Predicting the APT for Cyber Situation Comprehension in 5G-Enabled IoT Scenarios Based on Differentially Private Federated Learning

Table 4

Log instance features extracted from log records.

Type	Logs	Features	Annotation
1	Log3	h_ip	Host IP address
2	Log3	d_ip	Destination IP address
3	Log3	h_port	Host port number
4	Log3	d_port	Destition port number
5	Log3	Type	Request/response
6	Log5	q_domain	D queried domain name
7	Log5	r_ip	DNS resolved IP address
8	Log2	Ppid	Base-16 parent process ID
9	Log1 Log2 Log3	Pid	Base-16 process ID
10	Log1 Log2 Log3 Log6	Pname	Process
11	Log1	Objname	Object name
12	Log4	res_code	Response code
13	Log4	Referer	Refer of requested URI
14	Log1-Log6	Timestamp	Event timestamp