TY - JOUR
T1 - MalRed
T2 - An innovative approach for detecting malware using the red channel analysis of color images
AU - Shakir Hameed Shah, Syed
AU - Jamil, Norziana
AU - ur Rehman Khan, Atta
AU - Mohd Sidek, Lariyah
AU - Alturki, Nazik
AU - Muhammad Zain, Zuhaira
N1 - Publisher Copyright:
© 2024
PY - 2024/6
Y1 - 2024/6
N2 - Technological advancements have significantly progressed and innovated across various industries. However, these advancements have also led to an increase in cyberattacks using malware. Researchers have developed diverse techniques to detect and classify malware, including a visualization-based approach that converts suspicious files into color or grayscale images, eliminating the need for domain-specific expertise. Nonetheless, converting files to color and grayscale images may result in the loss of texture details due to noise, adversely affecting the performance of machine learning models. The aim of this study is to present to assess the texture features and noise contributions of the red, green, and blue channels in color images. We propose a novel method to enhance model performance in terms of accuracy, precision, recall, f1-score, memory utilization, and computing cost during testing and training. This study introduces an approach involves separating color channels into individual red, green, and blue datasets and using various Discrete Wavelet Transform levels to reduce dimensions and remove noise. The extracted texture characteristics are then used as input for machine learning classifiers for training and prediction. Through comprehensive evaluation, we compare the performance of grayscale images with that of the red, green, and blue datasets. The results show that grayscale images significantly lose critical textural artifacts and perform worse than the color channels. Notably, employing extra tree classifiers yielded the best results, achieving an accuracy of 98.37%, precision of 98.64%, recall of 97.60%, and an f1-score of 98.04% with the red channel of color dataset.
AB - Technological advancements have significantly progressed and innovated across various industries. However, these advancements have also led to an increase in cyberattacks using malware. Researchers have developed diverse techniques to detect and classify malware, including a visualization-based approach that converts suspicious files into color or grayscale images, eliminating the need for domain-specific expertise. Nonetheless, converting files to color and grayscale images may result in the loss of texture details due to noise, adversely affecting the performance of machine learning models. The aim of this study is to present to assess the texture features and noise contributions of the red, green, and blue channels in color images. We propose a novel method to enhance model performance in terms of accuracy, precision, recall, f1-score, memory utilization, and computing cost during testing and training. This study introduces an approach involves separating color channels into individual red, green, and blue datasets and using various Discrete Wavelet Transform levels to reduce dimensions and remove noise. The extracted texture characteristics are then used as input for machine learning classifiers for training and prediction. Through comprehensive evaluation, we compare the performance of grayscale images with that of the red, green, and blue datasets. The results show that grayscale images significantly lose critical textural artifacts and perform worse than the color channels. Notably, employing extra tree classifiers yielded the best results, achieving an accuracy of 98.37%, precision of 98.64%, recall of 97.60%, and an f1-score of 98.04% with the red channel of color dataset.
KW - Computer vision
KW - Denoising
KW - Energy
KW - Machine learning
KW - Memory forensics
KW - Wavelet transform
UR - https://www.scopus.com/pages/publications/85192306529
UR - https://www.scopus.com/pages/publications/85192306529#tab=citedBy
U2 - 10.1016/j.eij.2024.100478
DO - 10.1016/j.eij.2024.100478
M3 - Article
AN - SCOPUS:85192306529
SN - 1110-8665
VL - 26
JO - Egyptian Informatics Journal
JF - Egyptian Informatics Journal
M1 - 100478
ER -