GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things

Table 4

Several significant time-series characteristics.

#	Feature name	Description
1	maximum	The largest value of the time series
2	minimum	The smallest value of the time series
3	length	Number of attack periods per IP
4	mean	A measure of the central tendency
5	median	The “middle” value
6	standard_deviation	The square root of its variance
7	variance	The expectation of the squared deviation of a random variable from its mean
8	sum_value	Calculates the sum over the time-series values