Table 1. Selection of training and test samples.
Normal | Probe | DoS | U2R | R2L | Total | |
---|---|---|---|---|---|---|
Anomaly detection training set | 3000 | 2000 | 5000 | |||
Anomaly detection test set | 2000 | 1000 | 3000 | |||
Mis-use detection training set | 805 | 767 | 3133 | 52 | 243 | 5000 |
Mis-use detection test set | 483 | 460 | 1880 | 31 | 146 | 3000 |