Hands-On Machine Learning for Cybersecurity

Features of the data

The KDD data that we use for this example has the following features that are listed as follows.

The following table shows the basic features of individual TCP connections:

Feature name	Description	Type
duration	Length (number of seconds) of the connection	continuous
protocol_type	Type of the protocol, for example, tcp, udp, and so on	discrete
service	Network service on the destination, for example, http, telnet, and so on	discrete
src_bytes	Number of data bytes from source to destination	continuous
dst_bytes	Number of data bytes from destination to source	continuous
flag	Normal or error status of the connection	discrete
land	1 if connection is from/to the same host/port; 0 otherwise	discrete
wrong_fragment ...