SR2APT: A Detection and Strategic Alert Response Model against Multistage APT Attacks

Table 1

The F1-score of classification models based on SVM, CNN, LSTM, and GCN regarding each class.

	Benign	APT s1	APT s2	APT s3	APT s4	APT s5	APT s6
SVM	1.00	0.52	0.96	0.80	0.73	0.89	0.89
CNN	0.98	0.65	0.95	0.72	0.77	0.89	0.90
LSTM	0.95	0.62	1.00	0.88	0.87	0.78	0.87
GCN	0.91	0.96	0.98	0.89	0.90	0.97	1.00