Table 8.
Classification Accuracy Analysis of four feature evaluation measures on UNSW-NB15.
Attack class | ALL features |
Correlation |
Consistency |
|||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
KNN | RF | SVM | DBN | KNN | RF | SVM | DBN | KNN | RF | SVM | DBN | |
Fuzzers | 80.01 | 83.52 | 79.25 | 79.21 | 84.7 | 84.7 | 75.4 | 78.4 | 88.5 | 90.1 | 79.2 | 83.7 |
Analysis | 98.97 | 99.0 | 96.78 | 96.78 | 99.2 | 99.1 | 98.8 | 98.8 | 99.3 | 99.4 | 98.8 | 98.8 |
Backdoors | 99.39 | 99.4 | 97.29 | 97.21 | 99.4 | 99.4 | 99.3 | 97.6 | 99.8 | 99.9 | 98.8 | 98.6 |
DoS | 96.0 | 96.61 | 91.65 | 91.45 | 96.1 | 96.2 | 91.5 | 92.3 | 98.4 | 99.1 | 92.2 | 94.8 |
Exploits | 80.36 | 92.92 | 73.95 | 76.4 | 89.9 | 91.0 | 70.8 | 85.1 | 97.0 | 98.8 | 84.4 | 85.2 |
Generic | 99.37 | 99.42 | 95.98 | 95.97 | 99.2 | 99.2 | 99.0 | 90.2 | 99.6 | 99.7 | 99.1 | 99.1 |
Reconnaissance | 90.62 | 92.21 | 86.87 | 86.88 | 97.9 | 98.1 | 90.2 | 89.6 | 97.8 | 99.5 | 86.4 | 85.7 |
Shellcode | 98.56 | 98.46 | 97.99 | 97.99 | 98.3 | 98.2 | 98.0 | 97.9 | 99.3 | 99.67 | 98.4 | 97.9 |
Worms | 99.73 | 99.77 | 99.74 | 99.74 | 99.8 | 99.89 | 99.7 | 99.7 | 99.9 | 99.99 | 99.7 | 99.7 |
Attack class | Information |
Distance |
||||||
---|---|---|---|---|---|---|---|---|
KNN | RF | SVM | DBN | KNN | RF | SVM | DBN | |
Fuzzers | 87.2 | 89.07 | 81.8 | 83.9 | 87.3 | 89.62 | 83.0 | 83.9 |
Analysis | 98.9 | 99.33 | 97.9 | 97.6 | 99.0 | 99.35 | 99.0 | 98.8 |
Backdoors | 99.5 | 99.84 | 97.1 | 97.9 | 99.7 | 99.76 | 97.1 | 99.2 |
DoS | 97.7 | 98.85 | 93.0 | 91.2 | 98.5 | 99.0 | 95.1 | 96.8 |
Exploits | 95.3 | 97.56 | 79.1 | 84.4 | 97.6 | 98.59 | 86.9 | 93.0 |
Generic | 99.3 | 99.69 | 93.2 | 89.0 | 99.5 | 99.71 | 94.6 | 96.9 |
Reconnaissance | 98.6 | 99.11 | 91.9 | 88.5 | 98.9 | 99.54 | 96.5 | 97.1 |
Shellcode | 98.7 | 98.63 | 98.0 | 97.9 | 98.7 | 98.44 | 98.0 | 97.9 |
Worms | 99.9 | 99.96 | 99.7 | 99.7 | 99.8 | 99.90 | 99.7 | 99.7 |