OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

Table 1

Number of records in training dataset.

Traffic class	Records number
	Training	Test
Normal traffic	17539	9824
Attack traffic
SYN flood	2831	1566
UDP flood	2706	1591
ICMP flood	2519	1630
SYN & UDP flood	3054	1321
UDP & ICMP flood	2936	1729
SYN & ICMP flood	3144	1538