Network Intrusion Detection on CIC-IoT-23 Generalization
100F1 ScoreKNOWML
Evaluation Results
| Method | Links | |
|---|---|---|
| KNOWMLDetection Model=GMM, Attack=DDoS-RSTFIN (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=DA, Attack=DDoS-RSTFIN (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-RSTFIN (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-SynIP (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=DA, Attack=DDoS-SynIP (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-SynIP (CIoT-23), Category=Composite2025.06 | 100 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-TCP (CIoT-23), Category=Composite2025.06 | 99.99 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-TCP (CIoT-23), Category=Composite2025.06 | 99.97 | |
| KNOWMLDetection Model=DA, Attack=DDoS-TCP (CIoT-23), Category=Composite2025.06 | 99.97 | |
| KITDetection Model=GMM, Attack=DDoS-SynIP (CIoT-23), Category=Composite2025.06 | 99.92 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 99.79 | |
| KNOWMLDetection Model=DA, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 99.79 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 99.79 | |
| KITDetection Model=EoA, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 98.73 | |
| SFSDetection Model=DA, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 98.03 | |
| SFSDetection Model=EoA, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 98.02 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-PSHACK (CIoT-23), Category=Composite2025.06 | 97.78 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-PSHACK (CIoT-23), Category=Composite2025.06 | 97.72 | |
| SFSDetection Model=GMM, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 97.68 | |
| KNOWMLDetection Model=DA, Attack=DDoS-PSHACK (CIoT-23), Category=Composite2025.06 | 97.53 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-HTTP (CIoT-23), Category=Composite2025.06 | 96.96 | |
| KITDetection Model=DA, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 96.2 | |
| KNOWMLDetection Model=DA, Attack=DDoS-HTTP (CIoT-23), Category=Composite2025.06 | 94.76 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-HTTP (CIoT-23), Category=Composite2025.06 | 94.76 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 94.38 | |
| KNOWMLDetection Model=DA, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 94.38 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-ACK Frag (CIoT-23), Category=Composite2025.06 | 94.38 | |
| CICDetection Model=GMM, Attack=DDoS-SYN (CIoT-23), Category=Composite2025.06 | 90.99 | |
| SFSDetection Model=GMM, Attack=DDoS-HTTP (CIoT-23), Category=Composite2025.06 | 83.6 | |
| KNOWMLDetection Model=GMM, Attack=DDoS-Slowloris (CIoT-23), Category=Non-Throughput2025.06 | 81.14 | |
| KNOWMLDetection Model=EoA, Attack=DDoS-Slowloris (CIoT-23), Category=Non-Throughput2025.06 | 75.6 | |
| KNOWMLDetection Model=DA, Attack=DDoS-Slowloris (CIoT-23), Category=Non-Throughput2025.06 | 75.48 | |
| CICDetection Model=GMM, Attack=DDoS-RSTFIN (CIoT-23), Category=Composite2025.06 | 70.57 |