Fusion of Heterogeneous Intrusion Detection Systems for Network Attack Detection

Table 4

Confusion matrix.

	Predicted attack	Predicted normal
Actual attack	True positive (TP)	False negative (FN)
Actual normal	False positive (FP)	True negative (TN)

True positive (TP): the number of attacks detected when it is actually attack.
True negative (TN): the number of normal detected when it is actually normal.
False positive (FP): the number of attacks detected when it is actually normal.
False negative (FN): the number of normal detected when it is actually attack.