Table 4. Distribution of attack types in the dataset before and after SMOTE resampling.
| Class | Count | |
|---|---|---|
| Before SMOTE resampling | After SMOTE resampling | |
| Normal | 67,343 | 67,342 |
| U2R | 52 | 67,342 |
| Probe | 11,656 | 67,342 |
| DoS | 45,927 | 67,342 |
| R2L | 995 | 67,342 |
| Class | Count | |
|---|---|---|
| Before SMOTE resampling | After SMOTE resampling | |
| Normal | 67,343 | 67,342 |
| U2R | 52 | 67,342 |
| Probe | 11,656 | 67,342 |
| DoS | 45,927 | 67,342 |
| R2L | 995 | 67,342 |