Enhanced Android Ransomware Detection Through Hybrid Simultaneous Swarm-Based Optimization

Camacho Fernández, David ORCID: https://orcid.org/0000-0002-5051-3475, Martín García, Alejandro ORCID: https://orcid.org/0000-0002-0800-7632, Alazab, Moutaz ORCID: https://orcid.org/0000-0003-2823-4776 and Abu Khurma, Ruba ORCID: https://orcid.org/0000-0002-8234-9374 (2024). Enhanced Android Ransomware Detection Through Hybrid Simultaneous Swarm-Based Optimization. "Cognitive Computation", v. 16 (n. 5); pp. 2154-2168. ISSN 18669956. https://doi.org/10.1007/s12559-024-10301-4.

Descripción

Título: Enhanced Android Ransomware Detection Through Hybrid Simultaneous Swarm-Based Optimization
Autor/es:
Tipo de Documento: Artículo
Título de Revista/Publicación: Cognitive Computation
Fecha: 1 Junio 2024
ISSN: 18669956
Volumen: 16
Número: 5
Materias:
ODS:
Palabras Clave Informales: Malware, Ransomware, Optimzation, Simulated annealing, SMOTE, Feature selection
Escuela: E.T.S.I. de Sistemas Informáticos (UPM)
Departamento: Sistemas Informáticos
Licencias Creative Commons: Ninguna

Texto completo

[thumbnail of 10221333.pdf] PDF (Portable Document Format) - Se necesita un visor de ficheros PDF, como GSview, Xpdf o Adobe Acrobat Reader
Descargar (943kB)

Resumen

Ransomware is a significant security threat that poses a serious risk to the security of smartphones, and its impact on portable devices has been extensively discussed in a number of research papers. In recent times, this threat has witnessed a significant increase, causing substantial losses for both individuals and organizations. The emergence and widespread occurrence of diverse forms of ransomware present a significant impediment to the pursuit of reliable security measures that can effectively combat them. This constitutes a formidable challenge due to the dynamic nature of ransomware, which renders traditional security protocols inadequate, as they might have a high false alarm rate and exert significant processing demands on mobile devices that are restricted by limited battery life, CPU, and memory. This paper proposes a novel intelligent method for detecting ransomware that is based on a hybrid multi-solution binary JAYA algorithm with a single-solution simulated annealing (SA). The primary objective is to leverage the exploitation power of SA in supporting the exploration power of the binary JAYA algorithm. This approach results in a better balance between global and local search milestones. The empirical results of our research demonstrate the superiority of the proposed SMO-BJAYA-SA-SVM method over other algorithms based on the evaluation measures used. The proposed method achieved an accuracy rate of 98.7%, a precision of 98.6%, a recall of 98.7%, and an F1 score of 98.6%. Therefore, we believe that our approach is an effective method for detecting ransomware on portable devices. It has the potential to provide a more reliable and efficient solution to this growing security threat.

Más información

ID de Registro: 89080
Identificador DC: https://oa.upm.es/89080/
Identificador OAI: oai:oa.upm.es:89080
URL Portal Científico: https://portalcientifico.upm.es/es/ipublic/item/10221333
Identificador DOI: 10.1007/s12559-024-10301-4
URL Oficial: https://link.springer.com/article/10.1007/s12559-0...
Depositado por: iMarina Portal Científico
Depositado el: 22 May 2025 14:13
Ultima Modificación: 30 Jun 2025 00:45