The result in Table 4 shows that 128 attack records were classified as normal (false positive). This number is bigger
than the result from Table 2 which means that rule-based classification generates a higher number of false positive
than decision tree.