Research Article
Real-Time Malware Process Detection and Automated Process Killing
Table 10
Summary of process killing models, validation, and test set score metrics [Table 3 of 3].
| | Val | Test |
| SVMModel_pro mean process tree | 67.25 | 9.24 | 96.64 | 57.55 | 13.34 | 93.33 | SVMModel_pro process tree min alerts: 1 | 66.47 | 5.88 | 96.64 | 56.21 | 7.28 | 93.88 | SVMModel_pro process tree min alerts: 2 | 66.47 | 5.88 | 96.64 | 56.21 | 7.28 | 93.88 | SVMModel_pro process tree min alerts: 3 | 66.47 | 5.88 | 96.64 | 56.21 | 7.28 | 93.88 | SVMModel_pro process tree min alerts: 4 | 66.47 | 5.88 | 96.64 | 56.21 | 7.28 | 93.88 | SVMModel_pro rolling mean window: 2 | 66.87 | 15.97 | 92.44 | 58.60 | 22.02 | 90.30 | SVMModel_pro rolling mean window: 3 | 67.30 | 24.37 | 89.08 | 58.82 | 24.42 | 89.27 | SVMModel_pro rolling mean window: 4 | 67.99 | 31.93 | 86.55 | 57.98 | 28.97 | 84.66 | SVMModel_pro sum alerts min: 2 | 67.96 | 28.57 | 88.24 | 59.52 | 27.61 | 88.73 | SVMModel_pro sum alerts min: 3 | 68.90 | 35.29 | 86.55 | 59.06 | 33.35 | 84.12 | SVMModel_pro sum alerts min: 4 | 68.75 | 41.18 | 83.19 | 56.68 | 38.87 | 76.10 | SVMModel_pro_tree | 65.73 | 9.09 | 98.32 | 61.79 | 9.88 | 93.19 | Dqn | 51.71 | 72.27 | 44.54 | 27.74 | 55.50 | 26.94 | random_search_glo_pro_RNN | 87.69 | 77.31 | 95.80 | 71.83 | 59.63 | 90.24 | random_search_glo_pro_RNN mean process tree | 88.03 | 78.15 | 95.80 | 72.50 | 61.67 | 89.81 | random_search_glo_pro_RNN_Regression | 85.71 | 72.27 | 95.80 | 72.44 | 61.78 | 89.59 | random_search_pro_RNN | 91.20 | 85.71 | 95.80 | 72.63 | 59.63 | 91.82 | random_search_pro_RNN mean process tree | 91.20 | 85.71 | 95.80 | 73.03 | 60.92 | 91.49 | random_search_pro_RNN_Regression | 88.37 | 78.99 | 95.80 | 72.71 | 60.70 | 91.06 | random_search_pro_RNN_tree | 88.19 | 80.67 | 94.12 | 73.72 | 65.79 | 88.56 |
|
|