| Category | Training dataset | Testing dataset |
| DoS | Back, land, Neptune, pod, smurf, teardrop | Back, land, Neptune, pod, smurf, teardrop, mailbomb, processtable, udpstorm, apache2, worm | U2R | Buffer-overflow, loadmodule, perl, rootkit | Buffer-overflow, loadmodule, perl, rootkit, sqlattack, xterm, ps | R2L | fpt-write, guess-passwd, imap, multihop, phf, spy, warezclient, warezmaster | fpt-write, guess-passwd, imap, multihop, phf, spy, warezmaster, xlock, xsnoop, snmpguess, snmpgetattack, httptunnel, sendmail, named | Probe | ipsweep, nmap, portsweep, Satan | ipsweep, nmap, portsweep, Satan, mscan, saint |
|
|