A Novel Malware Classification Method Based on Crucial Behavior

Table 2

Descriptions of the metrics.

Abbr	Symbol	Definition
TP	True positive	The number of malware samples in family f is correctly classified as family f
FN	False negative	The number of malware samples in family f is incorrectly not classified as family f
FP	False positive	The number of malware samples not in family f is incorrectly classified as family f
TN	True negative	The number of malware samples not in family f is correctly not classified as family f
TPR	True positive rate	TP/(TP + FN)
FPR	False positive rate	FP/(FP + TN)