Encryption Behavior Detection on Qualitative Comparison Prototype Baseline (Evaluation Set)
99.8macro-F1Brodzik eBPF
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Brodzik eBPFModel=DT in eBPF, Venue / Source=arXiv 20242026.01 | 99.8 | — | — | |
| Two-layer ORModel=Dual-layer (Rules + XGBoost), Venue / Source=This work2026.01 | 98 | — | — | |
| Brodzik eBPFModel=MLP in eBPF, Venue / Source=arXiv 20242026.01 | 97.4 | — | — | |
| EMLModel=Model (XGBoost), Venue / Source=This work2026.01 | 97 | — | — | |
| ERULEModel=Rules (from RF), Venue / Source=This work2026.01 | 95 | — | — |