mirror of
https://github.com/DaLaw2/NetGuardia.git
synced 2026-08-24 22:20:28 +09:00
318 lines
6.4 KiB
JSON
318 lines
6.4 KiB
JSON
{
|
|
"ae_feature_names": [
|
|
"flow_duration",
|
|
"fwd_packets",
|
|
"bwd_packets",
|
|
"fwd_bytes",
|
|
"bwd_bytes",
|
|
"flow_bytes_per_sec",
|
|
"flow_pkts_per_sec",
|
|
"fwd_win_bytes",
|
|
"bwd_win_bytes",
|
|
"fwd_pkt_len_mean",
|
|
"bwd_pkt_len_mean",
|
|
"fwd_iat_mean",
|
|
"bwd_iat_mean",
|
|
"flow_iat_mean",
|
|
"pkt_len_mean",
|
|
"dst_port",
|
|
"protocol",
|
|
"psh_flag_cnt",
|
|
"ack_flag_cnt",
|
|
"syn_flag_cnt",
|
|
"fin_flag_cnt",
|
|
"rst_flag_cnt",
|
|
"pkt_len_std",
|
|
"fwd_pkt_len_std",
|
|
"bwd_pkt_len_std",
|
|
"fwd_seg_size_min",
|
|
"fwd_act_data_pkts",
|
|
"fwd_iat_std",
|
|
"bwd_iat_std",
|
|
"fwd_bwd_bytes_ratio",
|
|
"iat_cv"
|
|
],
|
|
"ae_clip_params": {
|
|
"flow_duration": {
|
|
"lower": 0.0,
|
|
"upper": 115669365.2
|
|
},
|
|
"fwd_packets": {
|
|
"lower": 0.0,
|
|
"upper": 120.0
|
|
},
|
|
"bwd_packets": {
|
|
"lower": 0.0,
|
|
"upper": 126.0
|
|
},
|
|
"fwd_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 19557.400390625
|
|
},
|
|
"bwd_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 85164.0
|
|
},
|
|
"flow_bytes_per_sec": {
|
|
"lower": 0.0,
|
|
"upper": 1627586.8125000005
|
|
},
|
|
"flow_pkts_per_sec": {
|
|
"lower": 0.0,
|
|
"upper": 23809.5234375
|
|
},
|
|
"fwd_win_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 65280.0
|
|
},
|
|
"bwd_win_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 65535.0
|
|
},
|
|
"fwd_pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 1500.0
|
|
},
|
|
"bwd_pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 822.0007794189461
|
|
},
|
|
"fwd_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 54051113.24
|
|
},
|
|
"bwd_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 6912790.715000001
|
|
},
|
|
"flow_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 166521472.0
|
|
},
|
|
"pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 957.2035284423835
|
|
},
|
|
"dst_port": {
|
|
"lower": 0.0,
|
|
"upper": 63005.0
|
|
},
|
|
"protocol": {
|
|
"lower": 0.0,
|
|
"upper": 17.0
|
|
},
|
|
"psh_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 52.0
|
|
},
|
|
"ack_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 107.0
|
|
},
|
|
"syn_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 4.0
|
|
},
|
|
"fin_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 1.0
|
|
},
|
|
"rst_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 0.0
|
|
},
|
|
"pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 818.4579974365238
|
|
},
|
|
"fwd_pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 256.8401712036142
|
|
},
|
|
"bwd_pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 676.0667114257812
|
|
},
|
|
"fwd_seg_size_min": {
|
|
"lower": 0.0,
|
|
"upper": 1026743.0693750025
|
|
},
|
|
"fwd_act_data_pkts": {
|
|
"lower": 0.0,
|
|
"upper": 12.0
|
|
},
|
|
"fwd_iat_std": {
|
|
"lower": 0.0,
|
|
"upper": 6691987.085000001
|
|
},
|
|
"bwd_iat_std": {
|
|
"lower": 0.0,
|
|
"upper": 5136363.065000001
|
|
},
|
|
"fwd_bwd_bytes_ratio": {
|
|
"lower": 0.0,
|
|
"upper": 1.0
|
|
},
|
|
"iat_cv": {
|
|
"lower": 0.0,
|
|
"upper": 0.0
|
|
}
|
|
},
|
|
"ae_scaler_mean": [
|
|
1775639.8280735926,
|
|
5.542641564702501,
|
|
4.873551306800804,
|
|
673.3628917399571,
|
|
1776.7162625946232,
|
|
22595.98254433581,
|
|
457.7205079100132,
|
|
5370.204067202503,
|
|
9979.409366405764,
|
|
310.21111530262294,
|
|
64.0225296706552,
|
|
421007.8046985764,
|
|
74954.24060464761,
|
|
1927814.4699678936,
|
|
18.27810422291583,
|
|
10009.108501605231,
|
|
9.275900254913996,
|
|
0.6270530398000678,
|
|
1.4141691028300247,
|
|
0.08438195832759936,
|
|
0.0413846397252831,
|
|
0.0,
|
|
20.458150398533718,
|
|
3.321724142251631,
|
|
13.033036407393814,
|
|
8569.843223681366,
|
|
0.21485243990919378,
|
|
94146.99057411935,
|
|
68775.38334652747,
|
|
0.47595050130443944,
|
|
0.0
|
|
],
|
|
"ae_scaler_std": [
|
|
12196313.175317517,
|
|
13.15004546194127,
|
|
13.245688945052057,
|
|
1969.9160973703263,
|
|
8250.018585629565,
|
|
161540.2407042193,
|
|
2518.5714986775442,
|
|
12103.605209582642,
|
|
20308.80085611352,
|
|
476.8868336260097,
|
|
95.72217224515282,
|
|
4199427.656867863,
|
|
616719.9756782106,
|
|
16437665.614047276,
|
|
97.4688620675193,
|
|
18194.33523865822,
|
|
5.182633726939228,
|
|
4.994559084102198,
|
|
10.431975160428792,
|
|
0.558462828085695,
|
|
0.19916731632770637,
|
|
1.0,
|
|
106.06236469581468,
|
|
24.362268530572912,
|
|
85.37603561474889,
|
|
84340.18813365103,
|
|
1.4442281045462682,
|
|
646928.7442307192,
|
|
525550.9737726098,
|
|
0.3431291415218137,
|
|
1.0
|
|
],
|
|
"ae_post_clip_min": -5.0,
|
|
"ae_post_clip_max": 5.0,
|
|
"ae_threshold": 0.23011694848537445,
|
|
"classifier_feature_names": [
|
|
"flow_duration",
|
|
"fwd_packets",
|
|
"bwd_packets",
|
|
"fwd_bytes",
|
|
"bwd_bytes",
|
|
"flow_bytes_per_sec",
|
|
"flow_pkts_per_sec",
|
|
"fwd_win_bytes",
|
|
"bwd_win_bytes",
|
|
"fwd_pkt_len_mean",
|
|
"bwd_pkt_len_mean",
|
|
"fwd_iat_mean",
|
|
"bwd_iat_mean",
|
|
"flow_iat_mean",
|
|
"pkt_len_mean",
|
|
"dst_port",
|
|
"protocol",
|
|
"psh_flag_cnt",
|
|
"ack_flag_cnt",
|
|
"syn_flag_cnt",
|
|
"fin_flag_cnt",
|
|
"rst_flag_cnt",
|
|
"pkt_len_std",
|
|
"fwd_pkt_len_std",
|
|
"bwd_pkt_len_std",
|
|
"fwd_seg_size_min",
|
|
"fwd_act_data_pkts",
|
|
"fwd_iat_std",
|
|
"bwd_iat_std",
|
|
"fwd_bwd_bytes_ratio",
|
|
"iat_cv",
|
|
"ae_anomaly_score"
|
|
],
|
|
"attack_labels": {
|
|
"0": "Bot",
|
|
"1": "Brute Force",
|
|
"2": "C2 Communication",
|
|
"3": "DNS Tunneling",
|
|
"4": "DoS/DDoS",
|
|
"5": "Exploitation",
|
|
"6": "Malware",
|
|
"7": "Normal",
|
|
"8": "Reconnaissance",
|
|
"9": "Web Attack"
|
|
},
|
|
"anomaly_threshold": 0.9179317355155945,
|
|
"c2_threshold": 0.9085615873336792,
|
|
"model_type": "MultiTaskModel",
|
|
"output_names": [
|
|
"anomaly",
|
|
"class_probs",
|
|
"c2_score"
|
|
],
|
|
"ae_feature_weights": {
|
|
"flow_duration": 1.0,
|
|
"fwd_packets": 1.0,
|
|
"bwd_packets": 1.0,
|
|
"fwd_bytes": 1.0,
|
|
"bwd_bytes": 1.0,
|
|
"flow_bytes_per_sec": 1.0,
|
|
"flow_pkts_per_sec": 1.0,
|
|
"fwd_win_bytes": 4.0,
|
|
"bwd_win_bytes": 4.0,
|
|
"fwd_pkt_len_mean": 1.0,
|
|
"bwd_pkt_len_mean": 1.0,
|
|
"fwd_iat_mean": 1.0,
|
|
"bwd_iat_mean": 1.0,
|
|
"flow_iat_mean": 1.0,
|
|
"pkt_len_mean": 1.0,
|
|
"dst_port": 1.0,
|
|
"protocol": 1.0,
|
|
"psh_flag_cnt": 2.0,
|
|
"ack_flag_cnt": 1.0,
|
|
"syn_flag_cnt": 2.0,
|
|
"fin_flag_cnt": 2.0,
|
|
"rst_flag_cnt": 2.0,
|
|
"pkt_len_std": 1.0,
|
|
"fwd_pkt_len_std": 1.0,
|
|
"bwd_pkt_len_std": 1.0,
|
|
"fwd_seg_size_min": 1.0,
|
|
"fwd_act_data_pkts": 1.0,
|
|
"fwd_iat_std": 1.5,
|
|
"bwd_iat_std": 1.5,
|
|
"fwd_bwd_bytes_ratio": 2.0,
|
|
"iat_cv": 2.0
|
|
},
|
|
"class_min_confidence": 0.4
|
|
} |