Towards Effective Detection of Recent DDoS Attacks: A Deep Learning Approach

Table 2

Feature list selected per ensemble group and strategy.

Ensemble group	Ensemble list	Top 10 Weight
Ensemble group 1	Protocol	Min Packet Length
	URG Flag Count	Init_Win_bytes_forward
	Flow Duration	ACK Flag Count
	Flow IAT Mean	Fwd Packet Length Min
	Flow IAT Std	Average Packet Size
		Fwd Packet Length Max
		Flow IAT Max
		Flow Packets/s
		Init_Win_bytes_backward
		Flow IAT Min
Ensemble group 2	Flow Packets/s	Min Packet Length
	Fwd Header Length	Init_Win_bytes_forward
	Fwd Packets/s	Fwd Packet Length Min
	Min Packet Length	ACK Flag Count
	Average Packet Size	Fwd Packet Length Mean
		Avg Fwd Segment Size
		Total Backward Packets
		Total Length of Fwd Packets
		Flow Packets/s
		Flow IAT Min
Ensemble group 3	Protocol	Min Packet Length
	Total Fwd Packets	Init_Win_bytes_forward
	Fwd PSH Flags	ACK Flag Count
	Bwd URG Flags	Bwd Packets/s
	Fwd Header Length	Fwd Packet Length Min
	Bwd Header Length	Flow IAT Min
	Flow Duration	Flow Duration
	Fwd Packet Length Min	Flow Packets/s
	Flow Bytes/s	min_seg_size_forward
	Flow IAT Max	Flow Bytes/s
	Average Packet Size
Ensemble group 4	Fwd PSH Flags	Min Packet Length
	Bwd PSH Flags	Init_Win_bytes_forward
	Fwd URG Flags	ACK Flag Count
	Bwd URG Flags	Fwd Packet Length Mean
	FIN Flag Count	Flow Bytes/s
	URG Flag Count	Bwd IAT Total
	Subflow Fwd Bytes	Flow IAT Std
	Init_Win_bytes_backward	Flow IAT Min
	Fwd Packet Length Min	Fwd Packet Length Min
	Flow IAT Std	Flow Duration
	Fwd IAT Min
	Fwd Packets/s
	Min Packet Length
	Packet Length Mean
	Packet Length Std