MétaCan
Menu
Back to cohort
Record W4383535572 · doi:10.54254/2755-2721/5/20230618

Malware detection using different supervised learning methods

2023· article· en· W4383535572 on OpenAlex

Why this work is in the frame

A frame that forgets how it found something cannot be audited. These are the routes that admitted this work.

affAt least one author lists a Canadian institution in the pinned OpenAlex snapshot.

Bibliographic record

VenueApplied and Computational Engineering · 2023
Typearticle
Languageen
FieldComputer Science
TopicNetwork Security and Intrusion Detection
Canadian institutionsEarl Haig Secondary School
Fundersnot available
KeywordsMachine learningComputer scienceMalwareArtificial intelligenceDecision treeSupervised learningMultinomial logistic regressionNaive Bayes classifierBayes' theoremLogistic regressionBayesian probabilitySupport vector machineArtificial neural networkComputer security

Abstract

fetched live from OpenAlex

Malware that can threaten cyber security is now a problem that needs to be addressed. Malware detection has been significantly developed through the use of machine learning techniques. However, simple supervised learning is rarely used for malware detection. The goal of this paper is to compare the accuracy of different supervised learning models in malware detection. The experiment will load a dataset with malware and corresponding characteristics, train four models separately using a decision tree, logistic regression, and Naïve Bayes, and compare their train scores, test scores, and test time. The experimental result shows that the decision tree model has the best in malware detection, following the Logistic regression model and the Gaussian Naïve Bayes model which has similar scores. In contrast, the Multinomial Naïve Bayes model has lower scores. Moreover, the logistic regression model is significantly slower than other models. The results of the experiments reflect the different efficiency and accuracy of different supervised learning methods when used for malware detection. A possible reason for the differences between the methods is due to the complex dataset, and in conclusion, supervised learning could play a crucial role in cyber security.

Fetched live from OpenAlex and de-inverted. Abstracts are not stored in this database: the inverted indexes are 8.6 GB of the frame’s 9.3 GB of text, and the host has 13 GB free.

Full frame distilled prediction

Teacher imitation

Not calibrated prevalence, not ground truth. Human validation pending. Learned from the 10,348 direct Codex labels and 10,348 direct Gemma labels. Candidate is the union of thresholded teacher heads; consensus is their intersection. These outputs are machine_predicted_unvalidated and are not human labels or direct frontier model labels.

metaresearch head score (Codex)0.000
metaresearch head score (Gemma)0.000
Version: codex-gemma-dda1882f352aValidation status: machine_predicted_unvalidated
Candidate categoriesnone
Consensus categoriesnone
DomainCandidate signal: none · Consensus signal: none
Study designCandidate signal: Simulation or modeling · Consensus signal: Simulation or modeling
GenreCandidate signal: Empirical · Consensus signal: none
Teacher disagreement score0.613
Threshold uncertainty score0.439

Codex and Gemma teacher scores by category

CategoryCodexGemma
Metaresearch0.0000.000
Meta-epidemiology (narrow)0.0000.000
Meta-epidemiology (broad)0.0000.000
Bibliometrics0.0000.000
Science and technology studies0.0000.000
Scholarly communication0.0000.000
Open science0.0000.000
Research integrity0.0000.000
Insufficient payload (model declined to judge)0.0000.000

Machine scores (provisional)

The two teacher heads of the student model, read on this work. A score orders the frame for review; it never asserts a category, and the validation status ships verbatim with every row.

Baseline scores from an immature model (maturity gate not passed, 7 training rounds). Scores rank; they never assert a category.

Opus teacher head0.016
GPT teacher head0.250
Teacher spread0.234 · how far apart the two teachers sit on this one work
Validation statusscore_only:v0-immature-baseline · verbatim from the scoring run: score_only means the number may rank works, and no category label ships from it