{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,9,17]],"date-time":"2022-09-17T06:20:09Z","timestamp":1663395609465},"reference-count":0,"publisher":"IOS Press","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,9,14]]},"abstract":"<jats:p>Worm-like ransomware strains spread quickly to critical systems such as IoMT without human interaction. Therefore, detecting different worm-like ransomware attacks during their spread is vital. Nevertheless, the low detection rate due to the imbalanced ransomware data and the detection systems\u2019 disability for multiclass simultaneous detection are two apparent problems. In this work, we proposed a new approach for multi-classifying ransomware using preprocessing, resampling, and different classifiers. The proposed system uses network traffic NetFlow data, which is privacy-friendly and not heavy. In the first phase, preprocessing techniques were used on the collected and aggregated ransomware traffic, and then an optimized Synthetic Minority Oversampling Technique (SMOTE) was used for resampling the low-class samples. After that, four classifiers were applied, namely, Bayes Net, Hoeffding Tree, K-Nearest Neighbor, and a lightweight Multi-Layered Perceptron (MLP). The experimental results showed that the efficient preprocessing ensured accurate and simultaneous ransomware detection while the resampling technique improved the detection rate, F1, and PRC curve.<\/jats:p>","DOI":"10.3233\/faia220282","type":"book-chapter","created":{"date-parts":[[2022,9,16]],"date-time":"2022-09-16T09:08:23Z","timestamp":1663319303000},"source":"Crossref","is-referenced-by-count":0,"title":["Multi-Classification of Imbalance Worm Ransomware in the IoMT System"],"prefix":"10.3233","author":[{"given":"Shilan S.","family":"Hameed","sequence":"first","affiliation":[{"name":"Malaysia-Japan International Institute of Technology (MJIIT), University Teknologi Malaysia, Kuala Lumpur 54100, Malaysia"},{"name":"Directorate of Information Technology, Koya University, 44023 Koya., Iraq"}]},{"given":"Ali","family":"Selamat","sequence":"additional","affiliation":[{"name":"Malaysia-Japan International Institute of Technology (MJIIT), University Teknologi Malaysia, Kuala Lumpur 54100, Malaysia"},{"name":"School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Skudai 81310, Johor Bahru, Johor, Malaysia"},{"name":"Media and Games Center of Excellence (MagicX), Universiti Teknologi Malaysia, Skudai 81310, Johor Bahru, Malaysia"},{"name":"Center for Basic and Applied Research, Faculty of Informatics and Management, University of Hradec Kralove, Rokitanskeho 62, Hradec Kralove 50003, Czech Republic"}]},{"given":"Liza Abdul","family":"Latiff","sequence":"additional","affiliation":[{"name":"Razak Faculty of Technology and Informatics, Universiti Teknologi Malaysia, 54100 Kuala Lumpur, Malaysia"}]},{"given":"Shukor A.","family":"Razak","sequence":"additional","affiliation":[{"name":"School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Skudai 81310, Johor Bahru, Johor, Malaysia"}]},{"given":"Ondrej","family":"Krejcar","sequence":"additional","affiliation":[{"name":"Malaysia-Japan International Institute of Technology (MJIIT), University Teknologi Malaysia, Kuala Lumpur 54100, Malaysia"},{"name":"Center for Basic and Applied Research, Faculty of Informatics and Management, University of Hradec Kralove, Rokitanskeho 62, Hradec Kralove 50003, Czech Republic"}]}],"member":"7437","container-title":["Frontiers in Artificial Intelligence and Applications","New Trends in Intelligent Software Methodologies, Tools and Techniques"],"original-title":[],"link":[{"URL":"https:\/\/ebooks.iospress.nl\/pdf\/doi\/10.3233\/FAIA220282","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,16]],"date-time":"2022-09-16T09:08:24Z","timestamp":1663319304000},"score":1,"resource":{"primary":{"URL":"https:\/\/ebooks.iospress.nl\/doi\/10.3233\/FAIA220282"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,14]]},"references-count":0,"URL":"https:\/\/doi.org\/10.3233\/faia220282","relation":{},"ISSN":["0922-6389","1879-8314"],"issn-type":[{"value":"0922-6389","type":"print"},{"value":"1879-8314","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,9,14]]}}}