Skip to main content

Table 11 Results of the classification approach: confusion matrix for a medium tree applied to test data for the multi-class case, where the goal is to distinguish the attacks, too

From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol

 

Predicted class

 

Normal

Nmap

Syn Flood

Nessus

Fuzzy

True class

Normal

238277

0

0

0

0

Nmap

4

2046

0

21

0

Syn Flood

2

0

2053

12

4

Nessus

7

7

455

1597

1

Fuzzy

40

6

1

1

1994