Dimensionality Reduction for Enhancing Malware Classification Accuracy in Portable Executable Files
Portable executable (PE) files are a common vector used for the spread of malware. This paper reviews and evaluates machine learning-based PE malware detection techniques. A dataset was constructed using malicious samples from Virus Share and benign samples from github. Static analysis was used to extract highly ranked features, followed by dimensionality reduction using Linear Discriminant Analysis (LDA) and Principal Component Analysis (PCA). K-Nearest Neighbors and Random Forest classifiers performed well, achieving accuracy between <tex xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">$\approx 93 \%$</tex> and <tex xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">$\approx 94 \%$</tex> when combined with LDA. By integrating static analysis with dimensionality reduction, this study provides new insights into optimising machine learning performance for malware classification.
Authors
- Mathew Nicho (ORCID: https://orcid.org/0000-0001-7129-3988)
- Christopher D. McDermott (ORCID: https://orcid.org/0000-0001-8718-0988)
- Kushal K. Rahatkar
Institutions
- Technology Innovation Institute (AE)
- Robert Gordon's College (GB)
- Robert Gordon University (GB)
Publication Details
- Published
- 2025-04-26
- DOI
- https://doi.org/10.1109/csp66295.2025.00033
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00