Table 2 Attack types across NSL-KDD and CICIDS-2017.
Class | NSL-KDD Train | NSL-KDD Test | CICIDS-2017 Train | CICIDS-2017 Test |
---|---|---|---|---|
DoS | 67,343 | 9711 | 14,538 | 12,219 |
DDoS | – | – | 2700 | 3300 |
Probe | 11,656 | 2421 | 3808 | 4192 |
R2L | 995 | 3968 | 900 | 1100 |
U2R | 52 | 42 | 24 | 6 |
PortScan | – | – | 3808 | 4192 |
Bot | – | – | 936 | 624 |
Brute-Force | – | – | 1800 | 2200 |
Web Attack | – | – | 1406 | 654 |
Infiltration | – | – | 24 | 6 |
Normal | 67,343 | 9711 | 20,000 | 20,000 |