International Conference on Computer and Knowledge Engineering

Home / 15th International Conference on Computer and Knowledge Engineering

A Stacking Ensemble Framework for Ransomware Detection on the Bitcoin Blockchain Using Transaction Graph Analytics

Authors :

Mohammad Mobin Teymourpour¹ Parsa Hedayatnia² Mohammad Allahbakhsh³ Haleh Amintoosi⁴

1- Ferdowsi University of Mashhad 2- Ferdowsi University of Mashhad 3- Ferdowsi University of Mashhad 4- Ferdowsi University of Mashhad

Keywords :

Blockchain Security،Ransomware Detection،BitcoinHeist،Ensemble Learning،SMOTE-Tomek،Cybercrime Analytics

Abstract :

The growth of ransomware attacks has tracked the growing use of cryptocurrencies, and especially Bitcoin, as the payment medium of choice among cybercriminals. Although Bitcoin’s transparency provides traceability, pseudonymity complicates the attribution of malicious activity. In this work, we present a robust machine learning framework for detecting ransomware in the Bitcoin blockchain, grounded in fundamental blockchain principles and utilizing the Bitcoin-Heist dataset. We integrate graph-based transactional features, engineered behavioral indicators, and a two-stage classification pipeline to detect both ransomware-related addresses and their malware families. We overcome the challenges of class imbalance and sparse malicious samples using the SMOTETomek technique and verify improvements in separability using unsupervised clustering (K-Means and DBSCAN). For classification, we benchmark traditional and ensemble models, including Random Forest, XGBoost, LightGBM, CatBoost, and a Stacking Ensemble for classification. The ensemble model delivers state-of-the-art performance with an F1-score of 98.07% while maintaining reasonable training time. Evaluation is also extended to include resource utilization metrics such as memory, CPU usage, and training time. Our results show the feasibility of integrating machine learning-based forensics at the transactional layer, supported by a foundation in blockchain’s core mechanisms, enabling proactive threat mitigation and transparent blockchain intelligence.

Papers List

List of archived papers

Experimental evaluation and comparison of anti-pattern detection tools by the gold standard

Somayeh Kalhor - Mohammad reza Keyvanpour - Afshin Salajegheh

Pyramid Transformer for Traffic Sign Detection

Omid Nejati manzari - Amin Boudesh - Shahriar B. Shokouhi

Blind Load-Balancing Algorithm using Double-Q-learning in the Fog Environment

Niloofar Tahmasebi pouya - Mehdi Agha Sarram

Enhanced Autoencoder-based Clustering for Message Analysis in Binary Protocols

Mohaddese Nemati - Shiva Mahmoudzadeh - Mehdi Teimouri

Virtual machine consolidation using SLA-aware genetic algorithm placement for data centers with non-stationary workloads

Hossein Monshizadeh Naeen

Leveraging a structure-based and learning-based predictor using various feature groups in bioinformatics (case study: protein-peptide region residue-level interaction)

Shima Shafiee - Abdolhossein Fathi

Intelligent Adaptive Control of Wheeled Mobile Robots with MLP Neural Networks under Input Constraints

Soheil Sheikh ahmadi - Arash Rahmani

LightFedSelect: A Lightweight Framework for Byzantine-Robust Federated Learning

Seyed Saeed Razavi - Seyed Arsalan Vasegh Rahim Parvar - Soroosh Dadashi Pakdeh - Mohammad Matin Rezaeifard - Morteza Mollaie Chafi - Reza Ebrahimi Atani

FAST: FPGA Acceleration of Neural Networks Training

Alireza Borhani - Mohammad Hossein Goharinejad - Hamid Reza Zarandi

BERT transformers Multitask learning Sarcasm and Sentiment classification (BMSS)

Fatemeh Molavi - Jamshid Bagherzadeh Mohasefi