A Modified Hybrid Method Based on PSO, GA, and K-Means for Network Anomaly Detection

Table 1

Network data identification type.

Identification type	Meaning	Specific classification identification
Normal	Normal record	Normal
DoS	Denial of service attack	Back, land, Neptune, pod, smurf, teardrop
Probe	Monitoring and other detection activities	Ipsweep, nmap, portsweep, Satan
R2L	Unauthorized access from remote machine	ftp_write, guess_passwd, imap, multihop, phf, spy, warezclient, warezmaster
U2R	Unauthorized access to root authority by ordinary users	buffer_overflow, loadmodule, perl, rootkit