Real-Time Malware Process Detection and Automated Process Killing

Table 11

Two models’ F1-score, TNR, TPR for the validation and test set scoring the highest TNR on the validation and test sets.

Methodology	Model	n features	Val			Test
			F1	tnr	tpr	F1	tnr	tpr
Regression	AdaBoost	26	56.63	100.00	39.50	15.06	97.92	8.40
Regression + 4 alerts	GBDT	26	85.91	95.80	77.31	68.50	94.98	56.04