Table 19 Top 20 features for XSS web attacks ranked by Supervised-based Feature Importance Lists
From: A new feature popularity framework for detecting cyberattacks using popular features
XGBoost | Random Forest | CatBoost | LightGBM |
|---|---|---|---|
BwdPktLenMean | BwdPktLenMax | Flow_Bytes_s | Flow_IAT_Min |
Total_Backward_Packets | BwdPktLenMean | Max_Packet_Length | Fwd_IAT_Min |
TotLenFwdPkts | Max_Packet_Length | Destination_Port | Flow_IAT_Mean |
FIN_Flag_Count | Fwd_Packets_s | Fwd_IAT_Std | Fwd_Packets_s |
Total_Fwd_Packets | Packet_Length_Std | Flow_IAT_Mean | Flow_Bytes_s |
Flow_IAT_Min | ECE_Flag_Count | Bwd_IAT_Max | Flow_Packets_s |
BwdPktLenMax | Bwd_IAT_Std | Bwd_IAT_Mean | Flow_IAT_Max |
Bwd_IAT_Mean | Idle_Min | AvgBwdSegSize | Bwd_Packets_s |
Flow_Packets_s | AvgBwdSegSize | TotLenFwdPkts | Fwd_IAT_Total |
Down_Up_Ratio | Subflow_Bwd_Packets | Idle_Std | Fwd_IAT_Std |
Packet_Length_Std | Fwd_IAT_Total | Bwd_IAT_Std | Fwd_IAT_Max |
Flow_Bytes_s | Flow_IAT_Mean | Flow_IAT_Max | Flow_IAT_Std |
ACK_Flag_Count | Flow_IAT_Max | Active_Min | Bwd_IAT_Std |
RST_Flag_Count | Fwd_IAT_Min | act_data_pkt_fwd | Fwd_IAT_Mean |
Bwd_IAT_Max | Bwd_Header_Length | min_seg_size_forward | BwdPktLenMin |
Idle_Max | Flow_IAT_Min | Fwd_Header_Length | |
Fwd_IAT_Std | Active_Mean | Bwd_IAT_Min | |
Packet_Length_Mean | Idle_Max | Packet_Length_Std | |
Active_Min | Packet_Length_Mean | Bwd_IAT_Total | |
Bwd_Packets_s | Fwd_IAT_Max | PktLenVar |