{
  "label_mapping": {
    "DNS Fast-Flux": 0,
    "DoS": 1,
    "DoS + Brute-Force": 2,
    "FTP Brute-Force / Data Exfiltration": 3,
    "HTTP C2": 4,
    "ICMP Flood": 5,
    "IRC C2": 6,
    "P2P / UDP Scan": 7,
    "Spam": 8,
    "UNKNOWN_ATTACK": 9
  },
  "id_to_label": {
    "0": "DNS Fast-Flux",
    "1": "DoS",
    "2": "DoS + Brute-Force",
    "3": "FTP Brute-Force / Data Exfiltration",
    "4": "HTTP C2",
    "5": "ICMP Flood",
    "6": "IRC C2",
    "7": "P2P / UDP Scan",
    "8": "Spam",
    "9": "UNKNOWN_ATTACK"
  },
  "num_classes": 10,
  "known_attacks": [
    "DNS Fast-Flux",
    "DoS",
    "DoS + Brute-Force",
    "FTP Brute-Force / Data Exfiltration",
    "HTTP C2",
    "ICMP Flood",
    "IRC C2",
    "P2P / UDP Scan",
    "Spam"
  ],
  "model_info": {
    "base_model": "answerdotai/ModernBERT-base",
    "accuracy": 0.982,
    "f1_macro": 0.982123994360445
  }
}