MARC details
| 000 -LEADER |
| fixed length control field |
04018ntm a2200337 i 4500 |
| 003 - CONTROL NUMBER IDENTIFIER |
| control field |
MY-KuUP |
| 005 - DATE AND TIME OF LATEST TRANSACTION |
| control field |
20260407155818.0 |
| 006 - FIXED-LENGTH DATA ELEMENTS--ADDITIONAL MATERIAL CHARACTERISTICS |
| fixed length control field |
t||||fr|||| 000 0 |
| 007 - PHYSICAL DESCRIPTION FIXED FIELD--GENERAL INFORMATION |
| fixed length control field |
ta |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION |
| fixed length control field |
260407t20252025my a|||fr|||| 000 0 eng d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER |
| International Standard Book Number |
THE0010447 (Local) |
| Qualifying information |
Hardback |
| 040 ## - CATALOGING SOURCE |
| Original cataloging agency |
UMPSA |
| Language of cataloging |
eng |
| Transcribing agency |
UMPSA |
| Description conventions |
rda |
| 090 ## - LOCALLY ASSIGNED LC-TYPE CALL NUMBER (OCLC); LOCAL CALL NUMBER (RLIN) |
| Classification number (OCLC) (R) ; Classification number, CALL (RLIN) (NR) |
FKOM .R34 2025 r Thesis |
| 100 1# - MAIN ENTRY--PERSONAL NAME |
| Personal name |
Rahiwan Nazar Romli, |
| Relator term |
author. |
| 245 10 - TITLE STATEMENT |
| Title |
An enhanced android malware detection framework with ranked features selection on static analysis / |
| Statement of responsibility, etc. |
Rahiwan Nazar Romli |
| 264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE |
| Place of production, publication, distribution, manufacture |
Kuantan, Pahang : |
| Name of producer, publisher, distributor, manufacturer |
UMPSA, |
| Date of production, publication, distribution, manufacture, or copyright notice |
2025 |
| 264 #4 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE |
| Date of production, publication, distribution, manufacture, or copyright notice |
© 2025 |
| 300 ## - PHYSICAL DESCRIPTION |
| Extent |
xii, 131 pages : |
| Other physical details |
illustration (some colour) ; |
| Dimensions |
30 cm. + |
| Accompanying material |
1 CD-ROM. |
| 336 ## - CONTENT TYPE |
| Source |
rdacontent |
| Content type term |
text |
| 337 ## - MEDIA TYPE |
| Source |
rdamedia |
| Media type term |
unmediated |
| 338 ## - CARRIER TYPE |
| Source |
rdacarrier |
| Carrier type term |
volume |
| 347 ## - DIGITAL FILE CHARACTERISTICS |
| Source |
rda |
| File type |
text file |
| Encoding format |
PDF |
| 500 ## - GENERAL NOTE |
| General note |
Faculty of Computing |
| 502 ## - DISSERTATION NOTE |
| Dissertation note |
Thesis (Doctor of Philosophy) -- Universiti Malaysia Pahang Al Sultan Abdullah - 2025 |
| 504 ## - BIBLIOGRAPHY, ETC. NOTE |
| Bibliography, etc. note |
Include bibliographical reference |
| 520 3# - SUMMARY, ETC. |
| Summary, etc. |
Android emerges as the dominant mobile operating system globally. Driven by its high demand and open-source nature, it becomes a prime target for malware. Feature selection in Android malware analysis is a crucial process involving thousands of attributes. Selecting relevant attributes become increasingly challenging due to the need to thoroughly examine the application. Static analysis is one of the approaches considered as simpler and faster because it extracts malware features without executing the application. However, a major problem in static analysis is the selection of irrelevant attributes, which lead to misleading results for learning algorithms, overfitting, reduced generalizability and increased runtime. The study aims to improve the Android malware detection framework by strengthening its static analysis capabilities for optimal feature selection, refining the extracted malware features through an enhanced frequency-based optimization process, and finally validating the performance of the improved framework using real-world Android malware to ensure high detection accuracy and robustness. This study proposes an enhancement to the Android malware detection framework in the feature selection. It started with the automation in both feature extraction and binary feature vector generation. Additionally, the core Android malware detection framework is integrated with Feature Frequency Analysis to rank and filter the significant feature attributes. The enhanced framework is evaluated using 3011 benign applications from various categories in the official Google Play Store and 4995 malware applications from the AndroZoo dataset. Six machine learning algorithms, which are Random Forest, K-Nearest Neighbor (KNN), J48, Naïve Bayes, AdaBoostM1 and Voted Perceptron were tested on the enhanced framework with four different dataset-splitting techniques. Results indicated that the malware detection accuracy is improved with an optimised number of features as compared to the previous studies with 29 features and 95.3% precision. The finding is validated using regression analysis for each algorithm with 50 iterations. Random Forest Algorithm with cross-validation exhibited the highest performance relative to the benchmark studies and other classification methods with 95% accuracy. Consequently, the process of automated feature extraction effectively targets the features without limitations on the file size or quantity. It enhances the computational time with average 0.35s and reliable in identifying the significant features. For the future works, the combination or mapping of these two features, API Call and Permission could potentially lead to improved accuracy and reliability to better results and both could be used to achieve higher accuracy and acquire more reliable comparisons. |
| 610 20 - SUBJECT ADDED ENTRY--CORPORATE NAME |
| Corporate name or jurisdiction name as entry element |
Faculty of Computing |
| General subdivision |
Dissertations |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM |
| Topical term or geographic name entry element |
Universities and colleges |
| General subdivision |
Dissertations |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM |
| Topical term or geographic name entry element |
Theses |
| General subdivision |
Dissertations |
| 942 ## - ADDED ENTRY ELEMENTS (KOHA) |
| Source of classification or shelving scheme |
Library of Congress Classification |
| Koha item type |
Thesis |