Ransomware Detection

GAT · full_fcg

Standard SplitFeb 18, 2026

910db720ee184ee1831edeecb931b481

Description

Train GAT on the full_fcg dataset to complete the 3-model x 2-dataset baseline grid.

Conclusion

Matches GIN internal_only as the strongest baseline (98.2% accuracy, 96.9% recall, 99.4% AUROC). GAT benefits more from full_fcg than GIN or GCN. However, all six experiments use standard random splits and may overestimate generalization.

Test Metrics

Accuracy

98.2%

F1 Macro

97.8%

F1 Malware

96.9%

Precision

96.9%

Recall

96.9%

AUROC

99.4%

Best Val Loss

0.1023

Training Time

3645.5000s

Confusion Matrix

Pred BenignPred Malware
Actual Benign751
Actual Malware131

Configuration

Hidden Dim128
Num Layers3
Dropout0.5
Batch Size4
Learning Rate0.001
Weight Decay0.0001
Max Epochs200
ES Patience20
ES Min Epochs100
LR Patience10
LR Factor0.5
Mixed PrecisionYes
Random Seed42
Epochs Trained113