Skip to main content

Table 11 Results of the classification approach: confusion matrix for a medium tree applied to test data for the multi-class case, where the goal is to distinguish the attacks, too

From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol

  Predicted class
  Normal Nmap Syn Flood Nessus Fuzzy
True class
Normal 238277 0 0 0 0
Nmap 4 2046 0 21 0
Syn Flood 2 0 2053 12 4
Nessus 7 7 455 1597 1
Fuzzy 40 6 1 1 1994