Anomaly Detection and Attack Reconstruction on SynthChain
94.8AUROCAlert-only (IDS)
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| Alert-only (IDS)Scenarios=3/7, Latency (ms/1k)=36.42026.06 | 94.8 | 41.8 | 12.7 | 22.2 | |
| FuseChainScenarios=7/7, Latency (ms/1k)=176.02026.06 | 63.8 | 19.8 | 21.5 | 40.5 | |
| Freq-rarityScenarios=7/7, Latency (ms/1k)=44.62026.06 | 55.3 | 14.5 | 5.5 | 22.6 | |
| Path-LOF (path-based Local Outlier Factor)Scenarios=7/7, Latency (ms/1k)=34.22026.06 | 55.3 | 14.5 | 5.5 | 22.6 | |
| Network-sensor-only (network)Scenarios=3/7, Latency (ms/1k)=35.72026.06 | 55 | 14.1 | 11.3 | 36.1 | |
| GraphSAGE (static homogeneous graph)Scenarios=7/7, Latency (ms/1k)=0.32026.06 | 54.2 | 15.1 | 20.4 | 34.5 | |
| RGCN (static heterogeneous graph)Scenarios=7/7, Latency (ms/1k)=1.22026.06 | 54.1 | 13.5 | 9.8 | 35.7 | |
| Audit-only (provenance)Scenarios=6/7, Latency (ms/1k)=37.52026.06 | 52.1 | 14 | 6.4 | 22.2 |