Table 27 Class distribution of the database.
From: A hybrid deep learning model for detection and mitigation of DDoS attacks in VANETs
Class type | Training phase (Flows) | Testing phase (Flows) |
|---|---|---|
Benign |  ~ 1,200,000 |  ~ 600,000 |
DDoS—NTP |  ~ 850,000 | - |
DDoS—DNS |  ~ 810,000 | - |
DDoS—LDAP |  ~ 700,000 |  ~ 180,000 |
DDoS—MSSQL |  ~ 600,000 |  ~ 150,000 |
DDoS—NetBIOS |  ~ 500,000 |  ~ 170,000 |
DDoS—SNMP |  ~ 450,000 | - |
DDoS—SSDP |  ~ 430,000 | - |
DDoS—UDP |  ~ 900,000 |  ~ 200,000 |
DDoS—UDP-Lag |  ~ 870,000 |  ~ 220,000 |
DDoS—WebDDoS |  ~ 410,000 | - |
DDoS—SYN |  ~ 950,000 |  ~ 210,000 |
DDoS—TFTP |  ~ 390,000 | - |
PortScan | - |  ~ 160,000 |
