Apache Spark and Deep Learning Models for High-Performance Network Intrusion Detection Using CSE-CIC-IDS2018

Table 1

Attacks samples before and after resampling.

Class no.	Attack name	No. of samples before resampling	No. of samples after resampling
0	Benign	13,484,708	3,000,000
1	Bot	286,191	286,191
2	Brute Force-Web	611	25,000
3	Brute Force-XSS	230	25,000
4	DDOS attack-HOIC	686,012	686,012
5	DDOS attack-LOIC-UDP	1,730	10,000
6	DDoS attacks-LOIC-HTTP	576,191	576,191
7	DoS attack-GoldenEye	41,508	41,508
8	DoS attack-Hulk	461,912	461,912
9	DoS attack-SlowHTTPTest	139,890	139,890
10	DoS attack-Slowloris	10,990	10,990
11	FTP-Brute Force	193,360	193,360
12	Infilteration	161,934	161,934
13	SQL Injection	87	30,000
14	SSH-Brute Force	187,589	187,589
Total		16,232,943	5,835,577