A Protocol-Independent Botnet Detection Method Using Flow Similarity

Table 1

Evaluate the effect of different on the results.

WinSize	ISCX-training dataset		ISCX-testing dataset
	TPR	FPR	TPR	FPR
10	1.0	0.00706	0.92857	0.05034
50	1.0	0.00797	0.96428	0.06013
100	1.0	0.00813	0.96428	0.07015
200	1.0	0.00889	0.96428	0.08041