Table 3.

Distribution of different attack behaviors in the CIC-IDS2017 data set.

Data set	Attack behavior									Total
	Benign	Dos	PortScan	Patator	Ddos	Bot	Web attack	Infiltration	Heartbleed
Train	1,654,737	176,863	111,251	9,685	89,619	2,752	1,526	25	7	2,046,465
Test	709,173	75,798	47,679	4,150	38,408	1,180	654	11	4	877,057
Total	2,363,910	252,661	158,930	13,835	128,027	3,932	2,180	36	11	2,923,522