Table 2 Extracted features (calculated) of interval time
From: Apply machine learning techniques to detect malicious network traffic in cloud computing
Features | Description |
|---|---|
T_IN | A frequency number. The count of the appearing packets incoming to the destination IP address throughout the observation time window |
T_OUT | A frequency number. The count of the appearing packets is outgoing from the destination IP address throughout the observation time window |
APL | Average payload packet length for the time interval |
PV | A variance of payload packet length for the time interval |
TBP | The average time between packets in a time interval |
RAMBLING | The rambling amount of payload packet length means in a time interval |