[Retracted] Adaptive Anomaly Detection Framework Model Objects in Cyberspace

Table 4

Top ranked features of CIC-ID2017 using information gain method.

Feature’s number	Feature’s name
F15	Flow bytes/s
F16	Flow packets/s
F41	Packet length mean
F11	Bwd packet length max
F40	Max packet length
F13	Bwd packet length mean
F55	Avg Bwd segment size
F42	PSH flag count
F14	Bwd packet length Std
F53	Average packet size