Skip to main content

Table 4 Baseline and endline experimental evaluation results for IEC 104 protocol with unsupervised one-class SVM anomaly detection on cross-validated test folds

From: Improving anomaly detection in SCADA network communication with attribute extension

 

FNR

FPR

\(F_{1}\) score

MCC

AUC score

Baseline

 Minimum

0.453

0.062

0.643

0.303

0.694

 Maximum

0.540

0.075

0.677

0.373

0.739

 Average (SD)

0.492 (0.020)

0.068 (0.002)

0.663 (0.007)

0.344 (0.015)

0.719 (0.010)

Endline

 Minimum

0.000

0.026

0.884

0.790

0.980

 Maximum

0.008

0.031

0.900

0.816

0.986

 Average (SD)

0.003 (0.002)

0.028 (0.001)

0.891 (0.004)

0.802 (0.006)

0.983 (0.001)

  1. SD: standard deviation