---
title: TPR at 0.01% FPR in Detection Systems
url: https://www.emergentmind.com/topics/true-positive-rate-at-a-false-positive-rate-of-0-01
type: topic
---

# TPR at 0.01% FPR in Detection Systems

The true positive rate (TPR) at a false positive rate (FPR) of 0.01% (i.e., $1\times 10^{-4}$) is a stringent operating point in statistical classification and detection, directly relevant to application domains—such as malware detection, fraud identification, and critical rare disease screening—where the cost of even a single false positive is substantial. The metric “TPR at FPR=0.01%” answers: *What fraction of true positives can the system recover while ensuring that no more than 1 in 10,000 negatives is misclassified as positive?* Attaining high TPR at this vanishingly small FPR is a benchmark for operational deployment in scenarios demanding extreme selectivity.

## 1. Formal Definitions and Operating Point Selection

Let $f(x) \in \mathbb{R}$ represent a classifier or scoring function, and $y \in \{0,1\}$ the true label ($1=$ positive/critical, $0=$ negative). For any threshold $\tau$, the standard metrics are:
\[
\mathrm{TPR}(\tau) = P(f(x) > \tau \mid y=1), \quad
\mathrm{FPR}(\tau) = P(f(x) > \tau \mid y=0).
\]
The “TPR at FPR = 0.01%” is operationally defined by finding the maximal threshold $\tau^*$ such that $\mathrm{FPR}(\tau^*) \leq 10^{-4}$, then reading off $\mathrm{TPR}(\tau^*)$.

Threshold selection for this metric requires: (i) precise estimation of the right-tail behavior of $f(x)$ on the negative class, (ii) validation set sizes sufficiently large to resolve events at the $10^{-4}$ level, and (iii) avoidance of optimistic bias (thresholds must be chosen strictly using hold-out data) [2108.04081].

## 2. Achievability and Empirical TPR at Extreme Low FPR

Empirical TPR realized at FPR = 0.01% varies drastically across domains, model classes, and dataset scale:

| Dataset                  | Model/Method              | TPR@FPR = 0.01% | Test Negatives |
|--------------------------|--------------------------|-----------------|---------------|
| Sophos SOREL-20M         | FFNN ensemble            | 90.17%          | ~2.8M         |
| Sophos SOREL-20M         | LightGBM ensemble        | 22.96%          | ~2.8M         |
| EMBER2018                | LGBM ensemble            | 48.88%          | 100K          |
| EMBER2018                | Bayesian MalConv         | 24.22%          | 100K          |
| Tabular biomarker sim.   | Distribution-free method | $\ll$1%         | O(1000)       |
| RankReg (CIFAR-10/100)   | Deep net + RankReg       | $\approx$ 0%    | 1K–2K         |

Experiments on industry-scale malware detection using ensembling and Bayesian uncertainty calibration have achieved TPR $\approx$ 90% at FPR = 0.01% with sufficient test set size and rigorous protocol [2108.04081]. In contrast, for moderate-signal biomedical settings or small sample regimes, TPR drops to near zero as FPR is lowered to such extremes [1910.02087, 2304.00049].

## 3. Methodological Considerations and Constraints

### Sample Size Requirements

Estimating TPR at FPR $= 1\times 10^{-4}$ is challenging: if the number of test negatives is $N$, the minimal reliably estimable FPR is $1/N$. A typical recommendation is that $N \times$ FPR $> 100$ for stable measurement, implying the need for at least $10^6$ negatives for FPR $=$ 0.01% [2108.04081].

### Robust Threshold Estimation

Protocols must derive thresholds from validation splits, not test data, to prevent contamination and overestimation of achievable TPR at low FPR. For each candidate threshold,
\[
\mathrm{FPR_{val}}(\tau) \leq \text{target FPR},
\]
and then TPR is reported on test.

### Model Properties

Ensembling and Bayesian uncertainty estimation substantially improve TPR in this regime. Ensembles of feedforward neural networks, MC-dropout Bayesian convolutional nets, and gradient-boosted trees have demonstrated gains of 10–20% relative TPR at fixed low FPR via diversity and epistemic uncertainty reduction [2108.04081].

Logistic regression and linear models can “collapse” (outputting zero predicted positives) at $\mathrm{FPR}=10^{-4}$, particularly if the discrimination boundary is not sharp in the negative tail [2108.04081, 1910.02087].

## 4. Application Domains and Interpretation

Ultra-low FPR operating points are directly relevant in:

- **Malware Detection**: High-volume streams demand $<$0.01% FPR to avoid overwhelming analysts with false alarms, while maintaining high TPR for emerging threats [2108.04081].
- **Fraud Screening**: Financial and e-commerce systems require high selectivity to minimize false accusations, but class-conditional label noise (e.g., hidden frauds mislabelled as genuine) complicates estimation. Correction formulas allow unbiased recovery of TPR at extreme FPR under known noise rates [2308.02695].
- **Rare Disease and Critical Event Detection**: Clinical screening for rare diseases may impose proof-of-concept thresholds at this regime. Practical results show that with current biomarkers and sample sizes, the achievable TPR at $10^{-4}$ FPR is frequently near zero unless discriminatory power is nearly perfect [1910.02087].

## 5. Statistical and Numerical Limitations

At FPR $=10^{-4}$, numerical and statistical limitations dominate:

- **ROC Tail Behavior**: TPR at extreme low FPR is determined by the overlap of positive and negative score distributions beyond the 99.99th percentile. With moderate signal, this region contains very few or no observed positives in most practical datasets, so empirical TPR is often zero [1910.02087, 2304.00049].
- **Effect of Label Noise**: In fraud and similar domains, even a small fraction of positives mislabelled as negatives distorts empirical FPR at the $10^{-4}$ level. Correction formulas based on known class priors and noise rates are necessary and allow consistent estimation of TPR at target FPR in the infinite-sample limit [2308.02695].

## 6. Recent Algorithmic Advances and Practical Guidance

Recent methods, such as ranking regularization (RankReg) [2304.00049], are designed to improve FPR at high TPR by explicitly penalizing “open” gaps between top-scoring negatives and lowest-scoring positives. RankReg achieves lower FPR at very high TPR, but still cannot reach appreciable TPR at FPR $=10^{-4}$ unless intrinsic signal is extremely high.

In practice:
- For industry-scale applications (malware, fraud), combine ensembles with conservative, validation-based thresholding for maximal TPR at operational FPR [2108.04081].
- In biomedical or rare-event classification, unless data and features provide right-tail separability, expect TPR $\ll$ 1% at FPR $=0.01\%$ [1910.02087, 2304.00049].
- For label-noise settings, utilize corrections such as
  \[
  \mathrm{FPR_{true}}(t) = \frac{[(1-\pi) + \pi \eta_1] \mathrm{FPR_{obs}}(t) - \pi \eta_1 \mathrm{TPR_{obs}}(t)}{1-\pi}
  \]
  where $\pi$ is prevalence and $\eta_1$ is the mislabeling rate [2308.02695].

## 7. Outlook and Open Challenges

The TPR achievable at FPR = 0.01% is fundamentally determined by the statistical overlap between extreme-score negatives and the distribution of positives. Substantive improvements require advances in feature engineering, tail modeling, and noise-robust inference. Future progress will depend on both data scale (to sample extreme events) and new algorithms designed to optimize or regularize for ultra-small FPR regimes—subject to the constraints imposed by the problem’s underlying class separation [2304.00049, 1910.02087, 2108.04081, 2308.02695].

---

**References:**  
- [2304.00049]  
- [1910.02087]  
- [2108.04081]  
- [2308.02695]  
- [1410.2838]

Source: https://www.emergentmind.com/topics/true-positive-rate-at-a-false-positive-rate-of-0-01