|
We apply four different methods, including "K-Nearest Neighbours (KNN)", "Support Vector Machine (SVM)", "Decision Tree", and "Random Forest". In the experiment, 5-fold cross-validation is used for evaluation. The experiment results show that the F1 score of tactic labeling can reach over 90% and up to 96%, which can significantly help security experts improve the effectiveness of tactic labeling. From the results, we can find that the KNN result is slightly worse because we treat keyword terms in the tactic group as features, and these features form a multi-dimension feature vector, resulting in the KNN not performing well in the data with higher dimensions. |