Prospective Worst-Attack Reliability Floors for Flow-Based Machine-Learning Intrusion Detection under Forward-Time Shift
Flow-based machine-learning intrusion detectors are commonly assessed using aggregate scores, which can conceal weak attack-family recall. This study tests a source-calibrated minimum-recall floor on a short forward-time UNSW-NB15 capture as a proof of methodology. Four raw files were deduplicated to 2,059,414 flows an...