Table 3.

Features selected by four feature evaluation measures for different attack classes in NSL-KDD.

Attack class	Correlation		Consistency
	NF	Feature subset	NF	Feature subset
DoS	(6)	{5,6,12,26,30,39}	(5)	{3,5,23,34,39}
Prob	(8)	{3,5,6,12,27,29,37,41}	(5)	{3,5,32,35,40}
R2L	(3)	{5,10,11}	(4)	{1,3,5,6,37}
U2R	(4)	{14,17,18,32}	(7)	{1,5,17}

Attack class	Information		Distance
	NF	Feature subset	NF	Feature subset
DoS	(10)	{3,4,5,6,23,29,30,34,38,39}	(10)	{3,12,26,29,32,33,34,36,38,39}
Prob	(10)	{3,5,6,12,33,34,35,36,37,41}	(10)	{2,3,12,31,32,33,34,35,36,40}
R2L	(10)	{3,5,6,10,22,23,24,33,36,37}	(10)	{2,3,10,12,22,31,32,33,34,36}
U2R	(10)	{1,3,5,10,13,14,17,32,33,36}	(10)	{2,3,12,14,24,31,32,33,34,36}