Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Malcom: Indonesian Journal of Machine Learning and Computer Science
Abdul Gani Fadhlulrahman
Universitas Negeri Gorontalo
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Time Series Approach for Analysis and Prediction of Malware Trends Based on Open Source Intelligence Tommy Nugraha Manoppo; Abdul Gani Fadhlulrahman; Yudi Prayudi
MALCOM: Indonesian Journal of Machine Learning and Computer Science Vol. 6 No. 2 (2026): MALCOM April 2026
Publisher : Institut Riset dan Publikasi Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.57152/malcom.v6i2.2580

Abstract

The growing threat of malware requires monitoring approaches that provide a continuous, measurable overview of threat trends. This study proposes an open-source intelligence-based malware trend monitoring system using time series forecasting and anomaly signaling. Data are obtained from the MalwareBazaar repository and processed into a daily malware activity time series, with contextual aggregation to identify dominant malware families. The AutoRegressive Integrated Moving Average (ARIMA) model is applied for short-horizon prediction, and statistical anomaly detection is implemented using Z-scores to flag activity deviations. The system is delivered as an interactive dashboard that visualizes daily malware trends, dominant malware families, forecasting outputs, and anomaly indicators. Experimental results show that ARIMA(2,0,0) provides measurable improvement over a naive persistence baseline, reducing MAE from 102.75 to 92.67 and RMSE from 125.13 to 109.73, while improving sMAPE from 26.74% to 24.48% on the evaluation window. The novelty of this work lies in integrating an OSINT malware repository signal, benchmarked statistical forecasting, quantitative evaluation, and anomaly signaling into a single monitoring dashboard. Practically, the system can support SOC analysts by providing early-warning cues for monitoring prioritization and support digital forensic practitioners by strengthening digital forensic readiness through earlier visibility emerging malware activity dynamics and dominant artifact categories.
Co-Authors Tommy Nugraha Manoppo Yudi prayudi