LNNLS-KH: A Feature Selection Method for Network Intrusion Detection

Table 9

The number and name of the features in the CICIDS2017 dataset.

Feature number	Feature name	Feature number	Feature name	Feature number	Feature name
1	Destination port	27	Bwd IAT mean	53	Average packet size
2	Flow duration	28	Bwd IAT std	54	Avg fwd segment size
3	Total fwd packets	29	Bwd IAT max	55	Avg bwd segment size
4	Total backward packets	30	Bwd IAT min	56	Fwd header length
5	Total length of fwd packets	31	Fwd PSH flags	57	Fwd avg bytes/bulk
6	Total length of bwd packets	32	Bwd PSH flags	58	Fwd avg packets/bulk
7	Fwd packet length max	33	Fwd URG flags	59	Fwd avg bulk rate
8	Fwd packet length min	34	Bwd URG flags	60	Bwd avg bytes/bulk
9	Fwd packet length mean	35	Fwd header length	61	Bwd avg packets/bulk
10	Fwd packet length std	36	Bwd header length	62	Bwd avg bulk rate
11	Bwd packet length max	37	Fwd Packets/s	63	Subflow fwd packets
12	Bwd packet length min	38	Bwd Packets/s	64	Subflow fwd bytes
13	Bwd packet length mean	39	Min packet length	65	Subflow bwd packets
14	Bwd packet length std	40	Max packet length	66	Subflow bwd bytes
15	Flow bytes/s	41	Packet length mean	67	Init_Win_bytes_forward
16	Flow packets/s	42	Packet length std	68	Init_Win_bytes_backward
17	Flow IAT mean	43	Packet length variance	69	act_data_pkt_fwd
18	Flow IAT std	44	FIN flag count	70	min_seg_size_forward
19	Flow IAT max	45	SYN flag count	71	Active mean
20	Flow IAT min	46	RST flag count	72	Active std
21	Fwd IAT total	47	PSH flag count	73	Active max
22	Fwd IAT mean	48	ACK flag count	74	Active min
23	Fwd IAT std	49	URG flag count	75	Idle mean
24	Fwd IAT max	50	CWE flag count	76	Idle std
25	Fwd IAT min	51	ECE flag count	77	Idle max
26	Bwd IAT total	52	Down/up ratio	78	Idle min