Table 2.

Evaluation results obtained for predefined anomaly thresholds.

Setup	Avg. AUC	Avg. PR	Avg. TPR	Avg. FPR
Feature manipulation of objectType
Cross-session	0.922	0.930	0.759	0.028
Chronological (10%)	0.972	0.712	0.894	0.016
Transfer (90%)	0.943	0.931	0.710	0.090
Feature manipulation of objectCategory
Cross directories	0.986	0.973	0.906	0.028
Chronological (10%)	0.997	0.994	0.770	0.016
Transfer (90%)	0.975	0.952	0.769	0.090
Feature manipulation of alertRaised
Cross-session	0.987	0.975	0.963	0.028
Chronological (10%)	0.997	0.988	0.776	0.016
Transfer (90%)	0.974	0.950	0.750	0.090
Plot dropping
Cross-session	0.975	0.820	0.900	0.023
Chronological (10%)	0.987	0.916	0.937	0.026
Transfer (90%)	0.983	0.830	0.909	0.023