From: Fusion of transformer and ML-CNN-BiLSTM for network intrusion detection
Identified as attack
Recognized as normal
Originally attack traffic
\({\text{TP}}\)
\({\text{FN}}\)
Originally normal flow
\({\text{FP}}\)
\({\text{TN}}\)