[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-290524-105":3,"doc-detail-290524-en":81,"detail-sidebar-cat-0-en-105":98},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","investigation-of-machine-learning-algorithms-for-malware-detection-in-pe-and-pdf-files-configuration-manual","Investigation of Machine Learning Algorithms for Malware Detection in PE and PDF Files - Configuration Manual","","Configuration manual for a MSc cybersecurity research project on building machine learning models for malware detection across PE and PDF file types. It defines the required software and hardware environment, including Windows 10 (64-bit), HP hardware, WEKA 3.8.6, Excel, and Oracle VM. It documents dataset selection (Evasive PDFMal2022 and WinMal), preprocessing steps such as removing NaN rows, filtering corrupted records, and excluding API_Functions due to size constraints, then describes classifier setup using WEKA with 10-fold cross validation and supervised models.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/investigation-of-machine-learning-algorithms-for-malware-detection-in-pe-and-pdf-files-configuration-manual/290524/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/investigation-of-machine-learning-algorithms-for-malware-detection-in-pe-and-pdf-files-configuration-manual/290524.png","ImageObject",300,407,{"name":42,"@type":43},"Noah","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-09","2026-09-17",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",10,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What models and validation method are used for the malware detection project?","Question",{"text":63,"@type":64},"The project uses supervised machine learning algorithms including PART Rule, an Ordinal Class Classifier, and Bayes Net, with 10-fold cross validation for the malware analysis.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Which datasets are analyzed for PE and PDF malware detection?",{"text":68,"@type":64},"Four malware datasets are analyzed, including the evasive PDFMal2022 dataset and the Windows PE malware (WinMal) samples split into Imported DLLs, API Functions, PE Header, and PE Section.",{"name":70,"@type":61,"acceptedAnswer":71},"What preprocessing steps are applied before running classifiers in WEKA?",{"text":72,"@type":64},"For PDFMal2022, rows with NaN and inaccurate or corrupted data are removed. For WinMal, the API_Functions feature set is excluded due to dataset size, and the SHA column is removed in WEKA to improve classification accuracy.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},290524,1789641931,{"code":4,"msg":82,"data":83},"success",{"doc_id":79,"user_id":84,"nickname":42,"user_avatar":85,"doc_module":4,"category_id":86,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":87,"file_id":88,"file_url":89,"file_type":90,"file_size":91,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":92,"language":93,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":94,"faqs":95,"seo_title":96,"seo_description":12,"update_tm":80,"read_time":97,"preview_page_count":4},8796095462418,"https://ap-avatar.wpscdn.com/avatar/80000253c1241d02b47?x-image-process=image/resize,m_fixed,w_180,h_180&k=1778826106357471780",8,"Configuration Manual  \nInvestigation of Machine Learning Algorithms for Malware Detection in PE and PDF Files  \nMasters in Cybersecurity  \nRosemary Usoroh  \nStudent ID: x21114374  \nSchool of Computing  \nNational College of Ireland  \nSupervisor: Arghir-Nicolae Moldovan  \nNational College of Ireland  \nMSc Project Submission Sheet  \nSchool of Computing  \nStudent Name: ROSEMARY USOROH  \nStudent ID: x21114374  \nProgramme: MASTER OF SCIENCE IN CYBERSECURITY Year: 2024  \nModule: Msc Research Project  \nLecturer: Arghir-Nicolae Moldovan  \nSubmission Due  \nDate: 31-01-2024  \nInvestigation of Machine Learning Algorithms for Malware  \nProject Title: Detection in PE and PDF Files  \nWord Count: 926 Page Count: 10  \nI hereby certify that the information contained in this (my submission) is information pertaining to research I conducted for this project. All information other than my own contribution will be fully referenced and listed in the relevant bibliography section at the rear of the project.  \nALL internet material must be referenced in the bibliography section. Students are required to use the Referencing Standard specified in the report template. To use other author's written or electronic work is illegal (plagiarism) and may result in disciplinary action.  \nSignature: ROSEMARY USOROH  \nDate: 31-01-2024  \nPLEASE READ THE FOLLOWING INSTRUCTIONS AND CHECKLIST  \n\n| Attach a completed copy of this sheet to each project (including multiple copies) | □ |\n| --- | --- |\n| Attach a Moodle submission receipt of the online project submission, to each project (including multiple copies) . | □ |\n| You must ensure that you retain a HARD COPY of the project, both for your own reference and in case a project is lost or mislaid. It is not sufficient to keep a copy on computer. | □ |\n\nAssignments that are submitted to the Programme Coordinator Office must be placed into the assignment box located outside the office.  \n\n| Office Use Only |  |\n| --- | --- |\n| Signature: |  |\n| Date: |  |\n| Penalty Applied (if applicable): |  |\n\nConfiguration Manual  \nRosemary Usoroh  \nStudent ID: x21114374  \n1 Introduction  \nThis configuration manual presents the requirements for creation of machine learning models in the detection of malware. The manual will give explanation of the software and hardware components that are needed for the completion of this project.  \n2 System Configuration  \n2.1 Hardware Requirement  \nThe table below presents the hardware configuration used for the implementation of this project;  \n\n| Hardware | Configuration |\n| --- | --- |\n| System | HP |\n| Operating System | Windows 10(64 Bits) Pro |\n| RAM | 12GB |\n| Hard Disk | 1TB |\n| Processor | Intel Core i5-10210U |\n\nTable 1 : Hardware requirement  \nFigure 1: Operating System Configuration  \n2.2 Software Requirement  \n\n| Software | Version |\n| --- | --- |\n| WEKA | 3.8.6 |\n| Excel | 2310 |\n| Oracle VM Machine | 7.0.12 |\n\nTable 2: Software requirements  \nFigure 2: WEKA, Virtual Machine and Excel software  \n3 Project Implementation  \nThe datasets used for this project are in the artefacts. This section will provide a summarized implementation of the research and pictorial presentation of the implementation.  \nFigure 3: The figure above shows one of the dataset in the excel sheet.  \nIn this research, four malware datasets were analyzed for this research. The first datasets was evasive PDF dataset (Evasive-PDFMal2022), it was downloaded from (Issakhani et al., 2022) . The original file that was downloaded was in a CSV format. The second malware dataset which is Windows PE Malware (WinMal) samples was downloaded from (Yousuf et al., 2023) . The samples were divided into four different parts which includes Imported DLLs, API Functions, PE Header and PE Section. The original files of these samples were all downloaded in CSV format.  \n3.1 Data Preprocessing  \nThe Evasive PDFMal2022 and WinMal datasets came in a structured format, therefore needs little preprocessing. In the Evasive PDFMal2022, the row ","cbCaidEzrpcVjUmZ","https://ap.wps.com/l/cbCaidEzrpcVjUmZ","pdf",1035078,11,"English","# 1 Introduction\n# 2 System Configuration\n## 2.1 Hardware Requirement\n## 2.2 Software Requirement\n# 3 Project Implementation\n## 3.1 Data Preprocessing\n## 3.2 Data Mining\n# 4.0 Conclusion","[{\"question\":\"What models and validation method are used for the malware detection project?\",\"answer\":\"The project uses supervised machine learning algorithms including PART Rule, an Ordinal Class Classifier, and Bayes Net, with 10-fold cross validation for the malware analysis.\"},{\"question\":\"Which datasets are analyzed for PE and PDF malware detection?\",\"answer\":\"Four malware datasets are analyzed, including the evasive PDFMal2022 dataset and the Windows PE malware (WinMal) samples split into Imported DLLs, API Functions, PE Header, and PE Section.\"},{\"question\":\"What preprocessing steps are applied before running classifiers in WEKA?\",\"answer\":\"For PDFMal2022, rows with NaN and inaccurate or corrupted data are removed. For WinMal, the API_Functions feature set is excluded due to dataset size, and the SHA column is removed in WEKA to improve classification accuracy.\"}]","Investigation of Machine Learning Algorithms for Malware Detection in PE and PDF Files - Configuration Manual | PDF",28,{"code":4,"msg":82,"data":99},[100,104,108,112,117,122,127,130,135,138,141],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":105,"show_sort_weight":106,"slug":107},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":109,"show_sort_weight":110,"slug":111},"Exam",70,"exam",{"id":113,"doc_module":4,"doc_module_name":25,"category_name":114,"show_sort_weight":115,"slug":116},5,"Comic",60,"comic",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":119,"show_sort_weight":120,"slug":121},6,"Technology",50,"technology",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":125,"slug":126},7,"Healthcare",40,"healthcare",{"id":86,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":128,"slug":129},30,"research-report",{"id":131,"doc_module":4,"doc_module_name":25,"category_name":132,"show_sort_weight":133,"slug":134},9,"Religion & Spirituality",20,"religion-spirituality",{"id":133,"doc_module":4,"doc_module_name":25,"category_name":136,"show_sort_weight":133,"slug":137},"World Cup","world-cup",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":139,"show_sort_weight":55,"slug":140},"Lifestyle","lifestyle",{"id":142,"doc_module":4,"doc_module_name":25,"category_name":143,"show_sort_weight":113,"slug":144},19,"General","general"]