>Larger values of n are not tested due to computational burden or the fear of overfitting
I would say that many times larger n-grams are tested in the early stage, give poor result, and then are dropped in subsequent tests.
I would say that many times larger n-grams are tested in the early stage, give poor result, and then are dropped in subsequent tests.
The primary point of our paper is that now we can circle back and really test all these hypothesis about larger n-grams for malware! And even if you only want smaller 6-grams, we get a nice big speedup too :)