I²DS: Interpretable Intrusion Detection System Using Autoencoder and Additive Tree

Table 3

Feature description of UNSW-NB15 training set and testing set.

Categories	Features	Categories	Features
Flow features	Proto	Basic features	State
	Rate		dur
Content features	swin		sbytes
	dwin		dbytes
	stcpb		Sttl
	dtcpb		dttl
	smeansz		sloss
	dmeansz		dloss
	trans_depth		Service
	res_bdy_len		sload
Additional generated features	is_sm_ips_ports		dload
	ct_state_ttl		spkts
	is_ftp_login		dpkts
	ct_ftp_cmd	Time features	sjit
	ct_srv_src		djit
	ct_srv_dst		sintpkt
	ct_dst_ltm		dintpkt
	ct_src_ ltm		tcprtt
	ct_src_dport_ltm		synack
	ct_dst_sport_ltm		ackdat
	ct_dst_src_ltm	Class	Label