Toward Identifying APT Malware through API System Calls

Figure 9

Recall rates for dichotomous models. The abscissa represents the number of iterations, and the ordinate represents the value of recall rates.