From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol
Predicted class | |||||
---|---|---|---|---|---|
Normal | Nmap | Syn Flood | Nessus | Fuzzy | |
True class | |||||
Normal | 238277 | 0 | 0 | 0 | 0 |
Nmap | 4 | 2046 | 0 | 21 | 0 |
Syn Flood | 2 | 0 | 2053 | 12 | 4 |
Nessus | 7 | 7 | 455 | 1597 | 1 |
Fuzzy | 40 | 6 | 1 | 1 | 1994 |