Table 3 4 FST Agreement Lists for only Brute Force web attack (superscripts indicate \(\text {fst}_{\mathrm{A}}\), which is the number of FSTs agreeing on that feature)
From: A new feature popularity framework for detecting cyberattacks using popular features
BF 4/7 FSTs Agree | BF 5/7 FSTs Agree | BF 6/7 FSTs Agree | BF 7/7 FSTs Agree |
|---|---|---|---|
Bwd_IAT_Mean 4 | Flow_Bytes_s 5 | TotLenFwdPkts 6 | Fwd_IAT_Total 7 |
Flow_IAT_Mean 4 | Flow_IAT_Max 5 | Fwd_IAT_Total 7 | |
Flow_IAT_Std 4 | Flow_Packets_s 5 | ||
FwdPktLenMean 4 | Fwd_IAT_Std 5 | ||
Subflow_Fwd_Bytes 4 | TotLenFwdPkts 6 | ||
Flow_Bytes_s 5 | Fwd_IAT_Total 7 | ||
Flow_IAT_Max 5 | |||
Flow_Packets_s 5 | |||
Fwd_IAT_Std 5 | |||
TotLenFwdPkts 6 | |||
Fwd_IAT_Total 7 |