Modified Decision Tree Technique for Ransomware Detection at Runtime through API Calls

Algorithm 1

Modified decision tree algorithm.

	Input:
	Training samples = series of API calls
	C:
	c:
	large:
	attribute_list:
	test_attribute:
	Output:
	Vector feature
	Function
	1. Create a node N
	2. If N = c Then
	3. return(n)
	4. Else
	5. C = n
	6. End if
	7. If attribute_list = 0 Then
	8. return(n)
	9. Else
	10. C = large
	11. End if
	12. test_attribute = large
	13. For aiTo test_attribute
	14. Sample_set = N is portitioned.
	15. If test_attribute = ai
	16.  n = test condition
	17. End if
	18. End For Loop
	End Function