{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T10:20:39Z","timestamp":1778408439011,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031346705","type":"print"},{"value":"9783031346712","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-34671-2_20","type":"book-chapter","created":{"date-parts":[[2023,6,20]],"date-time":"2023-06-20T23:02:58Z","timestamp":1687302178000},"page":"285-295","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Enhancing Ransomware Classification with\u00a0Multi-stage Feature Selection and\u00a0Data Imbalance Correction"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9580-4260","authenticated-orcid":false,"given":"Faithful Chiagoziem","family":"Onwuegbuche","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2705-1823","authenticated-orcid":false,"given":"Anca Delia","family":"Jurcut","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9673-3054","authenticated-orcid":false,"given":"Liliana","family":"Pasquale","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,6,21]]},"reference":[{"key":"20_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/978-3-030-43722-0_12","volume-title":"Applications of Evolutionary Computation","author":"MS Abbasi","year":"2020","unstructured":"Abbasi, M.S., Al-Sahaf, H., Welch, I.: Particle swarm optimization: a wrapper-based feature selection method for ransomware detection and classification. In: Castillo, P.A., Jim\u00e9nez Laredo, J.L., Fern\u00e1ndez de Vega, F. (eds.) EvoApplications 2020. LNCS, vol. 12104, pp. 181\u2013196. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-43722-0_12"},{"key":"20_CR2","doi-asserted-by":"publisher","first-page":"57674","DOI":"10.1109\/ACCESS.2021.3071450","volume":"9","author":"I Almomani","year":"2021","unstructured":"Almomani, I., et al.: Android ransomware detection based on a hybrid evolutionary approach in the context of highly imbalanced data. IEEE Access 9, 57674\u201357691 (2021)","journal-title":"IEEE Access"},{"key":"20_CR3","doi-asserted-by":"crossref","unstructured":"Almousa, M., Basavaraju, S., Anwar, M.: Api-based ransomware detection using machine learning-based threat detection models. In: 2021 18th International Conference on Privacy, Security and Trust (PST), pp. 1\u20137. IEEE (2021)","DOI":"10.1109\/PST52912.2021.9647816"},{"issue":"5","key":"20_CR4","doi-asserted-by":"publisher","first-page":"3405","DOI":"10.1007\/s10586-022-03569-4","volume":"25","author":"S Aurangzeb","year":"2022","unstructured":"Aurangzeb, S., Anwar, H., Naeem, M.A., Aleem, M.: BigRC-EML: big-data based ransomware classification using ensemble machine learning. Clust. Comput. 25(5), 3405\u20133422 (2022)","journal-title":"Clust. Comput."},{"key":"20_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1007\/978-3-031-08147-7_7","volume-title":"Foundations and Practice of Security","author":"R Avila","year":"2022","unstructured":"Avila, R., Khoury, R., Pere, C., Khanmohammadi, K.: Employing feature selection to improve the performance of intrusion detection systems. In: A\u00efmeur, E., Laurent, M., Yaich, R., Dupont, B., Garcia-Alfaro, J. (eds.) FPS 2021. LNCS, vol. 13291, pp. 93\u2013112. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-08147-7_7"},{"issue":"1","key":"20_CR6","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1145\/1007730.1007735","volume":"6","author":"GE Batista","year":"2004","unstructured":"Batista, G.E., Prati, R.C., Monard, M.C.: A study of the behavior of several methods for balancing machine learning training data. ACM SIGKDD Explor. Newslett. 6(1), 20\u201329 (2004)","journal-title":"ACM SIGKDD Explor. Newslett."},{"key":"20_CR7","doi-asserted-by":"publisher","first-page":"102490","DOI":"10.1016\/j.cose.2021.102490","volume":"111","author":"C Beaman","year":"2021","unstructured":"Beaman, C., Barkworth, A., Akande, T.D., Hakak, S., Khan, M.K.: Ransomware: recent advances, analysis, challenges and future research directions. Comput. Secur. 111, 102490 (2021)","journal-title":"Comput. Secur."},{"key":"20_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.inffus.2018.11.008","volume":"52","author":"V Bol\u00f3n-Canedo","year":"2019","unstructured":"Bol\u00f3n-Canedo, V., Alonso-Betanzos, A.: Ensembles for feature selection: a review and future trends. Inf. Fusion 52, 1\u201312 (2019)","journal-title":"Inf. Fusion"},{"key":"20_CR9","unstructured":"Brownlee, J.: Imbalanced classification with Python: Better Metrics, Balance Skewed Classes, Cost-sensitive Learning. Machine Learning Mastery (2020)"},{"key":"20_CR10","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1016\/j.neucom.2017.11.077","volume":"300","author":"J Cai","year":"2018","unstructured":"Cai, J., Luo, J., Wang, S., Yang, S.: Feature selection in machine learning: a new perspective. Neurocomputing 300, 70\u201379 (2018)","journal-title":"Neurocomputing"},{"key":"20_CR11","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, N.V., Bowyer, K.W., Hall, L.O., Kegelmeyer, W.P.: Smote: synthetic minority over-sampling technique. J. Artif. Intell. Res. 16, 321\u2013357 (2002)","journal-title":"J. Artif. Intell. Res."},{"key":"20_CR12","doi-asserted-by":"crossref","unstructured":"Chen, Q., Bridges, R.A.: Automated behavioral analysis of malware: a case study of wannacry ransomware. In: 2017 16th IEEE International Conference on Machine Learning and Applications (ICMLA), pp. 454\u2013460. IEEE (2017)","DOI":"10.1109\/ICMLA.2017.0-119"},{"key":"20_CR13","doi-asserted-by":"crossref","unstructured":"Collier, R.: NHS ransomware attack spreads worldwide (2017)","DOI":"10.1503\/cmaj.1095434"},{"key":"20_CR14","unstructured":"Cyber Security Policy: Securing cyber resilience in health and care: October 2018 progress update (2018). https:\/\/www.gov.uk\/government\/publications\/securing-cyber-resilience-in-health-and-care-october-2018-update"},{"key":"20_CR15","doi-asserted-by":"crossref","unstructured":"Goyal, M., Kumar, R.: Machine learning for malware detection on balanced and imbalanced datasets. In: 2020 International Conference on Decision Aid Sciences and Application (DASA), pp. 867\u2013871. IEEE (2020)","DOI":"10.1109\/DASA51403.2020.9317206"},{"key":"20_CR16","doi-asserted-by":"publisher","first-page":"119710","DOI":"10.1109\/ACCESS.2020.3003785","volume":"8","author":"F Khan","year":"2020","unstructured":"Khan, F., Ncube, C., Ramasamy, L.K., Kadry, S., Nam, Y.: A digital DNA sequencing engine for ransomware detection using machine learning. IEEE Access 8, 119710\u2013119719 (2020)","journal-title":"IEEE Access"},{"issue":"5","key":"20_CR17","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1109\/MITP.2017.3680961","volume":"19","author":"N Kshetri","year":"2017","unstructured":"Kshetri, N., Voas, J.: Do crypto-currencies fuel ransomware? IT Prof. 19(5), 11\u201315 (2017)","journal-title":"IT Prof."},{"issue":"6","key":"20_CR18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3136625","volume":"50","author":"J Li","year":"2017","unstructured":"Li, J., Cheng, K., Wang, S., Morstatter, F., Trevino, R.P., Tang, J., Liu, H.: Feature selection: a data perspective. ACM Comput. Surv. (CSUR) 50(6), 1\u201345 (2017)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"20_CR19","unstructured":"Ma, Y., He, H.: Imbalanced Learning: Foundations, Algorithms, and Applications (2013)"},{"issue":"9","key":"20_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3479393","volume":"54","author":"T McIntosh","year":"2021","unstructured":"McIntosh, T., Kayes, A., Chen, Y.P.P., Ng, A., Watters, P.: Ransomware mitigation in the modern era: a comprehensive review, research challenges, and future directions. ACM Comput. Surv. (CSUR) 54(9), 1\u201336 (2021)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"20_CR21","doi-asserted-by":"publisher","first-page":"101762","DOI":"10.1016\/j.cose.2020.101762","volume":"92","author":"PH Meland","year":"2020","unstructured":"Meland, P.H., Bayoumy, Y.F.F., Sindre, G.: The ransomware-as-a-service economy within the darknet. Comput. Secur. 92, 101762 (2020)","journal-title":"Comput. Secur."},{"issue":"1","key":"20_CR22","first-page":"61","volume":"37","author":"CC Moreira","year":"2022","unstructured":"Moreira, C.C., de Sales Jr, C.D.S., Moreira, D.C.: Understanding ransomware actions through behavioral feature analysis. J. Commun. Inf. Syst. 37(1), 61\u201376 (2022)","journal-title":"J. Commun. Inf. Syst."},{"key":"20_CR23","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1016\/j.ins.2019.01.065","volume":"484","author":"Y Pang","year":"2019","unstructured":"Pang, Y., Peng, L., Chen, Z., Yang, B., Zhang, H.: Imbalanced learning based on adaptive weighting and gaussian function synthesizing with an application on android malware detection. Inf. Sci. 484, 95\u2013112 (2019)","journal-title":"Inf. Sci."},{"issue":"4","key":"20_CR24","doi-asserted-by":"publisher","first-page":"639","DOI":"10.3233\/JCS-2010-0410","volume":"19","author":"K Rieck","year":"2011","unstructured":"Rieck, K., Trinius, P., Willems, C., Holz, T.: Automatic analysis of malware behavior using machine learning. J. Comput. Secur. 19(4), 639\u2013668 (2011)","journal-title":"J. Comput. Secur."},{"key":"20_CR25","unstructured":"Sgandurra, D., Mu\u00f1oz-Gonz\u00e1lez, L., Mohsen, R., Lupu, E.C.: Automated dynamic analysis of ransomware: Benefits, limitations and use for detection. arXiv preprint arXiv:1609.03020 (2016)"},{"issue":"3","key":"20_CR26","doi-asserted-by":"publisher","first-page":"379","DOI":"10.1002\/j.1538-7305.1948.tb01338.x","volume":"27","author":"CE Shannon","year":"1948","unstructured":"Shannon, C.E.: A mathematical theory of communication. Bell Syst. Tech. J 27(3), 379\u2013423 (1948)","journal-title":"Bell Syst. Tech. J"},{"key":"20_CR27","doi-asserted-by":"publisher","first-page":"429","DOI":"10.1016\/j.ins.2019.11.004","volume":"513","author":"F Thabtah","year":"2020","unstructured":"Thabtah, F., Hammoud, S., Kamalov, F., Gonsalves, A.: Data imbalance in classification: experimental evaluation. Inf. Sci. 513, 429\u2013441 (2020)","journal-title":"Inf. Sci."},{"key":"20_CR28","doi-asserted-by":"crossref","unstructured":"Thai-Nghe, N., Gantner, Z., Schmidt-Thieme, L.: Cost-sensitive learning methods for imbalanced data. In: The 2010 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2010)","DOI":"10.1109\/IJCNN.2010.5596486"},{"key":"20_CR29","doi-asserted-by":"publisher","DOI":"10.4324\/9780203851173","volume-title":"Statistics in Plain English","author":"TC Urdan","year":"2011","unstructured":"Urdan, T.C.: Statistics in Plain English. Routledge, Abingdon (2011)"},{"key":"20_CR30","doi-asserted-by":"crossref","unstructured":"Wu, D., Guo, P., Wang, P.: Malware detection based on cascading XGboost and cost sensitive. In: 2020 International Conference on Computer Communication and Network Security (CCNS), pp. 201\u2013205. IEEE (2020)","DOI":"10.1109\/CCNS50731.2020.00051"}],"container-title":["Lecture Notes in Computer Science","Cyber Security, Cryptology, and Machine Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-34671-2_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T12:22:38Z","timestamp":1710332558000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-34671-2_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031346705","9783031346712"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-34671-2_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"21 June 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CSCML","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Cyber Security, Cryptology, and Machine Learning","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Be'er Sheva","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Israel","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 June 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 June 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cscml2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.cscml.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Open","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"70","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"15","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}