An Efficient and Effective Approach for Flooding Attack Detection in Optical Burst Switching Networks

Table 1

The description of the dataset features.

No.	Feature name	Feature description
1	Node	It is a numeric feature representing the number of node that sends the data traffic.
2	Utilized bandwidth rate	It is a numeric feature representing the rate of bandwidth used.
3	Packet drop rate	It is a numeric feature representing the rate of packet drop.
4	Reserved bandwidth	It is a numeric feature denoting the initial reserved bandwidth assigned to a given node.
5	Average delay time per sec	It is a numeric feature denoting the average delay time per second for each node. It is also called end-to end delay feature.
6	Percentage of lost packet rate	It is a numeric feature representing the percentage rate of lost packets for each node.
7	Percentage of lost byte rate	It is a numeric feature representing the percentage rate of lost bytes for each node.
8	Packet received rate	It is a numeric feature representing the packet received rate per second for each node based on the reserved bandwidth.
9	Used bandwidth	It is a numeric feature represents the bandwidth used or what each could reserve from the reserved bandwidth.
10	Lost bandwidth	It is a numeric feature denoting the lost amount of bandwidth by each node from the reserved bandwidth.
11	Packet size byte	It is a numeric feature denoting the packet size in bytes allocated explicitly for each node to transmit. For instance, if the data size is 1440 bytes and there are 60 bytes for (IP header 40 bytes) + (UDP header 20 bytes), then all headers will be added to the data size to get 1500 byte as follows: packet size = ((data size 1440 bytes) + (IP header 40 bytes) + (UDP header 20 bytes)) = 1500 bytes.
12	Packet transmitted	This is a numeric feature representing the total packets transmitted per second for each node based on the reserved bandwidth.
13	Packet received	This is a numeric feature representing the total packets received per second for each node based on the reserved bandwidth.
14	Packet lost	This is a numeric feature representing the total packets lost per second for each node based on the lost bandwidth.
15	Transmitted byte	This is a numeric feature representing the total bytes transmitted per second for each node.
16	Received byte	It is a numeric feature denoting the total bytes received per second for each node based on the reserved bandwidth.
17	10-run-AVG-drop-rate	This is a numeric feature representing the rate of average packets that drop for 10 consecutive iterations and runs.
18	10-run-AVG-bandwidth-use	It is a numeric feature representing the average bandwidth that is utilized for 10 consecutive iterations and runs.
19	10-run-delay	This is a numeric feature representing the time of average delay for 10 consecutive (run) iterations.
20	Node status	This is a categorical feature. It is an initial classification of nodes based on the rate of packet drop, used bandwidth, and average delay time per second. The categorical values are B for behaving, NB for not behaving, and PNB for potentially not behaving.
21	Flood status	This is a numeric feature that represents the percentage of flood per node. It is based on the packet drop rate, medium, and high level of BHP flood attack in case behaving (B).
22	Class label	This feature is a categorical feature that represents the final classification of nodes based on the packet drop rate, reserved bandwidth, number of iterations, used bandwidth, and packet drop rate. The categorical values of the class label are NB-no block, block, no block, and NB-wait