A Novel Framework Design of Network Intrusion Detection Based on Machine Learning Techniques

Table 1

Features of each network traffic in CICIDS2017.

No.	Feature
1	Flow ID
2	Source IP
3	Source port
4	Destination IP
5	Destination port
6	Protocol
7	Timestamp
8	Flow duration
9	Total fwd packets
10	Total backward packets
11	Total length of fwd packets
12	Total length of bwd packets
13	Fwd packet length max
14	Fwd packet length min
15	Fwd packet length mean
16	Fwd packet length std
17	Bwd packet length max
18	Bwd packet length min
19	Bwd packet length mean
20	Bwd packet length std
21	Flow bytes/s
22	Flow packets/s
23	Flow IAT mean
24	Flow IAT std
25	Flow IAT max
26	Flow IAT min
27	Fwd IAT total
28	Fwd IAT mean
29	Fwd IAT std
30	Fwd IAT max
31	Fwd IAT min
32	Bwd IAT total
33	Bwd IAT mean
34	Bwd IAT std
35	Bwd IAT max
36	Bwd IAT min
37	Fwd PSH flags
38	Bwd PSH flags
39	Fwd URG flags
40	Bwd URG flags
41	Fwd header length
42	Bwd header length
43	Fwd packets/s
44	Bwd packets/s
45	Min packet length
46	Max packet length
47	Packet length mean
48	Packet length std
49	Packet length variance
50	FIN flag count
51	SYN flag count
52	RST flag count
53	PSH flag count
54	ACK flag count
55	URG flag count
56	CWE flag count
57	ECE flag count
58	Down/up ratio
59	Average packet size
60	Avg fwd segment size
61	Avg bwd segment size
62	Fwd header length
63	Fwd avg bytes/bulk
64	Fwd avg Packets/bulk
65	Fwd avg bulk rate
66	Bwd avg bytes/bulk
67	Bwd avg Packets/bulk
68	Bwd avg bulk rate
69	Subflow fwd packets
70	Subflow fwd bytes
71	Subflow bwd packets
72	Subflow bwd bytes
73	Init_Win_bytes_forward
74	Init_Win_bytes_backward
75	act_data_pkt_fwd
76	min_seg_size_forward
77	Active mean
78	Active std
79	Active max
80	Active min
81	Idle mean
82	Idle std
83	Idle max
84	Idle min
85	Label