Improving the Accuracy of Network Intrusion Detection with Causal Machine Learning

Table 2

Description of features in the UNSW_NB15 dataset.

Feature name	Description
Flow ID	Flow id
Srcip	Source Ip
Sport	Source port number
Dstip	Destination IP address
Dsport	Destination port number
Proto	Representation number of the protocol
Dur	Record total duration
Spkts	Source to destination packet count
Dpkts	Destination to source packet count
Sjit	Source jitter (mSec)
Sintpkt	Source interpacket arrival time (mSec)
Ct_ftp_cmd	No of flows that has a command in ftp session
Tcprtt	The sum of “synack” and “ackdat” of the TCP
Ltime	Record last time