becoming":[56],"more":[57],"problem":[60],"cybersecurity":[63],"world.":[64],"As":[65],"result,":[67],"strong":[68],"security":[69],"on":[70,180],"could":[73],"protect":[74],"billions":[75],"internet":[77],"users":[78],"from":[79],"harmful":[80],"behavior.":[81],"In":[82,147],"malware":[83,105],"classification":[86,108],"techniques,":[87],"several":[88],"types":[89],"deep":[91],"learning":[92,113],"models":[93,197],"used;":[95],"however,":[96],"they":[97],"still":[98],"limitations.":[100],"This":[101],"study":[102,140,201],"will":[103],"explore":[104],"elements":[109],"using":[110],"modern":[111],"machine":[112],"(ML)":[114],"approaches,":[115],"including":[116],"K-Nearest":[117],"Neighbors":[118],"(KNN),":[119],"Extra":[120],"Tree":[121,130],"(ET),":[122],"Random":[123,204],"Forest":[124],"(RF),":[125],"Logistic":[126],"Regression":[127],"(LR),":[128],"Decision":[129],"(DT),":[131],"neural":[133],"network":[134],"Multilayer":[135],"Perceptron":[136],"(nnMLP).":[137],"proposed":[139,149],"uses":[141],"publicly":[143],"available":[144],"dataset":[145,160,188],"UNSWNB15.":[146],"our":[148,159],"work,":[150],"we":[151,167],"applied":[152,168],"feature":[154,170,185],"encoding":[155],"method":[156,172],"to":[157,194],"convert":[158],"into":[161],"purely":[162],"numeric":[163],"values.":[164],"After":[165],"that,":[166],"selection":[171],"named":[173],"Term":[174],"Frequency-Inverse":[175],"Document":[176],"Frequency":[177],"(TFIDF)":[178],"based":[179],"entropy":[181],"for":[182,198],"best":[184,214],"selection.":[186],"is":[189],"then":[190],"balanced":[191],"provided":[193],"ML":[196,210],"classification.":[199],"concludes":[202],"that":[203],"Forest,":[205],"out":[206],"all":[208],"tested":[209],"models,":[211],"yielded":[212],"accuracy":[215],"97.68":[217],"%.":[218]},"counts_by_year":[{"year":2026,"cited_by_count":31},{"year":2025,"cited_by_count":36},{"year":2024,"cited_by_count":18}],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2023-12-13T00:00:00"}