Smart Detection: An Online Approach for DoS/DDoS Attack Detection Using Machine Learning

Table 3

Extracted variables.

#	Variable	Detail
01	ip_proto	Normalized protocol number
02	ip_len_mean	Mean of IP length
03	ip_len_median	Median of IP length
04	ip_len_var	Variance of IP length
05	ip_len_std	Stand. deviation of IP length
06	ip_len_entropy	Entropy of IP length
07	ip_len_cv	Coeff. of variation of IP length
08	ip_len_cvq	Quantile coeff. of IP length
09	ip_len_rte	Rate change of IP length
10	sport_mean	Mean of src port
11	sport_median	Median of src port
12	sport_var	Variance of src port
13	sport_std	Stand. deviation of src port
14	sport_entropy	Entropy of src port
15	sport_cv	Coeff. of variation of src port
16	sport_cvq	Quantile coeff. of src port
17	sport_rte	Rate change of src port
18	dport_mean	Mean of dest. port
19	dport_median	Median of dest. port
20	dport_var	Variance of dest. port
21	dport_std	Stand. deviation of dest. port
22	dport_entropy	Entropy of dest. port
23	dport_cv	Coeff. of variation of dest. port
24	dport_cvq	Quantile coeff. of dest. port
25	dport_rte	Rate change of dest. port
26	tcp_flags_mean	Mean of TCP flags
27	tcp_flags_median	Median of TCP flags
28	tcp_flags_var	Variance of TCP flags
29	tcp_flags_std	Stand. deviation of TCP flags
30	tcp_flags_entropy	Entropy of TCP flags
31	tcp_flags_cv	Coeff. of variation of TCP flags
32	tcp_flags_cvq	Quantile coeff. of TCP flags
33	tcp_flags_rte	Rate change of TCP flags