This section describes main characteristics of the kddcup-rootkit-imap_vs_back data set and its attributes:
General information
KDD Cup (Imbalanced: rootkit-imap vs back) data set |
Type | Imbalanced | Origin | Real world |
Features | 41 | (Real / Integer / Nominal) | (26 / 0 / 15) |
Instances | 2225 |
IR | 100.14 |
% Positive instances | 0.99 | % Negative instances | 99.01 | Missing values? | No |
Attribute description
Attribute | Domain | Attribute | Domain | Attribute | Domain |
Atr-0 | [0.0,58329.0] | Atr-14 | {0, 1, 2} | Atr-28 | [0.0,1.0] |
Atr-1 | {icmp, tcp, udp} | Atr-15 | [0.0,993.0] | Atr-29 | [0.0,1.0] |
Atr-2 | {auth, bgp, courier, csnet_ns, ctf, daytime, discard, domain, domain_u, echo, eco_i, ecr_i, efs, exec, finger, ftp, ftp_data, gopher, hostnames, http, http_443, imap4, IRC, iso_tsap, klogin, kshell, ldap, link, login, mtp, name, netbios_dgm, netbios_ns, n | Atr-16 | [0.0,28.0] | Atr-30 | [0.0,1.0] |
Atr-3 | {OTH, REJ, RSTO, RSTOS0, RSTR, S0, S1, S2, S3, SF, SH} | Atr-17 | {0, 1, 2} | Atr-31 | [0.0,255.0] |
Atr-4 | [0.0,6.9337564E8] | Atr-18 | {0, 1, 2, 3, 4, 6, 8} | Atr-32 | [0.0,255.0] |
Atr-5 | [0.0,5155468.0] | Atr-19 | {0} | Atr-33 | [0.0,1.0] |
Atr-6 | {0, 1} | Atr-20 | {0} | Atr-34 | [0.0,1.0] |
Atr-7 | {0, 1, 3} | Atr-21 | {0, 1} | Atr-35 | [0.0,1.0] |
Atr-8 | {0, 1, 2, 3} | Atr-22 | [0.0,511.0] | Atr-36 | [0.0,1.0] |
Atr-9 | [0.0,30.0] | Atr-23 | [0.0,511.0] | Atr-37 | [0.0,1.0] |
Atr-10 | {0, 1, 2, 3, 4, 5} | Atr-24 | [0.0,1.0] | Atr-38 | [0.0,1.0] |
Atr-11 | {0, 1} | Atr-25 | [0.0,1.0] | Atr-39 | [0.0,1.0] |
Atr-12 | [0.0,884.0] | Atr-26 | [0.0,1.0] | Atr-40 | [0.0,1.0] |
Atr-13 | {0, 1} | Atr-27 | [0.0,1.0] | Class | {positive, negative} |
Additional information
An imbalanced version of the KDD Cup data set, where the possitive examples belong to the class rootkit-imap and the negative examples belong to the class back.
In this section you can download some files related to the kddcup-rootkit-imap_vs_back data set:
- The complete data set already formatted in KEEL format can be downloaded from
here.
- A copy of the data set already partitioned by means of a 5-folds cross validation procedure can be downloaded from here.
- The header file associated to this data set can be downloaded from here.
|