Residual Community Prototypes Under-Reject Held-Out Malware Families in FCG-MFD
[Kryptografia i bezpieczeństwo] Autorzy: Junru Zhu, Yixin Yang, Xiaoqing Ding i 1 więcej
Open-set malware-family recognition must classify known families while rejecting families absent from training. We test whether Louvain-community summaries add rejection information beyond a graph neural network embedding and dimension-matched generic topology. The study uses a deduplicated, conflict-audited FCG-MFD corpus, five held-out families, and three optimization seeds. Community features are residualized against generic topology using known-family training data before nearest-prototype scoring. Residual community does not produce stable held-out-family rejection. Ranking effects reverse across families, the false-positive rate at 95 percent unknown recall worsens for every held-out family, and a validation-fitted threshold rejects only 4.48 percent of unknown samples. Accepted-known macro F1 improves in every family, but with five independent family units the exact two-sided sig…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo