Journal of Computer Networks and Communications

Research Article

Towards the Development of a Cloud Computing Intrusion Detection Framework Using an Ensemble Hybrid Feature Selection Approach

Table 1

NSL KDD dataset features as referred to in this study.
F/NFeature nameTypeDescription
F1DurationNumericThe length of the connection process
F2Protocol_typeStringThe connection protocol type of a packet (TCP, UDP, etc.)
F3ServiceStringThe type of network service at the destination (e.g., Http)
F4FlagStringThe normal or error status of the connection
F5Src_bytesNumericThe number of data bytes sent, i.e., source to destination
F6DstbytesNumericThe number of data bytes received, i.e., destination to source
F7LandNumericTo check if a connection is from the same host or not (1 or 0)
F8Wrong fragmentNumericThe total number of wrong fragments of a connection
F9UrgentNumericThe total number of the packet that is urgent
F10HotNumericThe total number of hot indicators in a packet
F11NumfailedloginsNumericThe total number of times login attempt failed by a connection
F12LoggedinNumericLogin status of a connection (1 successful, 0 failed)
F13NumcompromisedNumericThe total number of compromised conditions
F14RootshellNumericTo determine if a root shell is obtained or not (1 yes 0 no)
F15SuattemptedNumericTo check if a super user root command is attempted or not
F16NumrootNumericThe total number of root accesses
F17NumfilecreationsNumericThe total number of file creation activities attempted
F18NumshellsNumericThe total number of shell prompts recorded
F19NumaccessfilesNumericThe total number of attempts in access control files
F20NumoutboundcmdsNumericThe total number of outbound commands in file transfer task
F21IshostloginNumericTo check the login belong to the host list or not
F22IsguestloginNumericTo check if the login is guest or not
F23CountNumericThe total number of connection to the same host as the current connection in the last two seconds
F24SrvcountNumericThe total number of connection to the same service as the current connection in the last two seconds
F25SerrorrateNumericTotal (%) of connection that has “SYN” errors in same-host connection
F26SrvserrorrateNumericTotal (%) of connection that has “SYN” errors in same-service connection
F27RerrorrateNumericTotal (%) of connection that has “REJ” errors in same-host connection
F28SrvrerrorrateNumericTotal (%) of connection that has “REJ” errors in same-service connection
F29SamesrvrateNumericThe total (%) of connection to the same service connection
F30DiffsrvrateNumericThe total (%) of connection to different services
F31SrvdiffhostrateNumericThe total (%) of connection to a different host
F32DsthostcountNumericThe total (%) count of connection having the same destination host
F33DsthostsrvcountNumericThe total (%) count of connection; having the same destination host and using the same service
F34DsthostsamesrvrateNumericThe total (%) of connection having the same destination host and using the same service
F35DsthostdiffsrvrateNumericThe total (%) of different services on the current host
F36DsthostsamesrcportrateNumericThe total (%) of connection to the current host having the same port
F37DsthostsrvdiffhostrateNumericThe total (%) of connection to the same service coming from different hosts
F38DsthostserrorrateNumericThe total (%) of connection to the current host that has a SO error
F39DsthostsrvserrorrateNumericThe total (%) of connection to the current host and specified service that has a SO error
F40DsthostrerrorrateNumericThe total (%) of connection to the current host that has an RST error
F41DsthostsrvrerrorrateNumericThe total (%) of connection to the current host and specified service that have an RST error