Table 2 Dataset attributes information.

From: Explainable artificial intelligence for botnet detection in internet of things

Stream aggregation designation

Stream aggregation description

Stream characteristics (statistical aggregation functions)

Count

Time frame

Features

Weight

Mean

Variance/Standard deviation

Magnitude

Radius

Covariance

Correlation coefficient

H

Host Source IP

✓

✓

Variance

x

x

x

x

3

5

15

MI

Host Source IP + MAC

✓

✓

Variance

x

x

x

x

3

5

15

HH

Host-to-host channel (Source IP to destination IP)

✓

✓

Std

✓

✓

✓

✓

7

5

35

HH_Jit

Host-to-host channel jitter

✓

✓

Variance

x

x

x

x

3

5

15

HpHp

Host port to Host port channel (IP + Socket)

✓

✓

Std

✓

✓

✓

✓

7

5

35

Tot. Traffic characteristics

23

Tot. Features

115