دانلود رایگان پاورپوینت خوشه بندی نرم افزار مخرب (انگلیسی)

Results

Accuracy vs. #Clusters Error rate reduces as number of clusters increase.
Accuracy vs. Maximum #Events Error rate reduces as the event cap increases, because the more events we observe, the more accurately we can capture the behavior of the malware.
Accuracy Gain vs. Number of Events The gain in accuracy is more substantial at lower event caps (100 vs. 500) than at higher event caps (500 vs. 1000), which indicates that between 100 to 500 events, the clustering had most of the information it needs to form good quality clusters.
Accuracy vs. Number of Families The 11-family experiment outperforms in accuracy the 3-family experiment in high event cap tests (1000), but the result is opposite in lower event cap tests (100). As we investigate further, we found that the same outliers were found in both experiments, and because there were more semantic clusters (11 vs. 3), the outlier effects were contained.