원문정보
초록
영어
Ransomware is one of the most significant cybersecurity threats facing the world. In this research we designed and constructed a custom cybersecurity AI dataset for ransomware detection. We then evaluated the dataset using different machine learning models. The dataset was constructed using Cuckoo Sandbox where raw ransomware samples were analyzed to extract key features such as API calls, DLL usage, file operations, network activity, process creation and registry changes. These were then carefully labeled as either ransomware or benign. For evaluation purposes, the custom cybersecurity AI dataset was utilized to train and test various machine learning models. The dataset was split into 80% for training and 20% for testing. Logistic Regression, Random Forest, K-Nearest Neighbors (KNN), and XGBoost models were used to evaluate the resulting custom Cybersecurity AI Dataset. We obtained higher results of accuracy, precision, recall, and F1 scores evaluation metrics. Moreover, our results demonstrate the robustness of a combination of well-designed custom Cybersecurity AI Datasets and machine learning techniques in enhancing ransomware detection mechanisms as well as providing a framework for future cybersecurity applications
목차
1. Introduction
2. Background and Motivation.
3. Proposed Method
3.1 Cuckoo Sandbox Environment Construction
3.2 Ransomware Raw Sample Collection
3.3 Data Processing
3.4 Data Labeling
3.5 Ransomware Cybersecurity AI Dataset
3.6 Ransomware Cybersecurity AI Dataset Evaluation through Machine Learning
4. Results and Analysis
5. Conclusion and Future Research
6. Acknowledgement
7. References