Hybrid Machine Learning Model for Android Ransomware Detection Using URL-Based Features

Meenakshi Jalandra; Megha Kuliha; Jasmeet Kaur

doi:10.71097/IJSAT.v16.i3.7324

Hybrid Machine Learning Model for Android Ransomware Detection Using URL-Based Features

Author(s)	Meenakshi Jalandra, Megha Kuliha, Jasmeet Kaur
Country	India
Abstract	With the rapidly evolving cybersecurity landscape, ransomware – which primarily targets Android systems via malicious URLs – has become a serious concern. This work explores the use of supervised machine learning models for accurate and early ransomware detection. We compared the performance of Random Forest, Light GBM, SVM, Logistic Regression, and Naive Bayes in handling complex, high- dimensional data. The results obtained from these models were compared and light GBM and Random Forest showed accurate and robust results that were significantly better than other models. Using these results, we integrated them into a hybrid model. Deep feature interactions are better captured using Multi-Layer Perceptron (MLP) In the dynamic era of cybersecurity, the growing number of ransomware is emerging as a serious threat, especially on the Android platform, with URL threat emerging as a new fraud. This paper works on detecting URL ransomware threats in Android and presents a hybrid MAC layering model for the same. The results emphasize the effectiveness of URL type identification and multiple accurate intelligent identification of ransomware and dangerous URLs compared to traditional URL based detection. Future work includes scalable analysis and aggregation of real- time analysis. To improve the model performance and get better results, a hybrid model was built by taking the best outputs of both Random Forest and Light GBM models and combining them into an ensemble of Multi-Layer Perceptrons (MLP) and getting better outputs at different layers. This model was able to detect URLs well and used both static and dynamic URLs from the data set which proved helpful in reactive threat detection. Future extensions of this study may also include applying deep neural networks and deep learning on industrial and URL data to accurately identify URLs in real-time.
Keywords	Random Forest, Light GBM, Machine Learning, Hybrid Model, MLP, Android Ransomware, URL Detection, and Cybersecurity.
Field	Engineering
Published In	Volume 16, Issue 3, July-September 2025
Published On	2025-07-26
DOI	https://doi.org/10.71097/IJSAT.v16.i3.7324
Short DOI	https://doi.org/g9vdcs

View / Download PDF File

doi

CrossRef DOI is assigned to each research paper published in our journal.

IJSAT DOI prefix is
10.71097/IJSAT

Downloads

Research Paper Format Copyright Permission Form and Undertaking Form Cover Page Vol 16 Isu 3 Cover Page Vol 16 Isu 2 Cover Page Vol 16 Isu 1

All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.

CC-BY-SA

About IJSAT Fees & Payment Current Issue Publication Archive	Submit Research Paper Track Submission Status Publication Guidelines Publication Ethics Peer Review & Plagiarism	Join as a Reviewer Editors & Reviewers Reviewer Referral Program Get Reviewer Membership Certi.	Website/Journal Policies Usage Policy Content Policies Privacy Policy

Contact Us	Message on WhatsApp	+91-9687-182-185	editor@ijsat.org

International Journal on Science and Technology

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Hybrid Machine Learning Model for Android Ransomware Detection Using URL-Based Features

Share this