Nowadays, the wide spread of ransomware
poses a destructive damage to the end users, which need
to be tackled and treated properly to classify them and
keep them away. Since the attributes and features of
ransomware samples are extremely changeable, an
automated analysis using machine learning algorithms
is applied in order to handle the rapid changes of
ransomware attributes features. In this paper,
supervised machine learning classifiers (algorithms)
such as Naïve Bayes, SVM, kNN, C 4.5, and Random
Forest are evaluated for detecting ransomware. Several
recent ransomware samples are collected, and their
attributes and features are extracted and tabulated to
construct training and testing datasets. Then, the
datasets are evaluated and analyzed using Weka
software for each classifier in three different modes,
namely 10-fold cross-validation mode, 66.0% train split
mode, and supplied test set mode. The best result for
detecting ransomware is achieved by kNN classifier in
66.0% train split mode, which correctly classified
87.5% of instances, and therefore, the research suggests
it for detecting ransomware.
Keywords : Malware Analysis; Supervised Machine Learning Algorithms; Ransomware Detection.