Mining Network Traffic with the -Means Clustering Algorithm for Stepping-Stone Intrusion Detection

Table 3

The standard derivations outputted by the 3-mean clustering algorithm on the three RTT datasets collected from connection chains of lengths 2, 3, and 4, respectively.

RTT dataset	Chain length	Standard derivation
Dataset-1	2	68994.78
Dataset-2	3	5377.87
Dataset-3	4	6621.19