K-Means scored 0.350 ROC-AUC on malware data, worse than random. Why clustering fails when the anomaly is the majority, and what changed at 5 percent.
Tag: malware detection
Malware Detection: The Perfect Score That Meant Nothing
Before training a model, my malware classifier could already score 100%. How a leaked filename and duplicate PE headers nearly invalidated the results.