## 4 Conclusions
\begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Family** & **Prec.** & **Rec.** & **F1** & **Family** & **Prec.** & **Rec.** & **F1** \\ \hline bamital & 100.00\% & 99.79\% & 99.89\% & padcrypt & 99.06\% & 99.20\% & 99.13\% \\ banjori & 99.02\% & 99.97\% & 99.49\% & phorpiex & 90.46\% & 57.14\% & 70.04\% \\ bazznloader & 99.90\% & 100.00\% & 99.95\% & pitou & 97.73\% & 97.51\% & 97.62\% \\ chind & 99.91\% & 99.51\% & 99.71\% & proslikefan & 100.00\% & 11.25\% & 20.22\% \\ conficker & 56.82\% & 27.01\% & 36.61\% & pseudoman & 71.72\% & 60.25\% & 65.49\% \\ corebot & 99.42\% & 99.71\% & 99.57\% & pushdo & 94.29\% & 98.04\% & 96.13\% \\ cryptolocker & 67.61\% & 32.60\% & 43.99\% & pushdotid & 92.39\% & 97.63\% & 94.94\% \\ darkshell & 98.75\% & 73.37\% & 84.19\% & pykspa2s & 95.28\% & 99.33\% & 97.26\% \\ darkwatchman & 100.00\% & 100.00\% & 100.00\% & qadars & 99.21\% & 98.06\% & 98.63\% \\ dircrypt & 0.00\% & 0.00\% & 0.00\% & qakbot & 68.76\% & 78.96\% & 73.51\% \\ dyre & 99.95\% & 100.00\% & 99.98\% & qanatch & 97.99\% & 98.56\% & 98.28\% \\ [PERSON] & 99.83\% & 96.81\% & 98.29\% & [PERSON] & 98.23\% & 99.67\% & 98.95\% \\ [PERSON] & 89.12\% & 100.00\% & 94.25\% & [PERSON] & 53.22\% & 59.99\% & 56.40\% \\ [PERSON] & 91.46\% & 94.46\% & 92.94\% & [PERSON] & 83.61\% & 92.04\% & 87.62\% \\ fobber & 40.59\% & 6.80\% & 11.65\% & rovnix & 100.00\% & 98.76\% & 99.38\% \\ gameover & 99.99\% & 99.98\% & 99.98\% & shiftu & 80.45\% & 95.79\% & 87.45\% \\ gamover & 95.94\% & 54.43\% & 69.46\% & simda & 97.51\% & 99.90\% & 98.69\% \\ gamover & 99.95\% & 58.17\% & 70.59\% & sphinv & 40.79\% & 94.45\% & 44.70\% \\ grandoreiro & 99.68\% & 100.00\% & 99.84\% & suppobox & 95.38\% & 62.70\% & 64.00\% \\ lucky & 83.50\% & 40.00\% & 54.09\% & smi & 92.39\% & 15.64\% & 16.71\% \\ smd & 54.22\% & 58.14\% & 56.11\% & timba & 66.55\% & 75.76\% & 70.81\% \\ mnoreiminer & 99.95\% & 100.00\% & 99.77\% & simpla & 96.55\% & 75.79\% & 70.7\% \\ mnoreit & 77.89\% & 95.89\% & 85.96\% & timynuke & 58.55\% & 57.59\% & 58.06\% \\ mnoreit & 77.94\% & 99.99\% & 98.69\% & tinba & 80.52\% & 98.99\% & 88.57\% \\ mnoreominer & 86.79\% & 94.41\% & 90.10\% & tinyluffuff & 93.89\% & 99.59\% & 96.52\% \\ mnoreit & 63.39\% & 90.67\% & 74.55\% & tinynuke & 80.71\% & 62.32\% & 53.67\% \\ mnoreitweekly & 89.09\% & 89.88\% & 88.01\% & tufik & 0.00\% & 0.00\% & 0.00\% \\ mydoom & 0.00\% & 0.00\% & 0.00\% & urlzone & 75.66\% & 84.37\% & 79.44\% \\ necro & 65.09\% & 59.39\% & 62.06\% & vawtrak & 0.00\% & 0.00\% & 0.00\% \\ necurs & 57.35\% & 67.88\% & 61.80\% & virtut & 97.99\% & 100.00\% & 98.97\% \\ ngioweb & 58.53\% & 22.95\% & 28.53\% & xxhex & 66.07\% & 65.84\% & 65.96\% \\ nymaim & 7.41\% & 0.04\% & 0.08\% & zloader & 57.51\% & 63.66\% & 60.36\% \\ nymaim2 & 26.48\% & 11.78\% & 16.31\% & Average & 47.33\% & 44.11\% & 43.69\% \\ \hline \hline \end{tabular}
\end{table} 
Table 7: _Cont._ \begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Family** & **Prec.** & **Rec.** & **F1** & **Family** & **Prec.** & **Rec.** & **F1** \\ \hline \hline  & 100.00\% & 100.00\% & 100.00\% & padcrypt & 97.51\% & 99.60\% & 98.54\% \\ banjori & 99.45\% & 99.96\% & 99.70\% & phorpiex & 90.31\% & 83.26\% & 86.64\% \\ bazarloader & 99.87\% & 100.00\% & 99.94\% & pitou & 93.33\% & 98.41\% & 95.81\% \\ chinad & 99.71\% & 99.09\% & 99.40\% & proslikefan & 54.11\% & 19.38\% & 28.54\% \\ conficker & 50.10\% & 32.20\% & 39.20\% & pseudoman & 56.19\% & 95.05\% & 70.63\% \\ \hline \hline  & & & & & & \\ \end{tabular}
\end{table} 
Table 10: Class Incremental Method, 2 nd incremental train with Metastealer examples precision, recall, and F1 score of each DGA family. \begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Family** & **Prec. ** & **Rec. ** & **F1** & **Family** & **Prec. ** & **Rec.