Research Article

GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things

Table 8

The evaluation of GroupTracer and two comparison baselines using the Calinski–Harabasz, the Silhouette Coefficient, and the Davies–Bouldin index.

AlgorithmCalinski–HarabaszSilhouette CoefficientDavies–Bouldin# of clustersValue

GroupTracer3416.93110.53890.7367410 (threshold)
K-means model1212.78090.32461.180733 (K)
Meanshift model2199.92060.50040.6769250% (quantile)