Skip to main content

Table 13 Results of the unsupervised anomaly detection approach: confusion matrix resulting when applying the model to test data

From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol

  Predicted class
  Normal Attack
True Normal 233724 6211
Attack 5463 2880