## 4 Conclusions
\begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Family** & **Prec.** & **Rec.** & **F1** & **Family** & **Prec.** & **Rec.** & **F1** \\ \hline bamital & 96.74\% & 100.00\% & 98.34\% & orchard & 99.27\% & 99.75\% & 99.51\% \\ banjori & 98.36\% & 99.92\% & 99.13\% & padcrypt & 97.15\% & 99.34\% & 98.23\% \\ bazarloader & 99.91\% & 100.00\% & 99.96\% & phorpiex & 76.77\% & 84.07\% & 80.25\% \\ chinad & 98.88\% & 98.99\% & 98.93\% & pitou & 95.47\% & 97.15\% & 96.30\% \\ conficker & 55.17\% & 29.39\% & 38.35\% & proslikefan & 100.00\% & 4.17\% & 8.01\% \\ corebot & 99.32\% & 97.49\% & 98.39\% & pseudoman & 56.87\% & 96.44\% & 71.55\% \\ cryptlocker & 40.65\% & 54.48\% & 46.56\% & pushdo & 91.25\% & 96.72\% & 93.91\% \\ darkshell & 98.48\% & 100.00\% & 99.23\% & pushdotdi & 94.62\% & 95.82\% & 95.21\% \\ darkwatchman & 100.00\% & 100.00\% & 100.00\% & pylkspa2s & 94.05\% & 96.36\% & 95.19\% \\ dircrypt & 4.48\% & 42.82\% & 8.11\% & qadars & 96.45\% & 98.68\% & 97.55\% \\ dyre & 99.93\% & 100.00\% & 99.97\% & [PERSON] & 72.39\% & 65.83\% & 68.95\% \\ [PERSON] & 91.91\% & 99.82\% & 95.70\% & qsnatch & 98.72\% & 97.74\% & 98.22\% \\ [PERSON] & 82.23\% & 99.89\% & 90.20\% & [PERSON] & 98.20\% & 100.00\% & 99.09\% \\ [PERSON] & 87.22\% & 94.92\% & 90.91\% & [PERSON] & 53.30\% & 52.45\% & 52.87\% \\ [PERSON] & 30.04\% & 12.03\% & 17.18\% & [PERSON] & 76.93\% & 87.64\% & 81.94\% \\ [PERSON] & 99.98\% & 99.91\% & 99.95\% & rovnix & 94.95\% & 98.73\% & 96.80\% \\ gamover\_p2P & 73.00\% & 60.18\% & 65.97\% & shifu & 62.12\% & 98.41\% & 76.16\% \\ gozi & 81.76\% & 73.31\% & 77.30\% & simda & 99.14\% & 99.48\% & 99.31\% \\ grandoreiro & 83.68\% & 100.00\% & 91.11\% & sphinx & 23.05\% & 91.38\% & 36.82\% \\ lucky & 69.42\% & 46.91\% & 55.98\% & symmi & 98.50\% & 99.92\% & 99.20\% \\ m0 yvtdd & 47.65\% & 85.66\% & 61.24\% & tinba & 95.05\% & 95.27\% & 95.16\% \\ metastealer & 99.95\% & 100.00\% & 99.98\% & symmi & 99.80\% & 99.97\% & 99.88\% \\ mnorointewekly & 98.99\% & 99.57\% & 99.73\% & tinba & 95.19\% & 95.32\% & 95.25\% \\ mydoom & 86.03\% & 95.90\% & 99.70\% & tinylfluff & 99.77\% & 99.99\% & 99.88\% \\ mnorfetweekly & 99.37\% & 99.51\% & 99.44\% & virut & 99.67\% & 100.00\% & 99.84\% \\ mydoom & 90.73\% & 77.60\% & 83.65\% & vawtrak & 78.50\% & 68.77\% & 73.32\% \\ necro & 98.95\% & 99.30\% & 99.13\% & virut & 99.37\% & 99.96\% & 99.67\% \\ necus & 99.24\% & 73.64\% & 84.54\% & xbhex & 99.33\% & 99.85\% & 99.59\% \\ ngioweb & 92.83\% & 67.80\% & 78.37\% & zloader & 87.43\% & 98.59\% & 92.67\% \\ nymaim & 44.14\% & 16.81\% & 24.35\% & suppobox & 12.48\% & 96.94\% & 22.11\% \\ nymaim2 & 57.17\% & 55.80\% & 56.48\% & Average & 78.23\% & 79.24\% & 76.03\% \\ \hline \hline \end{tabular}
\end{table} 
Table 14: Class Incremental Method, 2 nd incremental train with Suppobox examples precision, recall, and F1 score of each DGA family. \begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Family** & **Prec.** & **Rec.** & **F1** & **Family** & **Prec.** & **Rec.** & **F1** \\ \hline bamital & 99.79\% & 100.00\% & 99.89\% & padcrypt & 98.66\% & 98.53\% & 98.59\% \\ banjori & 99.91\% & 100.00\% & 99.95\% & phorpiex & 92.74\% & 80.23\% & 86.03\% \\ bazarloader & 99.99\% & 100.00\% & 100.00\% & pitou & 98.82\% & 97.90\% & 98.36\% \\ chinad & 99.40\% & 99.16\% & 99.28\% & proslikefan & 83.92\% & 19.29\% & 31.37\% \\ conficker & 55.40\% & 29.46\% & 38.47\% & pseudoman & 71.43\% & 77.66\% & 74.42\% \\ corebot & 99.83\% & 99.09\% & 99.46\% & pushdo & 95.93\% & 96.96\% & 96.44\% \\ cryptolocker & 57.38\% & 45.89\% & 50.99\% & pushdotid & 91.80\% & 97.92\% & 94.76\% \\ darkwatchman & 99.87\% & 99.83\% & 99.85\% & pylkspa2s & 97.43\% & 99.21\% & 98.31\% \\ dircrypt & 0.00\% & 0.00\% & 0.00\% & qadars & 99.27\% & 97.29\% & 98.27\% \\ dyre & 99.98\% & 100.00\% & 99.99\% & qakbot & 72.25\% & 73.88\% & 73.05\% \\ dyre & 99.49\% & 97.81\% & 98.64\% & qsnatch & 98.43\% & 98.32\% & 98.37\% \\ \hline \hline \end{tabular}
\end{table}