Intrusion Detection System Based on Decision Tree over Big Data in Fog Environment

Table 2

Class identifier of KDDCUP99.

Classification	Meaning	Subclass
Normal	Normal record	normal
DOS	Denial of service attack	Back land Neptune pod; smurf teardrop
Probing	Monitoring and other detection activities	Ipsweep nmap; portsweep satan
R2L	Illegal access from remote machines	ftp_write guess_passwd; imap multihop phf spy; warezclient arezmaster
U2R	Unauthorized access of ordinary users' to privileges of administrator	buffer_overflow; loadmodule perl rootkit