{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T11:20:28Z","timestamp":1777893628997,"version":"3.51.4"},"reference-count":31,"publisher":"SAGE Publications","issue":"6","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IFS"],"published-print":{"date-parts":[[2023,6,1]]},"abstract":"<jats:p>Malicious software, or malware, has posed serious and evolving security threats to Internet users. Many anti-malware software packages and tools have been developed to protect legitimate users from these threats. However, legacy anti-malware methods are confronted with millions of potential malicious programs. To combat these threats, intelligent anti-malware systems utilizing machine learning (ML) models are useful. However, most ML models have limitations in performance since the training depth is usually limited. The emergence of Deep Learning (DL) models allow more training possibilities and improvement in performance. DL models often use gradient descent optimization, i.e., the Back-Propagation (BP) algorithm; therefore, their training and optimization procedures suffer from local sub-optimal solutions. In addition, DL-based malware detection methods often entail single classifiers. Ensemble learning overcomes the shortcomings of individual techniques by consolidating their strengths to improve the performance. In this paper, we propose an ensemble DL classifier stacked with the Fuzzy ARTMAP (FAM) model for malware detection. The stacked ensemble method uses several heterogeneous deep neural networks as the base learners. During the training and optimization process, these base learners adopt a hybrid BP and Particle Swarm Optimization algorithm to combine both local and global optimization capabilities for identifying optimal features and improving the classification performance. FAM is selected as a meta-learner to effectively train and combine the outputs of the base learners and achieve robust and accurate classification. A series of empirical studies with different benchmark data sets is conducted. The results ascertain that the proposed ensemble method is effective and efficient, outperforming many other compared methods.<\/jats:p>","DOI":"10.3233\/jifs-230009","type":"journal-article","created":{"date-parts":[[2023,4,11]],"date-time":"2023-04-11T11:50:52Z","timestamp":1681213852000},"page":"10477-10493","source":"Crossref","is-referenced-by-count":6,"title":["An ensemble deep learning classifier stacked with fuzzy ARTMAP for malware detection"],"prefix":"10.1177","volume":"44","author":[{"given":"Mohammed Nasser","family":"Al-Andoli","sequence":"first","affiliation":[{"name":"Faculty of Engineering and Technology, Multimedia University, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shing Chiang","family":"Tan","sequence":"additional","affiliation":[{"name":"Faculty of Information Science and Technology, Multimedia University, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kok Swee","family":"Sim","sequence":"additional","affiliation":[{"name":"Faculty of Engineering and Technology, Multimedia University, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pey Yun","family":"Goh","sequence":"additional","affiliation":[{"name":"Faculty of Information Science and Technology, Multimedia University, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chee Peng","family":"Lim","sequence":"additional","affiliation":[{"name":"Institute for Intelligent Systems Research and Innovation, Deakin University, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","reference":[{"key":"10.3233\/JIFS-230009_ref1","doi-asserted-by":"crossref","first-page":"6249","DOI":"10.1109\/ACCESS.2019.2963724","article-title":"A comprehensive review on malware detection approaches","volume":"8","author":"Aslan","year":"2020","journal-title":"IEEE Access"},{"key":"10.3233\/JIFS-230009_ref2","doi-asserted-by":"crossref","first-page":"3886","DOI":"10.1109\/TIFS.2020.3003571","article-title":"Adversarial deep ensemble: Evasion attacks and defenses for malware detection","volume":"15","author":"Li","year":"2020","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.3233\/JIFS-230009_ref4","doi-asserted-by":"crossref","first-page":"101792","DOI":"10.1016\/j.cose.2020.101792","article-title":"AMalNet: A deep learning framework based on graph convolutional networks for malware detection","volume":"93","author":"Pei","year":"2020","journal-title":"Computers & Security"},{"issue":"10","key":"10.3233\/JIFS-230009_ref5","doi-asserted-by":"crossref","first-page":"1825","DOI":"10.1109\/JPROC.2020.2993293","article-title":"Software vulnerability detection using deep neural networks: asurvey","volume":"108","author":"Lin","year":"2020","journal-title":"Proceedings of the IEEE"},{"issue":"7553","key":"10.3233\/JIFS-230009_ref7","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"LeCun","year":"2015","journal-title":"Nature"},{"issue":"6","key":"10.3233\/JIFS-230009_ref8","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3417978","article-title":"A survey of android malware detection with deep neural models","volume":"53","author":"Qiu","year":"2020","journal-title":"ACM Computing Surveys (CSUR)"},{"key":"10.3233\/JIFS-230009_ref9","doi-asserted-by":"crossref","first-page":"420","DOI":"10.1016\/j.ins.2020.08.082","article-title":"AI-HydRa: Advanced hybrid approach using random forest and deep learning for malware classification","volume":"546","author":"Yoo","year":"2021","journal-title":"Information Sciences"},{"key":"10.3233\/JIFS-230009_ref10","doi-asserted-by":"crossref","first-page":"96501","DOI":"10.1109\/ACCESS.2021.3095335","article-title":"A Review on Community Detection in Large Complex Networks from Conventional to Deep Learning Methods: A Call for the Use of Parallel Meta-Heuristic Algorithms","volume":"9","author":"Al-Andoli","year":"2021","journal-title":"IEEE Access"},{"issue":"4","key":"10.3233\/JIFS-230009_ref12","doi-asserted-by":"crossref","first-page":"485","DOI":"10.3390\/electronics10040485","article-title":"Ensemble-based classification using neural networksand machine learning models for windows pe malware detection","volume":"10","author":"Damasevi\u010dius","year":"2021","journal-title":"Electronics"},{"key":"10.3233\/JIFS-230009_ref13","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1016\/j.cose.2017.03.011","article-title":"PIndroid: A novel Android malware detection system using ensemblelearning methods","volume":"68","author":"Idrees","year":"2017","journal-title":"Computers & Security"},{"issue":"1","key":"10.3233\/JIFS-230009_ref14","doi-asserted-by":"crossref","first-page":"188","DOI":"10.1016\/j.jrmge.2020.05.011","article-title":"Improved prediction of slope stability using a hybrid stacking ensemble method based on finite element analysis and field data","volume":"13","author":"Kardani","year":"2021","journal-title":"Journal of Rock Mechanics and Geotechnical Engineering"},{"issue":"2","key":"10.3233\/JIFS-230009_ref15","doi-asserted-by":"crossref","first-page":"241","DOI":"10.1016\/S0893-6080(05)80023-1","article-title":"Stacked generalization","volume":"5","author":"Wolpert","year":"1992","journal-title":"Neural networks"},{"key":"10.3233\/JIFS-230009_ref16","doi-asserted-by":"crossref","first-page":"120870","DOI":"10.1016\/j.envpol.2022.120870","article-title":"Prediction of long-term water quality using machine learning enhanced by Bayesian optimisation","volume":"318","author":"Yan","year":"2023","journal-title":"Environmental Pollution"},{"issue":"7","key":"10.3233\/JIFS-230009_ref17","doi-asserted-by":"crossref","first-page":"155","DOI":"10.3390\/fi11070155","article-title":"Stacking-based ensemble learning of self-media data for marketing intention detection","volume":"11","author":"Wang","year":"2019","journal-title":"Future Internet"},{"key":"10.3233\/JIFS-230009_ref18","first-page":"2013","article-title":"Fuzzy ARTMAP ensemble based decision making and application","volume":"2013","author":"Jin","journal-title":"Mathematical Problems in Engineering"},{"issue":"5","key":"10.3233\/JIFS-230009_ref19","doi-asserted-by":"crossref","first-page":"698","DOI":"10.1109\/72.159059","article-title":"Fuzzy ARTMAP: A neural network architecture for incremental supervised learning of analog multidimensional maps","volume":"3","author":"Carpenter","year":"1992","journal-title":"IEEE Transactions on neural networks"},{"key":"10.3233\/JIFS-230009_ref20","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1016\/j.neucom.2015.12.015","article-title":"A selective fuzzy ARTMAP ensemble and its application to the fault diagnosis of rolling element bearing","volume":"182","author":"Xu","year":"2016","journal-title":"Neurocomputing"},{"issue":"4","key":"10.3233\/JIFS-230009_ref21","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1016\/S1874-1029(13)60037-3","article-title":"Analysis of standard particle swarm optimization algorithm based on Markov chain","volume":"39","author":"Feng","year":"2013","journal-title":"Acta Automatica Sinica"},{"issue":"5","key":"10.3233\/JIFS-230009_ref22","doi-asserted-by":"crossref","first-page":"1635","DOI":"10.1007\/s00521-016-2728-3","article-title":"Rock strength estimation: a PSO-based BP approach","volume":"30","author":"Mohamad","year":"2018","journal-title":"Neural Computing and Applications"},{"key":"10.3233\/JIFS-230009_ref23","doi-asserted-by":"publisher","first-page":"2784","DOI":"10.1109\/ICNN.1995.488172","article-title":"Self-adaptive learning rates in backpropagation algorithm improve its function approximation performance","volume":"5","author":"Bhattacharya","year":"1995","journal-title":"in Proceedings of ICNN\u201995 - International Conference on Neural Networks"},{"issue":"2","key":"10.3233\/JIFS-230009_ref28","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1007\/s10009-013-0290-1","article-title":"Pushdown model checking for malware detection","volume":"16","author":"Song","year":"2014","journal-title":"International Journal on Software Tools for Technology Transfer"},{"key":"10.3233\/JIFS-230009_ref35","doi-asserted-by":"crossref","first-page":"314","DOI":"10.1016\/j.future.2021.06.032","article-title":"Visualization and deep-learning-based malware variant detection using OpCode-level features","volume":"125","author":"Darem","year":"2021","journal-title":"Future Generation Computer Systems"},{"issue":"2","key":"10.3233\/JIFS-230009_ref37","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3503463","article-title":"A deep dive inside drebin: An explorative analysis beyond android malware detection scores","volume":"25","author":"Daoudi","year":"2022","journal-title":"ACM Transactions on Privacy and Security"},{"key":"10.3233\/JIFS-230009_ref38","doi-asserted-by":"crossref","first-page":"194729","DOI":"10.1109\/ACCESS.2020.3033026","article-title":"Famd: A fast multifeature android malware detection framework, design, and implementation","volume":"8","author":"Bai","year":"2020","journal-title":"IEEE Access"},{"issue":"7","key":"10.3233\/JIFS-230009_ref40","doi-asserted-by":"crossref","first-page":"1128","DOI":"10.3390\/sym12071128","article-title":"Two anatomists are better than one\u2014dual-level android malware detection","volume":"12","author":"Kouliaridis","year":"2020","journal-title":"Symmetry"},{"issue":"4","key":"10.3233\/JIFS-230009_ref41","doi-asserted-by":"crossref","first-page":"1077","DOI":"10.1080\/09540091.2020.1853056","article-title":"An extrinsic random-based ensemble approach for android malware detection","volume":"33","author":"Potha","year":"2021","journal-title":"Connection Science"},{"key":"10.3233\/JIFS-230009_ref42","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1016\/j.procs.2021.07.023","article-title":"An efficient android malware prediction using Ensemble machine learning algorithms","volume":"191","author":"Al Sarah","year":"2021","journal-title":"Procedia Computer Science"},{"issue":"19","key":"10.3233\/JIFS-230009_ref43","doi-asserted-by":"crossref","first-page":"9403","DOI":"10.3390\/app12199403","article-title":"A Multifaceted Deep Generative Adversarial Networks Model for Mobile Malware Detection","volume":"12","author":"Mazaed Alotaibi","year":"2022","journal-title":"Applied Sciences"},{"issue":"02","key":"10.3233\/JIFS-230009_ref44","doi-asserted-by":"crossref","first-page":"145","DOI":"10.1142\/S2196888820500086","article-title":"Evaluation of advanced ensemble learning techniques for Android malware detection","volume":"7","author":"Rana","year":"2020","journal-title":"Vietnam Journal of Computer Science"},{"key":"10.3233\/JIFS-230009_ref45","unstructured":"Zill D.G. , Advanced engineering mathematics. Jones & Bartlett Publishers, 2020."},{"key":"10.3233\/JIFS-230009_ref46","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1016\/j.entcs.2013.02.010","article-title":"A comparison of multi-label feature selection methods using the problem transformation approach","volume":"292","author":"Spola\u00f4R","year":"2013","journal-title":"Electronic Notes in TheoreticalComputer Science"}],"container-title":["Journal of Intelligent &amp; Fuzzy Systems"],"original-title":[],"link":[{"URL":"https:\/\/content.iospress.com\/download?id=10.3233\/JIFS-230009","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T09:45:30Z","timestamp":1777455930000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/full\/10.3233\/JIFS-230009"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,1]]},"references-count":31,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.3233\/jifs-230009","relation":{},"ISSN":["1064-1246","1875-8967"],"issn-type":[{"value":"1064-1246","type":"print"},{"value":"1875-8967","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,1]]}}}