DaLaw2/NetGuardia
1
0
Fork 0
mirror of https://github.com/DaLaw2/NetGuardia.git synced 2026-08-24 14:10:28 +09:00
Code Issues Packages Projects Releases Wiki Activity

feat: Using cic2018 models and fix feature extraction

Browse Source
This commit is contained in:
ParrotXray 2026-02-01 06:30:07 +00:00
parent 8390ca9e8c
commit 5f355c6be0
6 changed files with 19536 additions and 21332 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39386
models/deep_autoencoder.onnx
View File

File diff suppressed because it is too large Load Diff

771
models/full_config.json
View File

@ -1,577 +1,220 @@
{
"created_at": "2026-01-27T13:05:39.258903",
"created_at": "2026-01-31T15:01:53.879742",
"model": {
"deep_autoencoder": {
"file": "deep_autoencoder.onnx",
"input_dim": 78,
"input_dim": 27,
"encoding_dim": 16
},
"random_forest": {
"file": "random_forest.onnx",
"n_estimators": 100,
"n_features": 78
"n_features": 27
},
"mlp_classifier": {
"file": "mlp.onnx",
"input_dim": 78,
"n_classes": 10
"input_dim": 27,
"n_classes": 5
}
},
"preprocessing": {
"clip_params": {
"Destination Port": {
"lower": 22.0,
"upper": 63734.0
"Dst Port": {
"lower": 0.0,
"upper": 64378.0
},
"Protocol": {
"lower": 0.0,
"upper": 17.0
},
"Flow Duration": {
"lower": 0.0,
"upper": 118851669.0
},
"Tot Fwd Pkts": {
"lower": 1.0,
"upper": 118756600.72000001
"upper": 54.0
},
"Total Fwd Packets": {
"lower": 1.0,
"upper": 98.0
},
"Total Backward Packets": {
"Tot Bwd Pkts": {
"lower": 0.0,
"upper": 126.0
"upper": 86.0
},
"Total Length of Fwd Packets": {
"TotLen Fwd Pkts": {
"lower": 0.0,
"upper": 13119.520000000019
"upper": 4543.0
},
"Total Length of Bwd Packets": {
"TotLen Bwd Pkts": {
"lower": 0.0,
"upper": 186394.64000000013
"upper": 84861.60000000615
},
"Fwd Packet Length Max": {
"Flow Byts\/s": {
"lower": 0.0,
"upper": 5840.0
"upper": 2402596.0400020555
},
"Fwd Packet Length Min": {
"lower": 0.0,
"upper": 98.0
},
"Fwd Packet Length Mean": {
"lower": 0.0,
"upper": 1932.5
},
"Fwd Packet Length Std": {
"lower": 0.0,
"upper": 2376.49858
},
"Bwd Packet Length Max": {
"lower": 0.0,
"upper": 4380.0
},
"Bwd Packet Length Min": {
"lower": 0.0,
"upper": 308.0
},
"Bwd Packet Length Mean": {
"lower": 0.0,
"upper": 1715.628244226656
},
"Bwd Packet Length Std": {
"lower": 0.0,
"upper": 1167.9936145600002
},
"Flow Bytes\/s": {
"lower": 0.0,
"upper": 37000000.0
},
"Flow Packets\/s": {
"lower": 0.041637660508,
"Flow Pkts\/s": {
"lower": -1.0,
"upper": 2000000.0
},
"Init Fwd Win Byts": {
"lower": -1.0,
"upper": 65535.0
},
"Init Bwd Win Byts": {
"lower": -1.0,
"upper": 64000.0
},
"Fwd Pkt Len Mean": {
"lower": 0.0,
"upper": 268.3466666666444
},
"Bwd Pkt Len Mean": {
"lower": 0.0,
"upper": 1177.7322105263513
},
"Flow IAT Mean": {
"lower": 1.0,
"upper": 30800000.0
},
"Flow IAT Std": {
"lower": 0.0,
"upper": 44253994.319940574
},
"Flow IAT Max": {
"lower": 1.0,
"upper": 96199268.00000003
},
"Flow IAT Min": {
"lower": 0.0,
"upper": 1999969.04
},
"Fwd IAT Total": {
"lower": 0.0,
"upper": 119000000.0
"upper": 87489637.0
},
"Fwd IAT Mean": {
"lower": 0.0,
"upper": 74300000.0
},
"Fwd IAT Std": {
"lower": 0.0,
"upper": 35894248.669783354
},
"Fwd IAT Max": {
"lower": 0.0,
"upper": 97800000.0
},
"Fwd IAT Min": {
"lower": 0.0,
"upper": 74300000.0
},
"Bwd IAT Total": {
"lower": 0.0,
"upper": 118000000.0
"upper": 87636954.48000036
},
"Bwd IAT Mean": {
"lower": 0.0,
"upper": 73734410.76000024
"upper": 12585030.880001608
},
"Bwd IAT Std": {
"lower": 0.0,
"upper": 30100000.0
},
"Bwd IAT Max": {
"lower": 0.0,
"upper": 93800000.0
},
"Bwd IAT Min": {
"lower": 0.0,
"upper": 73734410.76000024
},
"Fwd PSH Flags": {
"PSH Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"Bwd PSH Flags": {
"lower": 0.0,
"upper": 0.0
},
"Fwd URG Flags": {
"lower": 0.0,
"upper": 0.0
},
"Bwd URG Flags": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Header Length": {
"lower": 20.0,
"upper": 2376.0
},
"Bwd Header Length": {
"lower": 0.0,
"upper": 3312.0
},
"Fwd Packets\/s": {
"lower": 0.02417299188,
"upper": 2000000.0
},
"Bwd Packets\/s": {
"lower": 0.0,
"upper": 142857.1429
},
"Min Packet Length": {
"lower": 0.0,
"upper": 89.0
},
"Max Packet Length": {
"lower": 0.0,
"upper": 5840.0
},
"Packet Length Mean": {
"lower": 0.0,
"upper": 1153.4362532
},
"Packet Length Std": {
"lower": 0.0,
"upper": 1845.154148000012
},
"Packet Length Variance": {
"lower": 0.0,
"upper": 3404593.931120044
},
"FIN Flag Count": {
"ACK Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"SYN Flag Count": {
"SYN Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"RST Flag Count": {
"FIN Flag Cnt": {
"lower": 0.0,
"upper": 0.0
},
"PSH Flag Count": {
"RST Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"ACK Flag Count": {
"Pkt Len Mean": {
"lower": 0.0,
"upper": 1.0
"upper": 788.0
},
"URG Flag Count": {
"Pkt Len Std": {
"lower": 0.0,
"upper": 1.0
"upper": 694.3287520429456
},
"CWE Flag Count": {
"Fwd Pkt Len Std": {
"lower": 0.0,
"upper": 0.0
"upper": 462.463836424
},
"ECE Flag Count": {
"Bwd Pkt Len Std": {
"lower": 0.0,
"upper": 0.0
"upper": 706.977065702
},
"Down\/Up Ratio": {
"Fwd Seg Size Min": {
"lower": 0.0,
"upper": 5.0
"upper": 32.0
},
"Average Packet Size": {
"Fwd Act Data Pkts": {
"lower": 0.0,
"upper": 1182.362785582229
},
"Avg Fwd Segment Size": {
"lower": 0.0,
"upper": 1932.5
},
"Avg Bwd Segment Size": {
"lower": 0.0,
"upper": 1715.628244226656
},
"Fwd Header Length.1": {
"lower": 20.0,
"upper": 2376.0
},
"Fwd Avg Bytes\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Avg Packets\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Avg Bulk Rate": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Bytes\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Packets\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Bulk Rate": {
"lower": 0.0,
"upper": 0.0
},
"Subflow Fwd Packets": {
"lower": 1.0,
"upper": 98.0
},
"Subflow Fwd Bytes": {
"lower": 0.0,
"upper": 13119.520000000019
},
"Subflow Bwd Packets": {
"lower": 0.0,
"upper": 126.0
},
"Subflow Bwd Bytes": {
"lower": 0.0,
"upper": 186394.64000000013
},
"Init_Win_bytes_forward": {
"lower": -1.0,
"upper": 65535.0
},
"Init_Win_bytes_backward": {
"lower": -1.0,
"upper": 65535.0
},
"act_data_pkt_fwd": {
"lower": 0.0,
"upper": 49.0
},
"min_seg_size_forward": {
"lower": 20.0,
"upper": 40.0
},
"Active Mean": {
"lower": 0.0,
"upper": 3410152.040000004
},
"Active Std": {
"lower": 0.0,
"upper": 1944723.8431600018
},
"Active Max": {
"lower": 0.0,
"upper": 5717825.840000004
},
"Active Min": {
"lower": 0.0,
"upper": 2918887.7600000002
},
"Idle Mean": {
"lower": 0.0,
"upper": 94100000.0
},
"Idle Std": {
"lower": 0.0,
"upper": 20712312.015200634
},
"Idle Max": {
"lower": 0.0,
"upper": 94800000.0
},
"Idle Min": {
"lower": 0.0,
"upper": 94100000.0
"upper": 17.0
}
},
"scaler": {
"mean": [
9415.502043247605,
11217541.457604988,
5.41509711200182,
5.010050165039152,
508.74335117243135,
3302.166099044608,
217.24886707430434,
20.105687086824716,
65.40745127720037,
68.76070937185386,
394.97690859650953,
49.88046220640826,
159.85952962743096,
121.94653847258593,
872411.6556228747,
64701.11201063558,
840255.3525863544,
1516373.8724808302,
4422301.697900706,
24666.656195771673,
10897580.686685171,
1785372.7881935516,
1206278.3042178946,
4276119.216091527,
1025069.5899462275,
10158901.07420493,
1666490.9735317046,
939816.6614413982,
3689910.1546691586,
1003727.4123986625,
0.054886351088404936,
13605.264670790513,
8.888298136096822,
14172130.7055961,
4.981146773268762,
4.191271286985891,
425.38068040122073,
1508.3582114533383,
122686.93604957206,
31689.483286614213,
9356.590404299139,
10298.78862259854,
63.66383102156588,
123.53730293136496,
4745762.237947725,
5072531.564875322,
614075.3427142479,
0.3923875436551255,
0.31855383367508067,
0.039800125434188274,
0.0,
0.0,
0.0,
140.54050707030981,
133.63606216540694,
58358.168874140014,
4983.791329731815,
19.812641079549177,
480.4855221752525,
108.29833052637488,
144.4437888623996,
99406.03379366906,
0.01811977227544623,
0.054886351088404936,
0.0,
0.25800834720207716,
0.28694244020382764,
0.11596161536441252,
0.0,
0.0,
0.6969992921551522,
122.46836156918589,
65.40745127720037,
159.85952962743843,
140.54050707030981,
0.0,
0.0,
0.0,
0.0,
0.0,
0.0,
5.41509711200182,
508.74335117243135,
5.010050165039152,
3302.166099044608,
6891.551141020379,
2404.6474695096604,
2.6520584031389776,
25.79473555242033,
61328.50855670946,
36311.697575423306,
137445.81057140988,
37549.65545208145,
3689065.3106244486,
167385.3556173429,
3883594.4613142335,
3458258.8992590285
0.1590239690395967,
89.38716460269418,
141.09782795953095,
100.43414487581657,
139.39693015845882,
17.38091902573146,
1.954666577867133
],
"std": [
19743.81786383566,
30111390.85802201,
10.612016675700064,
12.872110268702288,
1653.7982707262067,
17387.56157755931,
645.437387791972,
22.356844266679282,
193.61621129020307,
244.137250250046,
801.628533600607,
65.65797274491328,
277.7559653593753,
269.57514761088515,
3622907.235127058,
237431.11489053545,
3293477.440659972,
5309087.889319858,
14143198.815741453,
160458.44923675407,
29985211.254190512,
8130184.699376457,
4247601.6170286415,
14271787.10745024,
7769581.505106356,
29154202.839787327,
8031691.1024753135,
3622760.030182759,
13368925.151392205,
7684129.1959599955,
0.22775829195136954,
22110.411563719572,
4.997109781730194,
32705120.207070217,
6.2783124139579485,
8.786451481529456,
620.1570369781876,
7436.1329753578375,
294820.8176439754,
205789.50427876646,
18805.87545918509,
21526.039188241113,
65.2983405247466,
167.91327209270943,
17178773.27142658,
17230511.413126044,
1896212.1888100673,
0.4882822536601371,
0.46591553818904746,
0.19548932310899017,
1.0,
1.0,
1.0,
271.11142624961946,
342.17520432711024,
231133.09437362824,
14026.707464402314,
22.005832334437958,
970.4322795025132,
179.9690556845557,
280.2535015764328,
343919.1355100174,
0.13338457979891152,
0.22775829195136954,
1.0,
0.4375386154114052,
0.4523344738284939,
0.32017888613474904,
1.0,
1.0,
0.6456077980707177,
185.26118186235436,
193.61621129020307,
277.7559653594075,
271.11142624961946,
1.0,
1.0,
1.0,
1.0,
1.0,
1.0,
10.612016675700064,
1653.7982707262067,
12.872110268702288,
17387.56157755931,
14922.88749872485,
9322.158869764009,
5.784504103070997,
6.252894021045679,
322010.01591284445,
201975.98444339563,
641116.7578408231,
245957.32066446543,
13068297.83388166,
1617503.1921646637,
13724469.425904194,
12765671.772576509
0.36569843629757304,
106.45860458495893,
168.19373889243357,
145.09819322748442,
197.73115784258724,
7.004009254988801,
3.223242013632391
],
"feature_names": [
"Destination Port",
"Dst Port",
"Protocol",
"Flow Duration",
"Total Fwd Packets",
"Total Backward Packets",
"Total Length of Fwd Packets",
"Total Length of Bwd Packets",
"Fwd Packet Length Max",
"Fwd Packet Length Min",
"Fwd Packet Length Mean",
"Fwd Packet Length Std",
"Bwd Packet Length Max",
"Bwd Packet Length Min",
"Bwd Packet Length Mean",
"Bwd Packet Length Std",
"Flow Bytes\/s",
"Flow Packets\/s",
"Tot Fwd Pkts",
"Tot Bwd Pkts",
"TotLen Fwd Pkts",
"TotLen Bwd Pkts",
"Flow Byts\/s",
"Flow Pkts\/s",
"Init Fwd Win Byts",
"Init Bwd Win Byts",
"Fwd Pkt Len Mean",
"Bwd Pkt Len Mean",
"Flow IAT Mean",
"Flow IAT Std",
"Flow IAT Max",
"Flow IAT Min",
"Fwd IAT Total",
"Fwd IAT Mean",
"Fwd IAT Std",
"Fwd IAT Max",
"Fwd IAT Min",
"Bwd IAT Total",
"Bwd IAT Mean",
"Bwd IAT Std",
"Bwd IAT Max",
"Bwd IAT Min",
"Fwd PSH Flags",
"Bwd PSH Flags",
"Fwd URG Flags",
"Bwd URG Flags",
"Fwd Header Length",
"Bwd Header Length",
"Fwd Packets\/s",
"Bwd Packets\/s",
"Min Packet Length",
"Max Packet Length",
"Packet Length Mean",
"Packet Length Std",
"Packet Length Variance",
"FIN Flag Count",
"SYN Flag Count",
"RST Flag Count",
"PSH Flag Count",
"ACK Flag Count",
"URG Flag Count",
"CWE Flag Count",
"ECE Flag Count",
"Down\/Up Ratio",
"Average Packet Size",
"Avg Fwd Segment Size",
"Avg Bwd Segment Size",
"Fwd Header Length.1",
"Fwd Avg Bytes\/Bulk",
"Fwd Avg Packets\/Bulk",
"Fwd Avg Bulk Rate",
"Bwd Avg Bytes\/Bulk",
"Bwd Avg Packets\/Bulk",
"Bwd Avg Bulk Rate",
"Subflow Fwd Packets",
"Subflow Fwd Bytes",
"Subflow Bwd Packets",
"Subflow Bwd Bytes",
"Init_Win_bytes_forward",
"Init_Win_bytes_backward",
"act_data_pkt_fwd",
"min_seg_size_forward",
"Active Mean",
"Active Std",
"Active Max",
"Active Min",
"Idle Mean",
"Idle Std",
"Idle Max",
"Idle Min"
"PSH Flag Cnt",
"ACK Flag Cnt",
"SYN Flag Cnt",
"FIN Flag Cnt",
"RST Flag Cnt",
"Pkt Len Mean",
"Pkt Len Std",
"Fwd Pkt Len Std",
"Bwd Pkt Len Std",
"Fwd Seg Size Min",
"Fwd Act Data Pkts"
]
},
"post_scaling_clip": {
@ -580,113 +223,57 @@
}
},
"ensemble": {
"strategy_name": "Max",
"threshold": 0.3603835832054485,
"tpr": 0.9985636048676042,
"fpr": 0.0029998719808261593,
"precision": 0.9879023673677936,
"f1": 0.9932043770233031
"strategy_name": "W_5:5",
"threshold": 0.3016749754187814,
"tpr": 0.9458339625250388,
"fpr": 0.0030000379530757478,
"precision": 0.9921255875465886,
"f1": 0.968426895965903
},
"ae_normalization": {
"min": 1.480184057280627e-5,
"max": 1.1978646574008398,
"mean": 0.0023598657051511107,
"std": 0.008826375460685048,
"median": 0.00031163828850514576,
"p90": 0.004909278753678756,
"p95": 0.010077479060604477,
"p99": 0.03354822433745485
"min": 1.4977082783847335e-5,
"max": 0.5430802486068682,
"mean": 0.0007302135651916349,
"std": 0.003171614172836621,
"median": 0.00012121034674678951,
"p90": 0.0014718388390135564,
"p95": 0.0030708513285756275,
"p99": 0.01020370532519011
},
"attack_labels": {
"0": "Bot",
"1": "DDoS",
"2": "DoS GoldenEye",
"3": "DoS Hulk",
"4": "DoS Slowhttptest",
"5": "DoS slowloris",
"6": "FTP-Patator",
"7": "PortScan",
"8": "SSH-Patator",
"9": "Web Attack"
"1": "Brute Force",
"2": "DDoS",
"3": "DoS",
"4": "Web Attack"
},
"feature_order": [
"Destination Port",
"Dst Port",
"Protocol",
"Flow Duration",
"Total Fwd Packets",
"Total Backward Packets",
"Total Length of Fwd Packets",
"Total Length of Bwd Packets",
"Fwd Packet Length Max",
"Fwd Packet Length Min",
"Fwd Packet Length Mean",
"Fwd Packet Length Std",
"Bwd Packet Length Max",
"Bwd Packet Length Min",
"Bwd Packet Length Mean",
"Bwd Packet Length Std",
"Flow Bytes\/s",
"Flow Packets\/s",
"Tot Fwd Pkts",
"Tot Bwd Pkts",
"TotLen Fwd Pkts",
"TotLen Bwd Pkts",
"Flow Byts\/s",
"Flow Pkts\/s",
"Init Fwd Win Byts",
"Init Bwd Win Byts",
"Fwd Pkt Len Mean",
"Bwd Pkt Len Mean",
"Flow IAT Mean",
"Flow IAT Std",
"Flow IAT Max",
"Flow IAT Min",
"Fwd IAT Total",
"Fwd IAT Mean",
"Fwd IAT Std",
"Fwd IAT Max",
"Fwd IAT Min",
"Bwd IAT Total",
"Bwd IAT Mean",
"Bwd IAT Std",
"Bwd IAT Max",
"Bwd IAT Min",
"Fwd PSH Flags",
"Bwd PSH Flags",
"Fwd URG Flags",
"Bwd URG Flags",
"Fwd Header Length",
"Bwd Header Length",
"Fwd Packets\/s",
"Bwd Packets\/s",
"Min Packet Length",
"Max Packet Length",
"Packet Length Mean",
"Packet Length Std",
"Packet Length Variance",
"FIN Flag Count",
"SYN Flag Count",
"RST Flag Count",
"PSH Flag Count",
"ACK Flag Count",
"URG Flag Count",
"CWE Flag Count",
"ECE Flag Count",
"Down\/Up Ratio",
"Average Packet Size",
"Avg Fwd Segment Size",
"Avg Bwd Segment Size",
"Fwd Header Length.1",
"Fwd Avg Bytes\/Bulk",
"Fwd Avg Packets\/Bulk",
"Fwd Avg Bulk Rate",
"Bwd Avg Bytes\/Bulk",
"Bwd Avg Packets\/Bulk",
"Bwd Avg Bulk Rate",
"Subflow Fwd Packets",
"Subflow Fwd Bytes",
"Subflow Bwd Packets",
"Subflow Bwd Bytes",
"Init_Win_bytes_forward",
"Init_Win_bytes_backward",
"act_data_pkt_fwd",
"min_seg_size_forward",
"Active Mean",
"Active Std",
"Active Max",
"Active Min",
"Idle Mean",
"Idle Std",
"Idle Max",
"Idle Min"
"PSH Flag Cnt",
"ACK Flag Cnt",
"SYN Flag Cnt",
"FIN Flag Cnt",
"RST Flag Cnt",
"Pkt Len Mean",
"Pkt Len Std",
"Fwd Pkt Len Std",
"Bwd Pkt Len Std",
"Fwd Seg Size Min",
"Fwd Act Data Pkts"
]
}

656
models/inference_config.json
View File

@ -1,582 +1,220 @@
{
"threshold": 0.3603835832054485,
"strategy_name": "Max",
"threshold": 0.3016749754187814,
"strategy_name": "W_5:5",
"clip_params": {
"Destination Port": {
"lower": 22.0,
"upper": 63734.0
"Dst Port": {
"lower": 0.0,
"upper": 64378.0
},
"Protocol": {
"lower": 0.0,
"upper": 17.0
},
"Flow Duration": {
"lower": 0.0,
"upper": 118851669.0
},
"Tot Fwd Pkts": {
"lower": 1.0,
"upper": 118756600.72000001
"upper": 54.0
},
"Total Fwd Packets": {
"lower": 1.0,
"upper": 98.0
},
"Total Backward Packets": {
"Tot Bwd Pkts": {
"lower": 0.0,
"upper": 126.0
"upper": 86.0
},
"Total Length of Fwd Packets": {
"TotLen Fwd Pkts": {
"lower": 0.0,
"upper": 13119.520000000019
"upper": 4543.0
},
"Total Length of Bwd Packets": {
"TotLen Bwd Pkts": {
"lower": 0.0,
"upper": 186394.64000000013
"upper": 84861.60000000615
},
"Fwd Packet Length Max": {
"Flow Byts\/s": {
"lower": 0.0,
"upper": 5840.0
"upper": 2402596.0400020555
},
"Fwd Packet Length Min": {
"lower": 0.0,
"upper": 98.0
},
"Fwd Packet Length Mean": {
"lower": 0.0,
"upper": 1932.5
},
"Fwd Packet Length Std": {
"lower": 0.0,
"upper": 2376.49858
},
"Bwd Packet Length Max": {
"lower": 0.0,
"upper": 4380.0
},
"Bwd Packet Length Min": {
"lower": 0.0,
"upper": 308.0
},
"Bwd Packet Length Mean": {
"lower": 0.0,
"upper": 1715.628244226656
},
"Bwd Packet Length Std": {
"lower": 0.0,
"upper": 1167.9936145600002
},
"Flow Bytes\/s": {
"lower": 0.0,
"upper": 37000000.0
},
"Flow Packets\/s": {
"lower": 0.041637660508,
"Flow Pkts\/s": {
"lower": -1.0,
"upper": 2000000.0
},
"Init Fwd Win Byts": {
"lower": -1.0,
"upper": 65535.0
},
"Init Bwd Win Byts": {
"lower": -1.0,
"upper": 64000.0
},
"Fwd Pkt Len Mean": {
"lower": 0.0,
"upper": 268.3466666666444
},
"Bwd Pkt Len Mean": {
"lower": 0.0,
"upper": 1177.7322105263513
},
"Flow IAT Mean": {
"lower": 1.0,
"upper": 30800000.0
},
"Flow IAT Std": {
"lower": 0.0,
"upper": 44253994.319940574
},
"Flow IAT Max": {
"lower": 1.0,
"upper": 96199268.00000003
},
"Flow IAT Min": {
"lower": 0.0,
"upper": 1999969.04
},
"Fwd IAT Total": {
"lower": 0.0,
"upper": 119000000.0
"upper": 87489637.0
},
"Fwd IAT Mean": {
"lower": 0.0,
"upper": 74300000.0
},
"Fwd IAT Std": {
"lower": 0.0,
"upper": 35894248.669783354
},
"Fwd IAT Max": {
"lower": 0.0,
"upper": 97800000.0
},
"Fwd IAT Min": {
"lower": 0.0,
"upper": 74300000.0
},
"Bwd IAT Total": {
"lower": 0.0,
"upper": 118000000.0
"upper": 87636954.48000036
},
"Bwd IAT Mean": {
"lower": 0.0,
"upper": 73734410.76000024
"upper": 12585030.880001608
},
"Bwd IAT Std": {
"lower": 0.0,
"upper": 30100000.0
},
"Bwd IAT Max": {
"lower": 0.0,
"upper": 93800000.0
},
"Bwd IAT Min": {
"lower": 0.0,
"upper": 73734410.76000024
},
"Fwd PSH Flags": {
"PSH Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"Bwd PSH Flags": {
"lower": 0.0,
"upper": 0.0
},
"Fwd URG Flags": {
"lower": 0.0,
"upper": 0.0
},
"Bwd URG Flags": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Header Length": {
"lower": 20.0,
"upper": 2376.0
},
"Bwd Header Length": {
"lower": 0.0,
"upper": 3312.0
},
"Fwd Packets\/s": {
"lower": 0.02417299188,
"upper": 2000000.0
},
"Bwd Packets\/s": {
"lower": 0.0,
"upper": 142857.1429
},
"Min Packet Length": {
"lower": 0.0,
"upper": 89.0
},
"Max Packet Length": {
"lower": 0.0,
"upper": 5840.0
},
"Packet Length Mean": {
"lower": 0.0,
"upper": 1153.4362532
},
"Packet Length Std": {
"lower": 0.0,
"upper": 1845.154148000012
},
"Packet Length Variance": {
"lower": 0.0,
"upper": 3404593.931120044
},
"FIN Flag Count": {
"ACK Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"SYN Flag Count": {
"SYN Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"RST Flag Count": {
"FIN Flag Cnt": {
"lower": 0.0,
"upper": 0.0
},
"PSH Flag Count": {
"RST Flag Cnt": {
"lower": 0.0,
"upper": 1.0
},
"ACK Flag Count": {
"Pkt Len Mean": {
"lower": 0.0,
"upper": 1.0
"upper": 788.0
},
"URG Flag Count": {
"Pkt Len Std": {
"lower": 0.0,
"upper": 1.0
"upper": 694.3287520429456
},
"CWE Flag Count": {
"Fwd Pkt Len Std": {
"lower": 0.0,
"upper": 0.0
"upper": 462.463836424
},
"ECE Flag Count": {
"Bwd Pkt Len Std": {
"lower": 0.0,
"upper": 0.0
"upper": 706.977065702
},
"Down\/Up Ratio": {
"Fwd Seg Size Min": {
"lower": 0.0,
"upper": 5.0
"upper": 32.0
},
"Average Packet Size": {
"Fwd Act Data Pkts": {
"lower": 0.0,
"upper": 1182.362785582229
},
"Avg Fwd Segment Size": {
"lower": 0.0,
"upper": 1932.5
},
"Avg Bwd Segment Size": {
"lower": 0.0,
"upper": 1715.628244226656
},
"Fwd Header Length.1": {
"lower": 20.0,
"upper": 2376.0
},
"Fwd Avg Bytes\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Avg Packets\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Fwd Avg Bulk Rate": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Bytes\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Packets\/Bulk": {
"lower": 0.0,
"upper": 0.0
},
"Bwd Avg Bulk Rate": {
"lower": 0.0,
"upper": 0.0
},
"Subflow Fwd Packets": {
"lower": 1.0,
"upper": 98.0
},
"Subflow Fwd Bytes": {
"lower": 0.0,
"upper": 13119.520000000019
},
"Subflow Bwd Packets": {
"lower": 0.0,
"upper": 126.0
},
"Subflow Bwd Bytes": {
"lower": 0.0,
"upper": 186394.64000000013
},
"Init_Win_bytes_forward": {
"lower": -1.0,
"upper": 65535.0
},
"Init_Win_bytes_backward": {
"lower": -1.0,
"upper": 65535.0
},
"act_data_pkt_fwd": {
"lower": 0.0,
"upper": 49.0
},
"min_seg_size_forward": {
"lower": 20.0,
"upper": 40.0
},
"Active Mean": {
"lower": 0.0,
"upper": 3410152.040000004
},
"Active Std": {
"lower": 0.0,
"upper": 1944723.8431600018
},
"Active Max": {
"lower": 0.0,
"upper": 5717825.840000004
},
"Active Min": {
"lower": 0.0,
"upper": 2918887.7600000002
},
"Idle Mean": {
"lower": 0.0,
"upper": 94100000.0
},
"Idle Std": {
"lower": 0.0,
"upper": 20712312.015200634
},
"Idle Max": {
"lower": 0.0,
"upper": 94800000.0
},
"Idle Min": {
"lower": 0.0,
"upper": 94100000.0
"upper": 17.0
}
},
"scaler_mean": [
9415.502043247605,
11217541.457604988,
5.41509711200182,
5.010050165039152,
508.74335117243135,
3302.166099044608,
217.24886707430434,
20.105687086824716,
65.40745127720037,
68.76070937185386,
394.97690859650953,
49.88046220640826,
159.85952962743096,
121.94653847258593,
872411.6556228747,
64701.11201063558,
840255.3525863544,
1516373.8724808302,
4422301.697900706,
24666.656195771673,
10897580.686685171,
1785372.7881935516,
1206278.3042178946,
4276119.216091527,
1025069.5899462275,
10158901.07420493,
1666490.9735317046,
939816.6614413982,
3689910.1546691586,
1003727.4123986625,
0.054886351088404936,
13605.264670790513,
8.888298136096822,
14172130.7055961,
4.981146773268762,
4.191271286985891,
425.38068040122073,
1508.3582114533383,
122686.93604957206,
31689.483286614213,
9356.590404299139,
10298.78862259854,
63.66383102156588,
123.53730293136496,
4745762.237947725,
5072531.564875322,
614075.3427142479,
0.3923875436551255,
0.31855383367508067,
0.039800125434188274,
0.0,
0.0,
0.0,
140.54050707030981,
133.63606216540694,
58358.168874140014,
4983.791329731815,
19.812641079549177,
480.4855221752525,
108.29833052637488,
144.4437888623996,
99406.03379366906,
0.01811977227544623,
0.054886351088404936,
0.0,
0.25800834720207716,
0.28694244020382764,
0.11596161536441252,
0.0,
0.0,
0.6969992921551522,
122.46836156918589,
65.40745127720037,
159.85952962743843,
140.54050707030981,
0.0,
0.0,
0.0,
0.0,
0.0,
0.0,
5.41509711200182,
508.74335117243135,
5.010050165039152,
3302.166099044608,
6891.551141020379,
2404.6474695096604,
2.6520584031389776,
25.79473555242033,
61328.50855670946,
36311.697575423306,
137445.81057140988,
37549.65545208145,
3689065.3106244486,
167385.3556173429,
3883594.4613142335,
3458258.8992590285
0.1590239690395967,
89.38716460269418,
141.09782795953095,
100.43414487581657,
139.39693015845882,
17.38091902573146,
1.954666577867133
],
"scaler_std": [
19743.81786383566,
30111390.85802201,
10.612016675700064,
12.872110268702288,
1653.7982707262067,
17387.56157755931,
645.437387791972,
22.356844266679282,
193.61621129020307,
244.137250250046,
801.628533600607,
65.65797274491328,
277.7559653593753,
269.57514761088515,
3622907.235127058,
237431.11489053545,
3293477.440659972,
5309087.889319858,
14143198.815741453,
160458.44923675407,
29985211.254190512,
8130184.699376457,
4247601.6170286415,
14271787.10745024,
7769581.505106356,
29154202.839787327,
8031691.1024753135,
3622760.030182759,
13368925.151392205,
7684129.1959599955,
0.22775829195136954,
22110.411563719572,
4.997109781730194,
32705120.207070217,
6.2783124139579485,
8.786451481529456,
620.1570369781876,
7436.1329753578375,
294820.8176439754,
205789.50427876646,
18805.87545918509,
21526.039188241113,
65.2983405247466,
167.91327209270943,
17178773.27142658,
17230511.413126044,
1896212.1888100673,
0.4882822536601371,
0.46591553818904746,
0.19548932310899017,
1.0,
1.0,
1.0,
271.11142624961946,
342.17520432711024,
231133.09437362824,
14026.707464402314,
22.005832334437958,
970.4322795025132,
179.9690556845557,
280.2535015764328,
343919.1355100174,
0.13338457979891152,
0.22775829195136954,
1.0,
0.4375386154114052,
0.4523344738284939,
0.32017888613474904,
1.0,
1.0,
0.6456077980707177,
185.26118186235436,
193.61621129020307,
277.7559653594075,
271.11142624961946,
1.0,
1.0,
1.0,
1.0,
1.0,
1.0,
10.612016675700064,
1653.7982707262067,
12.872110268702288,
17387.56157755931,
14922.88749872485,
9322.158869764009,
5.784504103070997,
6.252894021045679,
322010.01591284445,
201975.98444339563,
641116.7578408231,
245957.32066446543,
13068297.83388166,
1617503.1921646637,
13724469.425904194,
12765671.772576509
0.36569843629757304,
106.45860458495893,
168.19373889243357,
145.09819322748442,
197.73115784258724,
7.004009254988801,
3.223242013632391
],
"post_clip_min": -5.0,
"post_clip_max": 5.0,
"ae_normalization": {
"min": 1.480184057280627e-5,
"max": 1.1978646574008398,
"mean": 0.0023598657051511107,
"std": 0.008826375460685048,
"median": 0.00031163828850514576,
"p90": 0.004909278753678756,
"p95": 0.010077479060604477,
"p99": 0.03354822433745485
"min": 1.4977082783847335e-5,
"max": 0.5430802486068682,
"mean": 0.0007302135651916349,
"std": 0.003171614172836621,
"median": 0.00012121034674678951,
"p90": 0.0014718388390135564,
"p95": 0.0030708513285756275,
"p99": 0.01020370532519011
},
"attack_labels": {
"0": "Bot",
"1": "DDoS",
"2": "DoS GoldenEye",
"3": "DoS Hulk",
"4": "DoS Slowhttptest",
"5": "DoS slowloris",
"6": "FTP-Patator",
"7": "PortScan",
"8": "SSH-Patator",
"9": "Web Attack"
"1": "Brute Force",
"2": "DDoS",
"3": "DoS",
"4": "Web Attack"
},
"feature_names": [
"Destination Port",
"Dst Port",
"Protocol",
"Flow Duration",
"Total Fwd Packets",
"Total Backward Packets",
"Total Length of Fwd Packets",
"Total Length of Bwd Packets",
"Fwd Packet Length Max",
"Fwd Packet Length Min",
"Fwd Packet Length Mean",
"Fwd Packet Length Std",
"Bwd Packet Length Max",
"Bwd Packet Length Min",
"Bwd Packet Length Mean",
"Bwd Packet Length Std",
"Flow Bytes\/s",
"Flow Packets\/s",
"Tot Fwd Pkts",
"Tot Bwd Pkts",
"TotLen Fwd Pkts",
"TotLen Bwd Pkts",
"Flow Byts\/s",
"Flow Pkts\/s",
"Init Fwd Win Byts",
"Init Bwd Win Byts",
"Fwd Pkt Len Mean",
"Bwd Pkt Len Mean",
"Flow IAT Mean",
"Flow IAT Std",
"Flow IAT Max",
"Flow IAT Min",
"Fwd IAT Total",
"Fwd IAT Mean",
"Fwd IAT Std",
"Fwd IAT Max",
"Fwd IAT Min",
"Bwd IAT Total",
"Bwd IAT Mean",
"Bwd IAT Std",
"Bwd IAT Max",
"Bwd IAT Min",
"Fwd PSH Flags",
"Bwd PSH Flags",
"Fwd URG Flags",
"Bwd URG Flags",
"Fwd Header Length",
"Bwd Header Length",
"Fwd Packets\/s",
"Bwd Packets\/s",
"Min Packet Length",
"Max Packet Length",
"Packet Length Mean",
"Packet Length Std",
"Packet Length Variance",
"FIN Flag Count",
"SYN Flag Count",
"RST Flag Count",
"PSH Flag Count",
"ACK Flag Count",
"URG Flag Count",
"CWE Flag Count",
"ECE Flag Count",
"Down\/Up Ratio",
"Average Packet Size",
"Avg Fwd Segment Size",
"Avg Bwd Segment Size",
"Fwd Header Length.1",
"Fwd Avg Bytes\/Bulk",
"Fwd Avg Packets\/Bulk",
"Fwd Avg Bulk Rate",
"Bwd Avg Bytes\/Bulk",
"Bwd Avg Packets\/Bulk",
"Bwd Avg Bulk Rate",
"Subflow Fwd Packets",
"Subflow Fwd Bytes",
"Subflow Bwd Packets",
"Subflow Bwd Bytes",
"Init_Win_bytes_forward",
"Init_Win_bytes_backward",
"act_data_pkt_fwd",
"min_seg_size_forward",
"Active Mean",
"Active Std",
"Active Max",
"Active Min",
"Idle Mean",
"Idle Std",
"Idle Max",
"Idle Min"
"PSH Flag Cnt",
"ACK Flag Cnt",
"SYN Flag Cnt",
"FIN Flag Cnt",
"RST Flag Cnt",
"Pkt Len Mean",
"Pkt Len Std",
"Fwd Pkt Len Std",
"Bwd Pkt Len Std",
"Fwd Seg Size Min",
"Fwd Act Data Pkts"
]
}

BIN
models/mlp.onnx
View File

Binary file not shown.

BIN
models/random_forest.onnx
View File

Binary file not shown.

55
net-guardia/src/ml/feature_extractor.rs
View File

@ -46,17 +46,17 @@ impl FlowFeatures {
// 16-19
let flow_iats = compute_flow_iats(&flow.fwd_packets, &flow.bwd_packets);
let (flow_iat_mean, flow_iat_std, flow_iat_max, flow_iat_min) = compute_stats(&flow_iats);
let (flow_iat_max, flow_iat_min, flow_iat_mean, flow_iat_std) = compute_stats(&flow_iats);
// 20-24
let fwd_iats = compute_iats(&flow.fwd_packets);
let fwd_iat_total: f64 = fwd_iats.iter().sum();
let (fwd_iat_mean, fwd_iat_std, fwd_iat_max, fwd_iat_min) = compute_stats(&fwd_iats);
let (fwd_iat_max, fwd_iat_min, fwd_iat_mean, fwd_iat_std) = compute_stats(&fwd_iats);
// 25-29
let bwd_iats = compute_iats(&flow.bwd_packets);
let bwd_iat_total: f64 = bwd_iats.iter().sum();
let (bwd_iat_mean, bwd_iat_std, bwd_iat_max, bwd_iat_min) = compute_stats(&bwd_iats);
let (bwd_iat_max, bwd_iat_min, bwd_iat_mean, bwd_iat_std) = compute_stats(&bwd_iats);
// 30-37
let fwd_psh = flow.fwd_packets.iter().filter(|p| p.flags.psh).count() as f64;
@ -86,7 +86,7 @@ impl FlowFeatures {
.collect();
// 70-73
let (active_mean, active_std, active_max, active_min) = compute_stats(
let (active_max, active_min, active_mean, active_std) = compute_stats(
&flow
.active_periods
.iter()
@ -95,7 +95,7 @@ impl FlowFeatures {
);
// 74-77
let (idle_mean, idle_std, idle_max, idle_min) = compute_stats(
let (idle_max, idle_min, idle_mean, idle_std) = compute_stats(
&flow
.idle_periods
.iter()
@ -104,22 +104,23 @@ impl FlowFeatures {
);
match feature_name {
"Destination Port" => flow.flow_key.dst_port as f64,
"Destination Port" | "Dst Port" => flow.flow_key.dst_port as f64,
"Protocol" => flow.flow_key.protocol as f64,
"Flow Duration" => duration_us,
"Total Fwd Packets" => fwd_count,
"Total Backward Packets" => bwd_count,
"Total Length of Fwd Packets" => flow.fwd_total_bytes as f64,
"Total Length of Bwd Packets" => flow.bwd_total_bytes as f64,
"Total Fwd Packets" | "Tot Fwd Pkts" => fwd_count,
"Total Backward Packets" | "Tot Bwd Pkts" => bwd_count,
"Total Length of Fwd Packets" | "TotLen Fwd Pkts" => flow.fwd_total_bytes as f64,
"Total Length of Bwd Packets" | "TotLen Bwd Pkts" => flow.bwd_total_bytes as f64,
"Fwd Packet Length Max" => fwd_max,
"Fwd Packet Length Min" => fwd_min,
"Fwd Packet Length Mean" => fwd_mean,
"Fwd Packet Length Std" => fwd_std,
"Fwd Packet Length Mean" | "Fwd Pkt Len Mean" => fwd_mean,
"Fwd Packet Length Std" | "Fwd Pkt Len Std" => fwd_std,
"Bwd Packet Length Max" => bwd_max,
"Bwd Packet Length Min" => bwd_min,
"Bwd Packet Length Mean" => bwd_mean,
"Bwd Packet Length Std" => bwd_std,
"Flow Bytes/s" => safe_div(total_bytes, duration_s),
"Flow Packets/s" => safe_div(total_count, duration_s),
"Bwd Packet Length Mean" | "Bwd Pkt Len Mean" => bwd_mean,
"Bwd Packet Length Std" | "Bwd Pkt Len Std" => bwd_std,
"Flow Bytes/s" | "Flow Byts/s" => safe_div(total_bytes, duration_s),
"Flow Packets/s" | "Flow Pkts/s" => safe_div(total_count, duration_s),
"Flow IAT Mean" => flow_iat_mean,
"Flow IAT Std" => flow_iat_std,
"Flow IAT Max" => flow_iat_max,
@ -144,14 +145,14 @@ impl FlowFeatures {
"Bwd Packets/s" => safe_div(bwd_count, duration_s),
"Min Packet Length" => min_len,
"Max Packet Length" => max_len,
"Packet Length Mean" => mean_len,
"Packet Length Std" => std_len,
"Packet Length Mean" | "Pkt Len Mean" => mean_len,
"Packet Length Std" | "Pkt Len Std" => std_len,
"Packet Length Variance" => std_len * std_len,
"FIN Flag Count" => flow.fin_count as f64,
"SYN Flag Count" => flow.syn_count as f64,
"RST Flag Count" => flow.rst_count as f64,
"PSH Flag Count" => flow.psh_count as f64,
"ACK Flag Count" => flow.ack_count as f64,
"FIN Flag Count" | "FIN Flag Cnt" => flow.fin_count as f64,
"SYN Flag Count" | "SYN Flag Cnt" => flow.syn_count as f64,
"RST Flag Count" | "RST Flag Cnt" => flow.rst_count as f64,
"PSH Flag Count" | "PSH Flag Cnt" => flow.psh_count as f64,
"ACK Flag Count" | "ACK Flag Cnt" => flow.ack_count as f64,
"URG Flag Count" => flow.urg_count as f64,
"CWE Flag Count" => flow.cwe_count as f64,
"ECE Flag Count" => flow.ece_count as f64,
@ -170,10 +171,10 @@ impl FlowFeatures {
"Subflow Fwd Bytes" => flow.fwd_total_bytes as f64,
"Subflow Bwd Packets" => bwd_count,
"Subflow Bwd Bytes" => flow.bwd_total_bytes as f64,
"Init_Win_bytes_forward" => flow.init_win_bytes_fwd as f64,
"Init_Win_bytes_backward" => flow.init_win_bytes_bwd as f64,
"act_data_pkt_fwd" => fwd_seg_sizes.len() as f64,
"min_seg_size_forward" => fwd_seg_sizes.iter()
"Init_Win_bytes_forward" | "Init Fwd Win Byts" => flow.init_win_bytes_fwd as f64,
"Init_Win_bytes_backward" | "Init Bwd Win Byts" => flow.init_win_bytes_bwd as f64,
"act_data_pkt_fwd" | "Fwd Act Data Pkts" => fwd_seg_sizes.len() as f64,
"min_seg_size_forward" | "Fwd Seg Size Min" => fwd_seg_sizes.iter()
.min_by(|a, b| a.total_cmp(b))
.copied()
.unwrap_or(0.0),