[Retracted] Adaptive Anomaly Detection Framework Model Objects in Cyberspace

Table 2

Top ranked features of KDD Cup’99 using information gain method.

Feature’s number	Feature’s name
f26	srv_serror_rate
f29	same_srv_rate
f36	dst_host_same_src_port_rate
F40	dst_host_rerror_rate
F35	dst_host_diff_srv_rate
F23	Count
F9	Urgent
F32	diff_srv_rate
F29	dst_host_srv_count
F21	host_login