An Efficient Communication Intrusion Detection Scheme in AMI Combining Feature Dimensionality Reduction and Improved LSTM

Table 3

Features in the UNSW-NB15 dataset.

Number	Feature	Feature type	Data type
1	proto	Flow features	Nominal
2	state	Base features	Nominal
3	dur	Base features	Float
4	sbytes	Base features	Integer
5	dbytes	Base features	Integer
6	sttl	Base features	Integer
7	dttl	Base features	Integer
8	sloss	Base features	Integer
9	dloss	Base features	Integer
10	service	Base features	Nominal
11	sload	Base features	Float
12	dload	Base features	Float
13	spkts	Base features	Integer
14	dpkts	Base features	Integer
15	swin	Content features	Integer
16	dwin	Content features	Integer
17	stcpb	Content features	Integer
18	dtcpb	Content features	Integer
19	smeansz	Content features	Integer
20	dmeansz	Content features	Integer
21	trans_depth	Content features	Integer
22	res_bdy_len	Content features	Integer
23	sjit	Time features	Float
24	djit	Time features	Float
25	rate	Time features	Float
26	sintpkt	Time features	Float
27	dintpkt	Time features	Float
28	tcprtt	Time features	Float
29	synack	Time features	Float
30	ackdat	Time features	Float
31	is_sm_ips_ports	Additional generated features	Binary
32	ct_state_ttl	Additional generated features	Integer
33	ct_flw_http_mthd	Additional generated features	Integer
34	is_ftp_login	Additional generated features	Binary
35	ct_ftp_cmd	Additional generated features	Integer
36	ct_srv_src	Additional generated features	Integer
37	ct_srv_dst	Additional generated features	Integer
38	ct_dst_ltm	Additional generated features	Integer
39	ct_src_ltm	Additional generated features	Integer
40	ct_src_dport_ltm	Additional generated features	Integer
41	ct_dst_sport_ltm	Additional generated features	Integer
42	ct_dst_src_ltm	Additional generated features	Integer
43	attack_cat	Labeled features	Nominal
44	Label	Labeled features	Binary