Table 1 Attack-type distribution
From: Intrusion detection system combined enhanced random forest with SMOTE algorithm
Attack type | Class | Subclass |
|---|---|---|
Normal | Normal | normal |
Anomaly | Probe | ipsweep, mscan, nmap, portsweep, saint, satan |
DOS | apache2, back, land, mailbomb, neptune, pod, processtable, smurf, teardrop, udpstorm | |
U2R | buffer_overflow, httptunnel, loadmodule, perl, ps, rootkit, sqlattack, xterm | |
R2L | ftp_write, guess_passwd, imap, multihop, named, phf, sendmail, snmpgetattack, snmpguess, spy, warezclient, warezmaster, worm, xlock, xsnoop |