A Method of Intrusion Detection Based on WOA-XGBoost Algorithm

Table 1

Characteristics of KDD CUP 99 dataset.

Feature no.		Feature name	Feature no.		Feature name
0	Basic features of individual TCP connections	duration	22	Traffic features computed using a two-second time window	count
1		protocol_type	23		srv_count
2		service	24		serror_rate
3		flag	25		srv_serror_rate
4		src_bytes	26		rerror_rate
5		dst_bytes	27		srv_rerror_rate
6		land	28		same_srv_rate
7		wrong_fragment	29		diff_srv_rate
8		urgent	30		srv_diff_host_rate
9	Content features within a connection suggested by domain knowledge	hot	31	Host-based network traffic statistics characteristics	dst_host_count
10		num_failed_logins	32		dst_host_srv_count
11		logged_in	33		dst_host_same_srv_rate
12		num_compromised	34		dst_host_diff_srv_rate
13		root_shell	35		dst_host_same_src_port_rate
14		su_attempted	36		dst_host_srv_diff_host_rate
15		num_root	37		dst_host_serror_rate
16		num_file_creations	38		dst_host_srv_serror_rate
17		num_shells	39		dst_host_rerror_rate
18		num_access_files	40		dst_host_srv_rerror_rate
19		num_outbound_cmds
20		is_hot_login
21		is_guest_login