Research Article

Intrusion Detection System for Internet of Things Based on Temporal Convolution Neural Network and Efficient Feature Engineering

Table 2

Features of Bot-IoT dataset.

FeatureDescriptionData typeFeatureDescriptionData type

pkSeqIDRow identifierIntegerDpktsDestination-to-source packet countInteger
stimeRecord start timeFloatSbytesSource-to-destination byte countInteger
flgsFlow state flags seen in transactionsCategoryDbytesDestination-to-source byte countInteger
protoTextual representation of transaction protocols presents in network flowCategoryRateTotal packets per second in transactionFloat
SaddrSource IP addressCategorySrateSource-to-destination packets per secondFloat
SportSource port numberCategoryDrateDestination-to-source packets per secondFloat
DaddrDestination IP addressCategoryTnBPSrcIPTotal number of bytes per source IPInteger
DportDestination port numberCategoryTnBPDstIPTotal number of bytes per destination IP.Integer
PktsTotal count of packets in transactionIntegerTnP_PSrcIPTotal number of packets per source IP.Integer
BytesTotal number of bytes in transactionIntegerTnP_PDstIPTotal number of packets per destination IP.Integer
StateTransaction stateCategoryTnP_PerProtoTotal number of packets per protocol.Integer
LtimeRecord last timeFloatTnP_Per_DportTotal number of packets per dportInteger
SeqArgus sequence numberIntegerAR_P_Proto_P_SrcIPAverage rate per protocol per source IP. (calculated by pkts/dur)Float
DurRecord total durationFloatAR_P_Proto_P_DstIPAverage rate per protocol per destination IP.Float
MeanAverage duration of aggregated recordsFloatN_IN_Conn_P_SrcIPNumber of inbound connections per source IP.Integer
StddevStandard deviation of aggregated recordsFloatN_IN_Conn_P_DstIPNumber of inbound connections per destination IP.Integer
SumTotal duration of aggregated recordsFloatAR_P_Proto_P_SportAverage rate per protocol per sportFloat
MinMinimum duration of aggregated recordsFloatAR_P_Proto_P_DportAverage rate per protocol per dportFloat
MaxMaximum duration of aggregated recordsFloatPkts_P_State_P_Protocol_P_SrcIPNumber of packets grouped by state of flows and protocols per source IP.Integer
SpktsSource-to-destination packet countIntegerPkts_P_State_P_Protocol_P_DestIPNumber of packets grouped by state of flows and protocols per destination IPInteger