Network Intrusion Detection Method Based on PCA and Bayes Algorithm

Table 3

Statistical characteristics of network traffic.

Features	Descriptions
count	The number of connections with the same target host as the current connection
srv_count	The number of connections with the same service as the current connection
serror_rate	Percentage of connections with “SYN” errors in connections with the same target host as the current connection
srv_serror_rate	Percentage of connections with “SYN" errors in connections with the same service as the current connection
rerror_rate	Percentage of connections with “REJ" errors in connections with the same target host as the current connection
srv_rerror_rate	Percentage of connections with “REJ" errors in connections with the same service as the current connection
same_srv_rate	Percentage of connections with the same destination as the current connection in the connection with the same target host as the current connection
diff_srv_rate	Percentage of connections with different services from the current connection in connections with the same target host as the current connection
srv_diff_host_rate	Percentage of connections with different target hosts for the current connection in the connection with the same service as the current connection