GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things

<div>The evaluation of GroupTracer using the three indicators, where the value of threshold ranges from 1 to 20: (a) Silhouette Coefficient; (b) Davies–Bouldin; (c) Calinski–Harabasz.</div>

Security and Communication Networks

fig6

Figure 6

Figure 6: GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things 