Improving PDF Maldoc detection via data-driven feature engineering: A deep dive into malicious Portable Document Format (PDF) features, detectors and analysis methods

This thesis investigated the topic of feature engineering in the field of malicious PDF documents. The process' effectiveness, efficiency, and durability in relation to evasion were examined. The findings show that constructing detection tools must be based on features that are beyond the control of the authors of malicious documents.