Between Zeros and Ones: Behavioral Characterization Beyond Binary Labeling Across Public ICS Datasets

Konstantinos E. Kampourakis, Vyron Kampourakis, Georgios Spathoulas +1

Intrusion detection in Industrial Control Systems (ICS) is typically evaluated on a small set of public benchmarks using binary ``normal'' versus ``attack'' labels, a practice that…