Alex builds a random forest to predict insider threat behavi…
Alex builds a random forest to predict insider threat behavior based on features like late-night logins, unusual file downloads, and unexpected access patterns. The model repeatedly predicts the majority class (no threat) even when insider threat behavior increases in the test set. Question:Does this behavior imply that random forest is inherently worse than a decision tree at detecting rare cybersecurity events?
Read Details