Table 4 Feature scores by ExtraTrees classifier for DoS attack in the UNSW dataset

is_ftp_login

0.000429706

ct_ftp_cmd

0.000555861

trans_depth

0.003995418

is_sm_ips_sport

0.004405755

ct_flw_fttp_mthd

0.004472606

swin

0.005013446

state

0.007730736

ct_state_ttl

0.009660607

response_body_len

0.011350468

sloss

0.012895271

dloss

0.013546359

dpkts

0.014662184

dtcpb

0.014982101

synack

0.016172927

dinpkt

0.016299402

spkts

0.016379687

tcprtt

0.016397195

djit

0.016837784

sjit

0.017782288

ct_src_dport_ltm

0.020360274

stcpb

0.021925168

sttl

0.021994751

ackdat

0.02219905

ct_src_ltm

0.023103935

dmean

0.0231134

ct_dst_ltm

0.02347893

sinpkt

0.02396061

dbytes

0.024039132

service

0.024705258

dur

0.02809861

dload

0.029781236

rate

0.030608379

dwin

0.031516652

sttl

0.034695868

sload

0.040628565

ct_dst_sport_ltm

0.043927692

ct_dst_src_ltm

0.049993128

ct_srv_dst

0.055067287

ct_svr_src

0.055864165

sbytes

0.073172393

smean

0.094195716