Research Article
GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things
Table 8
The evaluation of GroupTracer and two comparison baselines using the Calinski–Harabasz, the Silhouette Coefficient, and the Davies–Bouldin index.
| Algorithm | Calinski–Harabasz | Silhouette Coefficient | Davies–Bouldin | # of clusters | Value |
| GroupTracer | 3416.9311 | 0.5389 | 0.7367 | 4 | 10 (threshold) | K-means model | 1212.7809 | 0.3246 | 1.1807 | 3 | 3 (K) | Meanshift model | 2199.9206 | 0.5004 | 0.6769 | 2 | 50% (quantile) |
|
|