Table 3.

ML and DL algorithms evaluated in the reviewed papers.

Algorithm	Papers That Applied It	No. of Articles	Problem Domains	Performance (Highest Accuracy)
SVM	[10,28,34,42,48,51,54,60,71,87,91,99,102,104,124,127,128,130,131,132,135,142,144,149,151]	26	Insider Threat, DDoS, Malware, Botnet, Malicious Traffic, IDS, Phishing	93.95% (IDS)
DT	[32,43,48,51,60,71,99,104,128,132,136,139,151]	13	Insider Threat, DDoS, Phishing, Malware, Botnet, Malicious Traffic, IDS	100% (Malicious Traffic)
RF	[28,30,32,38,43,51,60,64,71,81,90,94,98,99,104,108,111, 124,125,126,127,128,135,136,148,149,151]	27	DDoS, Phishing, Malware, Botnet, IoT Network, Malicious Traffic, DNS Level Attack, IDS	100% (Malicious Traffic, DDoS)
NB	[38,42,48,51,60,71,94,99,104,111,124,125,127,128,130, 132,136,143,145]	19	DDoS, Malware, Botnet, Malicious Traffic, DNS Level Attack, IDS, Phishing	90% (Malicious Traffic)
KNN	[71,99,104,111,127,128]	6	Botnet, Malicious Traffic, DNS Level Attack, IDS	100% (Malicious Traffic)
MLP	[18,34,38,40,48,51,73,104,125,151]	11	DDoS, Malware, Botnet, Malicious Traffic, IDS, Phishing	99.60% (Malware)
ELM	[75,135]	2	IDS	99.5% (IDS)
LR	[32,90,98,111,124,126,128,151]	8	DDoS, Malware, Malicious Traffic, DNS Level Attack, IDS	99.92% (Malware)
J.48	[38,125,126,132,133,136]	6	DDoS, IDS	99.66% (IDS)
ANN	[44,58,120,123,128,133]	6	Phishing, Zero-Day, IDS	99.6% (Zero-Day)
RNN	[10,16,21,24,41,42,82,106,117,146]	10	Insider Threat, DDoS, Malicious Traffic, IDS	100% (Insider Threat)
CNN	[23,24,41,62,74,76,91,117,146,149]	10	Insider Threat, DDoS, Malware, IoT Network, Malicious Traffic, IDS	99% (DDoS)
DNN	[10,20,78,84]	4	Insider Threat, DDoS, IoT Network, Malicious Traffic	99.99% (IoT Network)
LSTM	[20,24,26,54,73,84,110]	7	DDoS, Botnet, IoT Network, Malicious Traffic, Phishing	99% (DDoS)
CNN-LSTM	[12,24]	2	Insider Threat, DDoS	99.48% (DDoS)
AE	[21,115,116]	3	DDoS, IDS	99% (DDoS)