Task-Oriented Network Abnormal Behavior Detection Method

Table 1

Correspondence between state and function.

State name	Function ID
START	start_ftp
CONNECT	connect_21
AUTHENTICATION	authenticate
TRANSFER	data_transfer
CLOSE	close_ ftp