Abstract:In today's digitalized era, the usage of Android devices is being extensively witnessed in various sectors. Cybercriminals inevitably adapt to new security technologies and utilize these platforms to exploit vulnerabilities for nefarious purposes, such as stealing users' sensitive and personal data. This may result in financial losses, discredit, ransomware, or the spreading of infectious malware and other catastrophic cyber-attacks. Due to the fact that ransomware encrypts user data and requests a ransom payment in exchange for the decryption key, it is one of the most devastating types of malicious software. The implications of ransomware attacks can range from a loss of essential data to a disruption of business operations and significant monetary damage. Artificial intelligence (AI)-based techniques, namely machine learning (ML), have proven to be notable in the detection of Android ransomware attacks. However, ensemble models and deep learning (DL) models have not been sufficiently explored. Therefore, in this study, we utilized ML- and DL-based techniques to build efficient, precise, and robust models for binary classification. A publicly available dataset from Kaggle consisting of 392,035 records with benign traffic and 10 different types of Android ransomware attacks was used to train and test the models. Two experiments were carried out. In experiment 1, all the features of the dataset were used. In experiment 2, only the best 19 features were used. The deployed models included a decision tree (DT), support vector machine (SVM), k-nearest neighbor (KNN), ensemble of (DT, SVM, and KNN), feedforward neural network (FNN), and tabular attention network (TabNet). Overall, the experiments yielded excellent results. DT outperformed the others, with an accuracy of 97.24%, precision of 98.50%, and F1-score of 98.45%. Whereas, in terms of the highest recall, SVM achieved 100%. The acquired results were thoroughly discussed, in addition to addressing limitations and exploring potential directions for future work.

Machine Learning for Detecting the WestRock Ransomware Attack Using BGP Routing Records

Leveraging Machine Learning Techniques for Windows Ransomware Network Traffic Detection

Ransomware Detection Using Machine Learning in the Linux Kernel

Machine Learning for Detecting Anomalies and Intrusions in Communication Networks

Understanding And Utilizing The Hierarchy Of Abnormal Bgp Events

Ransomware threat mitigation through network traffic analysis and machine learning techniques

Border Gateway Protocol Route Leak Detection Technique Based on Graph Features and Machine Learning

Ransomware detection based on machine learning using memory features

Ransomware Detection and Classification Using Random Forest: A Case Study with the UGRansome2024 Dataset

Ransomware Classification and Detection With Machine Learning Algorithms

Blockchain security for ransomware detection

Mapping the Internet: Geolocating Routers by Using Machine Learning

Ransomware Detection: Leveraging Sandbox, Text Mining Techiques and Machine Learning

Dynamic Feature Dataset for Ransomware Detection Using Machine Learning Algorithms

Integrating Ebola optimization search algorithm for enhanced deep learning-based ransomware detection in Internet of Things security

Android Ransomware Detection Using Supervised Machine Learning Techniques Based on Traffic Analysis

A Survey of Machine Learning Algorithms for Detecting Ransomware Encryption Activity

Software-Defined Networking-based Crypto Ransomware Detection Using HTTP Traffic Characteristics

Crypto-ransomware detection using machine learning models in file-sharing network scenario with encrypted traffic

Ransomware Detection and Classification Strategies

Combatting ransomware in ZephyrOS-activated industrial IoT environments