From: Impact of class distribution on the detection of slow HTTP DoS attacks using Big Data
Learner | Distribution | AUC | Group | Learner | Distribution | AUC | Group |
---|---|---|---|---|---|---|---|
5NN | 99:1 | 0.99894 | a | MLP | 50:50 | 0.99074 | a |
65:35 | 0.99877 | a | 65:35 | 0.98919 | a | ||
75:25 | 0.99875 | a | 75:25 | 0.98816 | a | ||
90:10 | 0.99871 | a | 90:10 | 0.98396 | a | ||
50:50 | 0.99862 | a | 99:1 | 0.79018 | c | ||
None | 0.99826 | a | None | 0.75768 | c | ||
RF | 50:50 | 0.99905 | a | SVM | 50:50 | 0.99150 | a |
65:35 | 0.99904 | a | 65:35 | 0.99138 | a | ||
75:25 | 0.99889 | a | 75:25 | 0.99095 | a | ||
90:10 | 0.99856 | a | 90:10 | 0.98820 | a | ||
99:1 | 0.99480 | a | 99:1 | 0.98689 | a | ||
None | 0.98850 | a | None | 0.98150 | a | ||
C4.5 | 75:25 | 0.99890 | a | JRIP | 50:50 | 0.99437 | a |
90:10 | 0.99889 | a | 65:35 | 0.99290 | a | ||
65:35 | 0.99867 | a | 75:25 | 0.99288 | a | ||
50:50 | 0.99844 | a | 90:10 | 0.98962 | a | ||
99:1 | 0.98168 | a | 99:1 | 0.95682 | ab | ||
None | 0.96145 | ab | None | 0.89414 | b | ||
LR | 50:50 | 0.99420 | a | NB | 50:50 | 0.97581 | a |
75:25 | 0.99376 | a | 65:35 | 0.97464 | a | ||
65:35 | 0.99338 | a | 75:25 | 0.97327 | a | ||
90:10 | 0.98958 | a | None | 0.97273 | a | ||
99:1 | 0.98535 | a | 99:1 | 0.96982 | a | ||
None | 0.98223 | a | 90:10 | 0.96851 | a |