ePrints

Proper Use of ROC Curves in Intrusion/Anomaly Detection

Lookup NU author(s): Professor Roy Maxion

Downloads

• Published version [.pdf]

Abstract

ROC curves (receiver operating characteristic curves) are commonly used to portray the performance of detectors in signal-detection tasks, such as intrusion detection. This report introduces the origins of signal-detection-theory, and the underpinnings of ROC curves. It provides examples of how to construct these curves, as well as how to measure, interpret and compare them. Information about accommodating cost of error is included. Materials are suggested for further reading.

Publication metadata

Author(s): Maxion RA, Roberts RR

Publication type: Report

Publication status: Published

Series Title: School of Computing Science Technical Report Series

Year: 2004

Pages: 33

Print publication date: 01/11/2004

Source Publication Date: November 2004

Report Number: 871

Institution: School of Computing Science, University of Newcastle upon Tyne

Place Published: Newcastle upon Tyne

URL: http://www.cs.ncl.ac.uk/publications/trs/papers/871.pdf

Share