An improved content-based outlier detection method for ICS intrusion detection

EURASIP Journal on Wireless Communications and Networking

Table 3 Comparison of detection results

Dataset	ZOE method		Improved ZOE method		Data-driven clustering		Improved K-means clustering
	DRate	FRate	DRate	FRate	DRate	FRate	DRate	FRate
SORD	0.968	0.019	0.974	0.009	0.967	0.019	0.971	0.010
DUWWTP	0.985	0.020	0.988	0.008	0.980	0.203	0.982	0.109
MORD	0.929	0.006	0.948	0.003	0.928	0.007	0.932	0.004
MSU	0.944	0.010	0.959	0.009	0.938	0.013	0.943	0.012