Real-Time Malware Process Detection and Automated Process Killing

Table 4

Hyperparameter search space and the hyperparameters of the model giving the lowest mean false-positive and false-negative rates.

	Possible values	Process-level data	Process-level data + global metrics
Hyperparamter
Hidden neurons	8–1024	253	193
Depth	[1–3]	2	2
Batch size	[64, 128, 256]	128	256
Epochs	1–200	89	161
Dropout rate	[0, 0.1, 0.2, 0.3, 0.4, 0.5]	0.1	0.1
Window size	2–30	16	6
Loss function	Binary cross-entropy
Weight update rule	Adam [48]
Recurrent unit	GRU cell
Validation F1-score (100)	—	97.43	94.61