{ "cells": [ { "cell_type": "code", "execution_count": 49, "id": "bc89a433-31ba-4007-934d-1117d5ab4bdf", "metadata": { "id": "bc89a433-31ba-4007-934d-1117d5ab4bdf" }, "outputs": [], "source": [ "import os\n", "import requests" ] }, { "cell_type": "code", "execution_count": 50, "id": "0ee1e123-daec-44e5-9eb5-f91809ac12bb", "metadata": { "id": "0ee1e123-daec-44e5-9eb5-f91809ac12bb" }, "outputs": [], "source": [ "DATA_DIR = \"data\"\n", "if not os.path.exists(DATA_DIR):\n", " os.makedirs(DATA_DIR)\n", "URLS = {\n", " 'KDDTrain+.txt':'https://raw.githubusercontent.com/defcom17/NSL_KDD/master/KDDTrain+.txt',\n", " 'KDDTest+.txt' : 'https://raw.githubusercontent.com/defcom17/NSL_KDD/master/KDDTest+.txt'\n", "}\n", "\n", "def download_file(url,filename):\n", " local_path = os.path.join(DATA_DIR, filename)\n", "\n", " if os.path.exists(local_path):\n", " print(f\"Correct file found: {filename} already exists\")\n", " return\n", " print(f\"Downloading {filename}...\")\n", " try:\n", " response = requests.get(url, stream=True)\n", " response.raise_for_status()\n", "\n", " with open(local_path, 'wb') as f:\n", " for chunk in response.iter_content(chunk_size = 8000):\n", " f.write(chunk)\n", " print(f\"Success saved to {local_path}\")\n", " except Exception as e:\n", " print(f\"Failed to download {filename} :{e}\")" ] }, { "cell_type": "code", "execution_count": 51, "id": "6a5dbe4d-1317-4c5a-b178-2533de0958da", "metadata": { "colab": { "base_uri": "https://localhost:8080/" }, "id": "6a5dbe4d-1317-4c5a-b178-2533de0958da", "outputId": "df911c4b-7c02-4654-ef31-2c50297f4010" }, "outputs": [ { "output_type": "stream", "name": "stdout", "text": [ "Correct file found: KDDTrain+.txt already exists\n", "Correct file found: KDDTest+.txt already exists\n", "\n", "All files should now be in 'data' folder.\n" ] } ], "source": [ "for filename, url in URLS.items():\n", " download_file(url,filename)\n", "print(\"\\nAll files should now be in 'data' folder.\")" ] }, { "cell_type": "code", "execution_count": 52, "id": "bc6b6652-2e64-4ddb-81fe-183083fc3e36", "metadata": { "id": "bc6b6652-2e64-4ddb-81fe-183083fc3e36" }, "outputs": [], "source": [ "# Step:0 import Libraries\n", "import pandas as pd\n", "import numpy as np\n", "import seaborn as sns\n", "import matplotlib.pyplot as plt\n", "from sklearn.preprocessing import LabelEncoder, StandardScaler\n", "from sklearn.model_selection import train_test_split\n", "from sklearn.ensemble import RandomForestClassifier\n", "from sklearn.metrics import classification_report, confusion_matrix\n" ] }, { "cell_type": "code", "execution_count": 53, "id": "b90dada6-ae78-486e-b75f-21c617f728ee", "metadata": { "colab": { "base_uri": "https://localhost:8080/", "height": 290 }, "id": "b90dada6-ae78-486e-b75f-21c617f728ee", "outputId": "bb38e7b9-da0e-4998-ff19-92e0c50e2cd5" }, "outputs": [ { "output_type": "stream", "name": "stdout", "text": [ "Train shape: (125973, 43)\n", "Test shape: (22544, 43)\n" ] }, { "output_type": "execute_result", "data": { "text/plain": [ " duration protocol_type service flag src_bytes dst_bytes land \\\n", "0 0 tcp ftp_data SF 491 0 0 \n", "1 0 udp other SF 146 0 0 \n", "2 0 tcp private S0 0 0 0 \n", "3 0 tcp http SF 232 8153 0 \n", "4 0 tcp http SF 199 420 0 \n", "\n", " wrong_fragment urgent hot ... dst_host_same_srv_rate \\\n", "0 0 0 0 ... 0.17 \n", "1 0 0 0 ... 0.00 \n", "2 0 0 0 ... 0.10 \n", "3 0 0 0 ... 1.00 \n", "4 0 0 0 ... 1.00 \n", "\n", " dst_host_diff_srv_rate dst_host_same_src_port_rate \\\n", "0 0.03 0.17 \n", "1 0.60 0.88 \n", "2 0.05 0.00 \n", "3 0.00 0.03 \n", "4 0.00 0.00 \n", "\n", " dst_host_srv_diff_host_rate dst_host_serror_rate \\\n", "0 0.00 0.00 \n", "1 0.00 0.00 \n", "2 0.00 1.00 \n", "3 0.04 0.03 \n", "4 0.00 0.00 \n", "\n", " dst_host_srv_serror_rate dst_host_rerror_rate dst_host_srv_rerror_rate \\\n", "0 0.00 0.05 0.00 \n", "1 0.00 0.00 0.00 \n", "2 1.00 0.00 0.00 \n", "3 0.01 0.00 0.01 \n", "4 0.00 0.00 0.00 \n", "\n", " attack_type level \n", "0 normal 20 \n", "1 normal 15 \n", "2 neptune 19 \n", "3 normal 21 \n", "4 normal 21 \n", "\n", "[5 rows x 43 columns]" ], "text/html": [ "\n", "
| \n", " | duration | \n", "protocol_type | \n", "service | \n", "flag | \n", "src_bytes | \n", "dst_bytes | \n", "land | \n", "wrong_fragment | \n", "urgent | \n", "hot | \n", "... | \n", "dst_host_same_srv_rate | \n", "dst_host_diff_srv_rate | \n", "dst_host_same_src_port_rate | \n", "dst_host_srv_diff_host_rate | \n", "dst_host_serror_rate | \n", "dst_host_srv_serror_rate | \n", "dst_host_rerror_rate | \n", "dst_host_srv_rerror_rate | \n", "attack_type | \n", "level | \n", "
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | \n", "0 | \n", "tcp | \n", "ftp_data | \n", "SF | \n", "491 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.17 | \n", "0.03 | \n", "0.17 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.05 | \n", "0.00 | \n", "normal | \n", "20 | \n", "
| 1 | \n", "0 | \n", "udp | \n", "other | \n", "SF | \n", "146 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.00 | \n", "0.60 | \n", "0.88 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "normal | \n", "15 | \n", "
| 2 | \n", "0 | \n", "tcp | \n", "private | \n", "S0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.10 | \n", "0.05 | \n", "0.00 | \n", "0.00 | \n", "1.00 | \n", "1.00 | \n", "0.00 | \n", "0.00 | \n", "neptune | \n", "19 | \n", "
| 3 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "232 | \n", "8153 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.00 | \n", "0.00 | \n", "0.03 | \n", "0.04 | \n", "0.03 | \n", "0.01 | \n", "0.00 | \n", "0.01 | \n", "normal | \n", "21 | \n", "
| 4 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "199 | \n", "420 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "normal | \n", "21 | \n", "
5 rows × 43 columns
\n", "| \n", " | proportion | \n", "
|---|---|
| attack_category | \n", "\n", " |
| normal | \n", "0.559569 | \n", "
| dos | \n", "0.440431 | \n", "
| \n", " | service | \n", "
|---|---|
| 0 | \n", "ftp_data | \n", "
| 1 | \n", "other | \n", "
| 2 | \n", "private | \n", "
| 3 | \n", "http | \n", "
| 4 | \n", "http | \n", "
| ... | \n", "... | \n", "
| 125968 | \n", "private | \n", "
| 125969 | \n", "private | \n", "
| 125970 | \n", "smtp | \n", "
| 125971 | \n", "klogin | \n", "
| 125972 | \n", "ftp_data | \n", "
125973 rows × 1 columns
\n", "| \n", " | duration | \n", "protocol_type | \n", "service | \n", "flag | \n", "src_bytes | \n", "dst_bytes | \n", "land | \n", "wrong_fragment | \n", "urgent | \n", "hot | \n", "... | \n", "flag_REJ | \n", "flag_RSTO | \n", "flag_RSTOS0 | \n", "flag_RSTR | \n", "flag_S0 | \n", "flag_S1 | \n", "flag_S2 | \n", "flag_S3 | \n", "flag_SF | \n", "flag_SH | \n", "
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | \n", "0 | \n", "tcp | \n", "ftp_data | \n", "SF | \n", "491 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 1 | \n", "0 | \n", "udp | \n", "other | \n", "SF | \n", "146 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 2 | \n", "0 | \n", "tcp | \n", "private | \n", "S0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| 3 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "232 | \n", "8153 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 4 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "199 | \n", "420 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| ... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "
| 125968 | \n", "0 | \n", "tcp | \n", "private | \n", "S0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| 125969 | \n", "8 | \n", "udp | \n", "private | \n", "SF | \n", "105 | \n", "145 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 125970 | \n", "0 | \n", "tcp | \n", "smtp | \n", "SF | \n", "2231 | \n", "384 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 125971 | \n", "0 | \n", "tcp | \n", "klogin | \n", "S0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| 125972 | \n", "0 | \n", "tcp | \n", "ftp_data | \n", "SF | \n", "151 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
125973 rows × 69 columns
\n", "| \n", " | duration | \n", "src_bytes | \n", "dst_bytes | \n", "land | \n", "wrong_fragment | \n", "urgent | \n", "hot | \n", "num_failed_logins | \n", "logged_in | \n", "num_compromised | \n", "... | \n", "flag_REJ | \n", "flag_RSTO | \n", "flag_RSTOS0 | \n", "flag_RSTR | \n", "flag_S0 | \n", "flag_S1 | \n", "flag_S2 | \n", "flag_S3 | \n", "flag_SF | \n", "flag_SH | \n", "
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| 1 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| 2 | \n", "2 | \n", "12983 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 3 | \n", "0 | \n", "20 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 4 | \n", "1 | \n", "0 | \n", "15 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
| ... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "
| 22539 | \n", "0 | \n", "794 | \n", "333 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "1 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 22540 | \n", "0 | \n", "317 | \n", "938 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "1 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 22541 | \n", "0 | \n", "54540 | \n", "8314 | \n", "0 | \n", "0 | \n", "0 | \n", "2 | \n", "0 | \n", "1 | \n", "1 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 22542 | \n", "0 | \n", "42 | \n", "42 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "1.0 | \n", "0.0 | \n", "
| 22543 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "0.0 | \n", "
22544 rows × 65 columns
\n", "| \n", " | 0 | \n", "
|---|---|
| duration | \n", "int64 | \n", "
| src_bytes | \n", "int64 | \n", "
| dst_bytes | \n", "int64 | \n", "
| land | \n", "int64 | \n", "
| wrong_fragment | \n", "int64 | \n", "
| ... | \n", "... | \n", "
| flag_S1 | \n", "float64 | \n", "
| flag_S2 | \n", "float64 | \n", "
| flag_S3 | \n", "float64 | \n", "
| flag_SF | \n", "float64 | \n", "
| flag_SH | \n", "float64 | \n", "
66 rows × 1 columns
\n", "| \n", " | duration | \n", "src_bytes | \n", "dst_bytes | \n", "land | \n", "wrong_fragment | \n", "urgent | \n", "hot | \n", "num_failed_logins | \n", "logged_in | \n", "num_compromised | \n", "... | \n", "flag_REJ | \n", "flag_RSTO | \n", "flag_RSTOS0 | \n", "flag_RSTR | \n", "flag_S0 | \n", "flag_S1 | \n", "flag_S2 | \n", "flag_S3 | \n", "flag_SF | \n", "flag_SH | \n", "
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| duration | \n", "1.000000 | \n", "0.070737 | \n", "0.034878 | \n", "-0.001553 | \n", "-0.009866 | \n", "0.003830 | \n", "0.000705 | \n", "0.009528 | \n", "-0.064218 | \n", "0.042679 | \n", "... | \n", "-0.034493 | \n", "-0.005336 | \n", "0.034268 | \n", "0.539954 | \n", "-0.068182 | \n", "-0.005943 | \n", "-0.003411 | \n", "0.001148 | \n", "-0.068255 | \n", "-0.005119 | \n", "
| src_bytes | \n", "0.070737 | \n", "1.000000 | \n", "0.000204 | \n", "-0.000109 | \n", "-0.000693 | \n", "-0.000059 | \n", "0.000295 | \n", "-0.000208 | \n", "-0.003353 | \n", "-0.000086 | \n", "... | \n", "-0.002429 | \n", "0.007609 | \n", "0.178046 | \n", "-0.000685 | \n", "-0.004800 | \n", "0.000007 | \n", "-0.000229 | \n", "0.000682 | \n", "-0.006079 | \n", "-0.000360 | \n", "
| dst_bytes | \n", "0.034878 | \n", "0.000204 | \n", "1.000000 | \n", "-0.000069 | \n", "-0.000440 | \n", "0.000248 | \n", "-0.000344 | \n", "0.000504 | \n", "-0.002894 | \n", "0.001233 | \n", "... | \n", "-0.001539 | \n", "-0.000537 | \n", "-0.000141 | \n", "0.029685 | \n", "-0.003042 | \n", "0.000147 | \n", "0.000215 | \n", "-0.000077 | \n", "-0.004509 | \n", "-0.000228 | \n", "
| land | \n", "-0.001553 | \n", "-0.000109 | \n", "-0.000069 | \n", "1.000000 | \n", "-0.001261 | \n", "-0.000109 | \n", "-0.001340 | \n", "-0.000381 | \n", "-0.011402 | \n", "-0.000164 | \n", "... | \n", "-0.004408 | \n", "-0.001579 | \n", "-0.000403 | \n", "-0.001972 | \n", "0.022781 | \n", "-0.000759 | \n", "-0.000448 | \n", "-0.000278 | \n", "-0.017074 | \n", "-0.000654 | \n", "
| wrong_fragment | \n", "-0.009866 | \n", "-0.000693 | \n", "-0.000440 | \n", "-0.001261 | \n", "1.000000 | \n", "-0.000692 | \n", "-0.008508 | \n", "-0.002418 | \n", "-0.072418 | \n", "-0.001044 | \n", "... | \n", "-0.027999 | \n", "-0.010027 | \n", "-0.002560 | \n", "-0.012526 | \n", "-0.055342 | \n", "-0.004824 | \n", "-0.002843 | \n", "-0.001765 | \n", "0.073840 | \n", "-0.004155 | \n", "
| ... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "
| flag_S1 | \n", "-0.005943 | \n", "0.000007 | \n", "0.000147 | \n", "-0.000759 | \n", "-0.004824 | \n", "-0.000417 | \n", "-0.000797 | \n", "0.001808 | \n", "0.052719 | \n", "0.016717 | \n", "... | \n", "-0.016867 | \n", "-0.006040 | \n", "-0.001542 | \n", "-0.007546 | \n", "-0.033338 | \n", "1.000000 | \n", "-0.001712 | \n", "-0.001063 | \n", "-0.065329 | \n", "-0.002503 | \n", "
| flag_S2 | \n", "-0.003411 | \n", "-0.000229 | \n", "0.000215 | \n", "-0.000448 | \n", "-0.002843 | \n", "-0.000246 | \n", "0.008963 | \n", "-0.000858 | \n", "0.033628 | \n", "-0.000360 | \n", "... | \n", "-0.009940 | \n", "-0.003560 | \n", "-0.000909 | \n", "-0.004447 | \n", "-0.019646 | \n", "-0.001712 | \n", "1.000000 | \n", "-0.000627 | \n", "-0.038499 | \n", "-0.001475 | \n", "
| flag_S3 | \n", "0.001148 | \n", "0.000682 | \n", "-0.000077 | \n", "-0.000278 | \n", "-0.001765 | \n", "-0.000153 | \n", "-0.000190 | \n", "0.017265 | \n", "0.019436 | \n", "-0.000129 | \n", "... | \n", "-0.006172 | \n", "-0.002210 | \n", "-0.000564 | \n", "-0.002761 | \n", "-0.012199 | \n", "-0.001063 | \n", "-0.000627 | \n", "1.000000 | \n", "-0.023906 | \n", "-0.000916 | \n", "
| flag_SF | \n", "-0.068255 | \n", "-0.006079 | \n", "-0.004509 | \n", "-0.017074 | \n", "0.073840 | \n", "0.006383 | \n", "0.074924 | \n", "0.000136 | \n", "0.641738 | \n", "0.007291 | \n", "... | \n", "-0.379191 | \n", "-0.135793 | \n", "-0.034668 | \n", "-0.169644 | \n", "-0.749485 | \n", "-0.065329 | \n", "-0.038499 | \n", "-0.023906 | \n", "1.000000 | \n", "-0.056270 | \n", "
| flag_SH | \n", "-0.005119 | \n", "-0.000360 | \n", "-0.000228 | \n", "-0.000654 | \n", "-0.004155 | \n", "-0.000359 | \n", "-0.004255 | \n", "-0.001255 | \n", "-0.037575 | \n", "-0.000542 | \n", "... | \n", "-0.014528 | \n", "-0.005203 | \n", "-0.001328 | \n", "-0.006500 | \n", "-0.028715 | \n", "-0.002503 | \n", "-0.001475 | \n", "-0.000916 | \n", "-0.056270 | \n", "1.000000 | \n", "
64 rows × 64 columns
\n", "RandomForestClassifier(max_depth=10, n_jobs=-1, random_state=42)In a Jupyter environment, please rerun this cell to show the HTML representation or trust the notebook.
RandomForestClassifier(max_depth=10, n_jobs=-1, random_state=42)
| \n", " | duration | \n", "protocol_type | \n", "service | \n", "flag | \n", "src_bytes | \n", "dst_bytes | \n", "land | \n", "wrong_fragment | \n", "urgent | \n", "hot | \n", "... | \n", "dst_host_same_srv_rate | \n", "dst_host_diff_srv_rate | \n", "dst_host_same_src_port_rate | \n", "dst_host_srv_diff_host_rate | \n", "dst_host_serror_rate | \n", "dst_host_srv_serror_rate | \n", "dst_host_rerror_rate | \n", "dst_host_srv_rerror_rate | \n", "label | \n", "difficulty_level | \n", "
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | \n", "0 | \n", "tcp | \n", "ftp_data | \n", "SF | \n", "491 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.17 | \n", "0.03 | \n", "0.17 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.05 | \n", "0.00 | \n", "normal | \n", "20 | \n", "
| 1 | \n", "0 | \n", "udp | \n", "other | \n", "SF | \n", "146 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.00 | \n", "0.60 | \n", "0.88 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "normal | \n", "15 | \n", "
| 2 | \n", "0 | \n", "tcp | \n", "private | \n", "S0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "0.10 | \n", "0.05 | \n", "0.00 | \n", "0.00 | \n", "1.00 | \n", "1.00 | \n", "0.00 | \n", "0.00 | \n", "neptune | \n", "19 | \n", "
| 3 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "232 | \n", "8153 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.00 | \n", "0.00 | \n", "0.03 | \n", "0.04 | \n", "0.03 | \n", "0.01 | \n", "0.00 | \n", "0.01 | \n", "normal | \n", "21 | \n", "
| 4 | \n", "0 | \n", "tcp | \n", "http | \n", "SF | \n", "199 | \n", "420 | \n", "0 | \n", "0 | \n", "0 | \n", "0 | \n", "... | \n", "1.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "0.00 | \n", "normal | \n", "21 | \n", "
5 rows × 43 columns
\n", "