61
Table 18: decision tree on the multiclass test set (validation)
precision recall f1-score support
apache2
0.00
0.00
0.00
0
back
0.81
0.48
0.60
607
buffer_overflow 0.05
0.12
0.07
8
ftp_write
0.00
0.00
0.00
253
guess_passwd
0.03
1.00
0.06
37
httptunnel
0.00
0.00
0.00
0
imap
0.00
0.00
0.00
2
ipsweep
0.99
0.97
0.98
145
land
0.71
0.62
0.67
8
loadmodule
0.00
0.00
0.00
17
mailbomb
0.00
0.00
0.00
0
mscan
0.00
0.00
0.00
0
multihop
0.00
0.00
0.00
10
named
0.00
0.00
0.00
0
neptune
1.00
0.93
0.96
4990
nmap
0.99
0.95
0.97
76
normal
0.94
0.73
0.82
12623
perl
0.50
0.25
0.33
4
phf
0.50
1.00
0.67
1
pod
0.93
0.72
0.81
53
portsweep
0.92
0.40
0.55
367
processtable
0.00
0.00
0.00
0
ps
0.00
0.00
0.00
0
rootkit
0.00
0.00
0.00
12
saint
0.00
0.00
0.00
0
satan
0.97
0.29
0.45
2457
sendmail
0.00
0.00
0.00
0
smurf
1.00
0.98
0.99
680
snmpgetattack
0.00
0.00
0.00
0
snmpguess
0.00
0.00
0.00
0
spy
0.00
0.00
0.00
3
sqlattack
0.00
0.00
0.00
0
teardrop
1.00
0.24
0.39
49
udpstorm
0.00
0.00
0.00
0
warezclient
0.00
0.00
0.00
140
warezmaster
0.00
0.50
0.00
2
worm
0.00
0.00
0.00
0
xlock
0.00
0.00
0.00
0
xsnoop
0.00
0.00
0.00
0
xterm
0.00
0.00
0.00
0
accuracy
0.71
22544
macro avg
0.28
0.25
0.23
22544
weighted avg
0.94
0.71
0.79
22544