Analysis of Machine Learning Techniques for Ransomware Detection In parallel with the increasing growth of the Internet and computer networks, the number of malwares has been increasing every day. Today, one of the newest attacks and the biggest threats in cybersecurity is ransomware. The effectiveness of applying machine learning techniques for malware detection has been explored in much scientific research, however, there is few studies focused on machine learningbased ransomware detection. In this paper, the effectiveness of ransomware detection using machine learning methods applied to CICAndMal2017 dataset is examined in two experiments. First, the classifiers are trained on a single dataset containing different types of ransomware. Second, different classifiers are trained on datasets of 10 ransomware families distinctly. Our findings imply that in both experiments random forest outperforms other tested classifiers and the performance of the classifiers are not changed significantly when they are trained on each family distinctly. Therefore, the random forest classification method is very effective in ransomware detection.

Ransomware Prediction Using Supervised Learning Algorithms Malware has become most popular attack vector, among which ransomware remained a threat to individuals and organisations. Ransomware main objectives is extortion by imposing some form of denial of service to either the system or system resources such as files until ransom is paid. This make ransomware different from conventional malware that seek to replicate, delete files, exhilarate data or extensively consume system resources. Unfortunately, detection approaches such as sandboxes analysis and pipelines are inadequate due to lack of luxury of being able to isolate a sample to analyse, and when this occurs is already too late for several users.Therefore, machine learning as prove its efficiency and has been used in research for malware detection. In this paper, we explore machine learning algorithms in ransomware detection. Specifically, the data set used contains 30,000 attributes which is to be use as independent variables to predict ransomware.However, since is difficult to incorporate all the attribute in the analysis, we therefore results to use five attribute to serves a proof of concept for feature selection. Then, after feature selection, we apply support vector machine algorithm of which RMSE of 0.179 was obtained and classifying ransomware with 88.2% accuracy. The Support Vector Machine has high performance in detection and classifying ransomware when compare to other machine learning classifier.