Detection of Botnet Attacks against Industrial IoT Systems by Multilayer Deep Learning Approaches

Table 8

F1-score of the deep learning models with respect to each attack type.

Classes	ANN	ANN^B	LSTM	LSTM^B	GRU	GRU^B
Normal	0.25	0.91	0.82	0.98	0.84	0.99
dos_http	0	0.98	0.10	0.98	0.30	0.99
dos_tcp	0.98	1	0.95	1	0.96	1
dos_udp	1	1	1	1	1	1
ddos_http	0	0.93	0	0.94	0.15	0.96
ddos_tcp	0.99	1	0.97	1	0.97	1
ddos_udp	1	1	0.99	1	1	1
rcn_fngrprnt	0	0.97	0.99	1	1	1
rcn_scan	0.78	0.99	1	1	1	1
theft_data	0	0.87	0	0.87	0	0.86
theft_keylog	0.32	0.96	0	0.95	0	0.94

^BBalanced dataset.