Research Article

A Fusion of Multiagent Functionalities for Effective Intrusion Detection System

Table 7

Features for clustering process.

Categories⁢Features selected

Cluster TCPNumber of unique ports accessedMean packet sizeNumber of RST packetsTime range covered by frame
Cluster UDPNumber of unique ports accessedMean packet sizeNumber of ICMP packetsTime range covered by frame
Cluster SYN floodNumber of unique ports accessedNumber of open connections attemptedNumber of RST packetsTime range covered by frame