Fig. 3
True (left) and false (right) positive rates as defined in (10) for APT detections using the model of “Markov chain models for DCNs” section and as functions of a per-window frequency threshold μ and for varying flow probability thresholds λ
Fig. 3 | Applied Network Science