Tackling imbalanced data in cybersecurity with transfer learning: a case with ROP payload detection

Cybersecurity

Table 3 Performance of the ROP detection on target domain programs using source domain model and domain adaptation model

Source	Target	FPR		F1		DR
Source		Baseline	Ours	Baseline	Ours	Baseline	Ours
proftpd	nginx	0.0217	0.0192	0.9941	0.9881	0.9957	0.9829
proftpd	httpd	0.0167	0.0183	0.9923	0.9843	0.9904	0.9754
proftpd	vsftpd	0.0392	0.0125	0.9484	0.9709	0.9142	0.9475
vsftpd	nginx	0.0500	0.0475	0.9735	0.9732	0.9649	0.9635
vsftpd	httpd	0.0283	0.0333	0.9508	0.9601	0.9151	0.9339
vsftpd	proftpd	0.0708	0.0433	0.9733	0.9452	0.9713	0.9096
Average		0.0378	0.0290	0.9723	0.9705	0.9586	0.9521