Table 4 Some selected features in NSL-KDD
From: Transfer learning for detecting unknown network attacks
Feature name | Description | Feature category |
|---|---|---|
Duration | Duration of the connection | Basic features |
Src_bytes | Data bytes from source to destination | Basic feature |
Dst_bytes | Data bytes from destination to source | Basic feature |
Num_failed_logins | Number of incorrect login in a connection | Content feature |
Srv_count | Sum of connections to the same destination port number | Traffic feature |
Serror_rate | Percentage of connections that have “SYN” errors among the connections to the same host in the past 2 s | Traffic feature |
Srv_serror_rate | Percentage of connections that have “SYN” errors among the connections to the same destination port in the past 2 s | Traffic feature |
Dst_host_count | Sum of connections to the same destination IP address | Traffic feature |
Dst_host_same_srv_rate | The percentage of connections that were to the same service, among the connections aggregated in dst_host_count | Traffic feature |