Table 5 CICIDS2017 label classification and quantity distribution.

From: A multi-information fusion anomaly detection model based on convolutional neural networks and AutoEncoder

Types of streams

Original quantity

Normal

339,621

Dos

 DoS GoldenEye

7458

 DoS Hulk

14,108

 DoS Slowloris

4216

 DoS Slowhttp

3869

Web attack

 Brute Force

1353

 SQL Injection

12

 XSS

631

SSH Patator

2511

FTP Patator

3907

BotNet

1441

Port Scan

158,673

DDos

16,050