A Neighbor Prototype Selection Method Based on CCHPSO for Intrusion Detection

Table 2

Features of the KDD99 and NSL.

Feature representation	Feature name
F1	Duration
F2	protocol_type
F3	Service
F4	Flag
F5	src_bytes
F6	dst_bytes
F7	Land
F8	wrong_fragment
F9	Urgent
F10	Hot
F11	num_failed_logins
F12	logged_in
F13	num_compromised
F14	root_shell
F15	su_attempted
F16	num_root
F17	num_file_creations
F18	num_shells
F19	num_access_files
F20	num_outbound_cmds
F21	is_hot_login
F22	is_guest_login
F23	Count
F24	srv_count
F25	serror_rate
F26	srv_serror_rate
F27	rerror_rate
F28	srv_rerror_rate
F29	same_srv_rate
F30	diff_srv_rate
F31	srv_diff_host_rate
F32	dst_host_count
F33	dst_host_srv_count
F34	dst_host_same_srv_rate
F35	dst_host_diff_srv_rate
F36	dst_host_same_src_port_rate
F37	dst_host_srv_diff_host_rate
F38	dst_host_serror_rate
F39	dst_host_srv_serror_rate
F40	dst_host_rerror_rate
F41	dst_host_srv_rerror_rate