Stacked Ensemble Method of Multi Class Malware Detection Using PE Header and Section Attributes
subject: classification; cybersecurity; Ensemble learning; machine learning; Malware detection; PE fields
description: Malware has now become sophisticated. The type of attacks has changed, too. To identify and remove them is now a great challenge. This paper presents a machine learning model for malware detection in windows. The Malware is detected based on the static collection of features, which includes the Portable Executable (PE) Header and Section data. Several classifiers were trained on a balanced dataset, including Logistic Regression, K-Nearest Neighbour, Support Vector Machine, Multi-Layer Perceptron, XGBoost, and Stacked Ensemble. The proposed stacking method utilises SVM, MLP, and XGBoost, with XGBoost serving as the meta-learner. The model delivered the best performance when compared with all the baseline models for an accuracy of 96.25% and an AUC of 0.9978. 2025 IEEE.
creator: Kumar, Deepanshu; Poonia, Ramesh Chandra; Shanbhog, Manjula
source: Proceedings of International Conference on Digital Innovations for Sustainable Solutions, ICDISS 2025;
publisher: Institute of Electrical and Electronics Engineers Inc.
date: 01-01-2025
rights: Restricted Access; Hardcopy may be available in the library
relation: ISBN: 979-833155641-9;
language: English
type: Conference paper
coverage: Kumar D., CHRIST University, Bengaluru, India; Poonia R.C., CHRIST University, Bengaluru, India; Shanbhog M., CHRIST University, Bengaluru, India