{"id":"https://openalex.org/W4416249486","doi":"https://doi.org/10.1109/cyber-ai66431.2025.11233481","title":"Efficient Hybrid Model for Ransomware Detection Using Machine Learning Techniques","display_name":"Efficient Hybrid Model for Ransomware Detection Using Machine Learning Techniques","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4416249486","doi":"https://doi.org/10.1109/cyber-ai66431.2025.11233481"},"language":"en","primary_location":{"id":"doi:10.1109/cyber-ai66431.2025.11233481","doi":"https://doi.org/10.1109/cyber-ai66431.2025.11233481","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cyber-ai66431.2025.11233481","pdf_url":null,"source":{"id":"https://openalex.org/S7407105982","display_name":"International Conference on Cybersecurity and AI-Based Systems (Cyber-AI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Conference on Cybersecurity and AI-Based Systems (Cyber-AI)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018183651","display_name":"Shorouq Al-Eidi","orcid":"https://orcid.org/0000-0002-4090-3736","observed_orcids":["https://orcid.org/0000-0002-4090-3736","https://orcid.org/0009-0001-2597-777X"]},"institutions":[{"id":"https://openalex.org/I114432678","display_name":"Tafila Technical University","ror":"https://ror.org/04jzmk773","country_code":"JO","type":"education","lineage":["https://openalex.org/I114432678"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Shorouq Al-Eidi","raw_affiliation_strings":["Tafila Technical University,Computer Science Department,Tafila,Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tafila Technical University,Computer Science Department,Tafila,Jordan","institution_ids":["https://openalex.org/I114432678"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120403158","display_name":"Omar Khadrawi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I114432678","display_name":"Tafila Technical University","ror":"https://ror.org/04jzmk773","country_code":"JO","type":"education","lineage":["https://openalex.org/I114432678"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Omar Khadrawi","raw_affiliation_strings":["Tafila Technical University,Computer Science Department,Tafila,Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tafila Technical University,Computer Science Department,Tafila,Jordan","institution_ids":["https://openalex.org/I114432678"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039946992","display_name":"Manal Ali E Alhathli","orcid":"https://orcid.org/0000-0002-5295-5015","observed_orcids":["https://orcid.org/0000-0002-5295-5015"]},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Manal Alhathli","raw_affiliation_strings":["Princess Nourah Bint Abdulrahman University,Department of Computer Sciences,Riyadh,Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princess Nourah Bint Abdulrahman University,Department of Computer Sciences,Riyadh,Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091723521","display_name":"Omar Darwish","orcid":"https://orcid.org/0000-0001-8346-7148","observed_orcids":["https://orcid.org/0000-0001-8346-7148"]},"institutions":[{"id":"https://openalex.org/I138216421","display_name":"Eastern Michigan University","ror":"https://ror.org/02ehshm78","country_code":"US","type":"education","lineage":["https://openalex.org/I138216421"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Omar Darwish","raw_affiliation_strings":["Eastern Michigan University,Information Security and Applied Computing,Michigan,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Eastern Michigan University,Information Security and Applied Computing,Michigan,USA","institution_ids":["https://openalex.org/I138216421"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"67","last_page":"72"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware-detection","display_name":"ransomware detection","score":1.0},{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.9670000076293945},{"id":"https://openalex.org/keywords/naive-bayes","display_name":"naive Bayes","score":0.6930000185966492},{"id":"https://openalex.org/keywords/decision-tree","display_name":"decision tree","score":0.9100000262260437},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"support vector machine","score":0.9959999918937683},{"id":"https://openalex.org/keywords/k-nearest-neighbors","display_name":"k-nearest neighbors","score":0.9900000095367432},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.48100000619888306}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.8828999996185303},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7239000201225281},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6960999965667725},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6858000159263611},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6607000231742859},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.6572999954223633},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6201000213623047},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.5885000228881836},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.5787000060081482},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40529999136924744},{"id":"https://openalex.org/C123860398","wikidata":"https://www.wikidata.org/wiki/Q6934605","display_name":"Multiclass classification","level":3,"score":0.33480000495910645},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.3163999915122986},{"id":"https://openalex.org/C3309909","wikidata":"https://www.wikidata.org/wiki/Q864155","display_name":"Binary decision diagram","level":2,"score":0.30469998717308044},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.30399999022483826},{"id":"https://openalex.org/C125168437","wikidata":"https://www.wikidata.org/wiki/Q7625184","display_name":"Structured support vector machine","level":3,"score":0.2976999878883362},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.29510000348091125},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C207201462","wikidata":"https://www.wikidata.org/wiki/Q182505","display_name":"Bayes' theorem","level":3,"score":0.28949999809265137},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C197855036","wikidata":"https://www.wikidata.org/wiki/Q380172","display_name":"Binary tree","level":2,"score":0.25929999351501465}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cyber-ai66431.2025.11233481","doi":"https://doi.org/10.1109/cyber-ai66431.2025.11233481","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cyber-ai66431.2025.11233481","pdf_url":null,"source":{"id":"https://openalex.org/S7407105982","display_name":"International Conference on Cybersecurity and AI-Based Systems (Cyber-AI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Conference on Cybersecurity and AI-Based Systems (Cyber-AI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2989588798","https://openalex.org/W3099702369","https://openalex.org/W3116036149","https://openalex.org/W3118888569","https://openalex.org/W3124401852","https://openalex.org/W3183350623","https://openalex.org/W4214850595","https://openalex.org/W4226156849","https://openalex.org/W4236362309","https://openalex.org/W4283215128","https://openalex.org/W4316690373","https://openalex.org/W4379191672","https://openalex.org/W4385872253","https://openalex.org/W4390347459","https://openalex.org/W4392451108","https://openalex.org/W4396712725","https://openalex.org/W4400306003"],"related_works":["https://openalex.org/W7125148523","https://openalex.org/W4402262047","https://openalex.org/W4413924107","https://openalex.org/W4390482474","https://openalex.org/W4405841709","https://openalex.org/W4402081625","https://openalex.org/W7112665159","https://openalex.org/W4408134458","https://openalex.org/W7217862298","https://openalex.org/W4211219600"],"abstract_inverted_index":{"Ransomware":[0,35],"is":[1],"one":[2],"of":[3,8,88],"the":[4,105],"most":[5],"prevalent":[6],"forms":[7],"malware":[9],"that":[10,104],"cybercriminals":[11],"use":[12],"to":[13,44],"encrypt":[14],"data":[15],"and":[16,70,78,84,96,119],"request":[17],"payment":[18],"for":[19,81,93,116,121],"its":[20,46],"release.":[21],"Organizations":[22],"handling":[23],"personal":[24],"information,":[25],"financial":[26],"records,":[27],"or":[28],"intellectual":[29],"property":[30],"are":[31],"more":[32],"vulnerable.":[33],"Detecting":[34],"remains":[36],"a":[37,71],"critical":[38],"cybersecurity":[39],"challenge,":[40],"requiring":[41],"advanced":[42],"techniques":[43],"counter":[45],"evolving":[47],"nature.":[48],"This":[49],"study":[50],"explores":[51],"multiple":[52],"machine":[53],"learning":[54],"algorithms,":[55,112],"including":[56],"Na\u00efve":[57],"Bayes":[58],"(NB),":[59],"Decision":[60],"Tree":[61],"(DT),":[62],"Support":[63],"Vector":[64],"Machine":[65],"(SVM),":[66],"K-Nearest":[67],"Neighbors":[68],"(KNN),":[69],"hybrid":[72,106],"model":[73,107],"combining":[74],"Random":[75],"Forest":[76],"(RF)":[77],"SVM":[79],"(RF-SVM),":[80],"ransomware":[82],"detection":[83],"classification.":[85,123],"A":[86],"dataset":[87],"25,000":[89],"images":[90],"was":[91],"used":[92],"both":[94],"binary":[95,117],"multiclass":[97,122],"classification":[98,118],"tasks.":[99],"The":[100],"experiment":[101],"results":[102],"demonstrated":[103],"performed":[108],"better":[109],"than":[110],"individual":[111],"achieving":[113],"98%":[114],"accuracy":[115],"96%":[120]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2025-11-14T00:00:00"}