Ransomware Detection on Android Devices Using Machine Learning

Ransomware Detection on Android Devices Using Machine Learning

Mrs. S. Tejaswi1, B. Gowri Sankar2, B. Aditya Naidu3, J. Harshani4

1Assistant Professor, Dept of Computer Science and Engineering, Sanketika Institute of Technology and Management, Visakhapatnam, Andhra Pradesh, India

2Student, Dept of Computer Science and Engineering, Sanketika Institute of Technology and Management, Visakhapatnam, Andhra Pradesh, India

3Student, Dept of Computer Science and Engineering, Sanketika Institute of Technology and Management, Visakhapatnam, Andhra Pradesh, India

4Student, Dept of Computer Science and Engineering, Sanketika Institute of Technology and Management, Visakhapatnam, Andhra Pradesh, India

---------------------------------------------------------------------***---------------------------------------------------------------------

Abstract - In recent years, the rapid increase in Android-based ransomware attacks has posed serious threats to mobile security and user data privacy. Detecting such malicious behavior through efficient network traffic analysis has become a critical area of research. This paper presents a hybrid approach for network traffic classification using Artificial Bee Colony (ABC) optimization for feature selection and Random Forest as the classification algorithm. The primary goal is to improve detection accuracy by eliminating redundant or irrelevant features, thereby reducing the complexity of the model. The dataset used comprises labeled Android network traffic data, which includes both benign and ransomware samples. After preprocessing the data, ABC is applied to identify the most significant features. These selected features are then used to train a Random Forest classifier. The model is evaluated using metrics such as accuracy, precision, recall, and F1-score. Additionally, a user-friendly interface is developed using Gradio, enabling real-time prediction and enhancing usability. Experimental results show that our proposed model achieves high classification performance while significantly reducing the feature set, making it suitable for real-time threat detection scenarios.

Keywords: Artificial Bee Colony (ABC), Feature Selection, Random Forest, Android Ransomware, Network Traffic Classification, Gradio, Machine Learning