Fig. 3From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocolROC-plot for semi-supervised anomaly detection (left) and unsupervised anomaly detection (right)Back to article page