Table 2.

The features used in experience.

Feature name	Feature value	Feature description
logged_in	0,1	1 if successfully logged in, else 0
dst_host_count	[0,255]	Number of connections with same dst host
count	[0,511]	Number of connections to same host as current connection
dst_host_srv_count	[0,255]	Number of connections with same dst host and service
dst_host_serror_rate	[0,1.00]	% of connections to current host with S0 errors
same_srv_rate	[0,1.00]	% of connections to the same service
dst_bytes	[0,113 billion]	Bytes from dst to src
srv_serror_rate	[0,1.00]	% of connections with same srv that have “SYN” errors
Dst_host_srv_serror_rate	[0,1.00]	% of connections to current host and specified service
serror_rate	[0,1.00]	% of connections with same dst that have “SYN” errors