Skip to main navigation Skip to search Skip to main content

Imbalanced learning based on adaptive weighting and Gaussian function synthesizing with an application on Android malware detection

  • Ying Pang
  • , Lizhi Peng*
  • , Zhenxiang Chen
  • , Bo Yang
  • , Hongli Zhang
  • *Corresponding author for this work
  • University of Jinan
  • School of Computer Science and Technology, Harbin Institute of Technology

Research output: Contribution to journalArticlepeer-review

Abstract

The existence of imbalanced classes can considerably degrade the performance of most standard learning algorithms. This paper presents a new imbalanced learning method called AWGSENN to address this problem on data level. In AWGSENN, each minority instance is firstly weighted based on the number of majority class neighbors and the distance of the minority instance to its neighbors. Then, a Gaussian distribution probability density function is designed to generate new instances nonlinearly. Finally, the edited nearest neighbor rule is used as a data cleaning technique to remove overlapping and noisy instances. The proposed method is evaluated in extensive experiments by comparing it with five over-sampling and two hybrid sampling methods on 37 data sets from the KEEL data repository. Empirical study results show that our approach can achieve significant performance improvement on G-mean and the area under curve metrics. Wilcoxon signed-rank test results show that our approach is superior to other resampling approaches. We apply the proposed method for Android malware detection, and the results further demonstrate the promising performance of our approach.

Original languageEnglish
Pages (from-to)95-112
Number of pages18
JournalInformation Sciences
Volume484
DOIs
StatePublished - May 2019
Externally publishedYes

Keywords

  • Adaptive weighting
  • Imbalanced learning
  • Malware detection
  • Over-sampling method

Fingerprint

Dive into the research topics of 'Imbalanced learning based on adaptive weighting and Gaussian function synthesizing with an application on Android malware detection'. Together they form a unique fingerprint.

Cite this