=== Run information ===

Scheme:       weka.classifiers.misc.InputMappedClassifier -I -trim -W weka.classifiers.meta.AttributeSelectedClassifier -- -E "weka.attributeSelection.CfsSubsetEval -P 1 -E 1" -S "weka.attributeSelection.BestFirst -D 1 -N 5" -W weka.classifiers.functions.MultilayerPerceptron -- -L 0.3 -M 0.2 -N 500 -V 0 -S 0 -E 20 -H a
Relation:     TrainingKDD99
Instances:    40000
Attributes:   40
              duration
              protocol_type
              service
              flag
              src_bytes
              dst_bytes
              land
              wrong_fragment
              urgent
              hot
              num_failed_logins
              logged_in
              num_compromised
              root_shell
              su_attempted
              num_root
              num_file_creations
              num_shells
              num_access_files
              is_guest_login
              count
              srv_count
              serror_rate
              srv_serror_rate
              rerror_rate
              srv_rerror_rate
              same_srv_rate
              diff_srv_rate
              srv_diff_host_rate
              dst_host_count
              dst_host_srv_count
              dst_host_same_srv_rate
              dst_host_diff_srv_rate
              dst_host_same_src_port_rate
              dst_host_srv_diff_host_rate
              dst_host_serror_rate
              dst_host_srv_serror_rate
              dst_host_rerror_rate
              dst_host_srv_rerror_rate
              label
Test mode:    user supplied test set:  size unknown (reading incrementally)

=== Classifier model (full training set) ===

InputMappedClassifier:

AttributeSelectedClassifier:



=== Attribute Selection on all input data ===

Search Method:
	Best first.
	Start set: no attributes
	Search direction: forward
	Stale search after 5 node expansions
	Total number of subsets evaluated: 408
	Merit of best subset found:    0.663

Attribute Subset Evaluator (supervised, Class (nominal): 40 label):
	CFS Subset Evaluator
	Including locally predictive attributes

Selected attributes: 3,6,12,14,21,23,28,35 : 8
                     service
                     dst_bytes
                     logged_in
                     root_shell
                     count
                     serror_rate
                     diff_srv_rate
                     dst_host_srv_diff_host_rate


Header of reduced data:
@relation 'TrainingKDD99-weka.filters.unsupervised.attribute.Remove-V-R3,6,12,14,21,23,28,35,40'

@attribute service numeric
@attribute dst_bytes numeric
@attribute logged_in numeric
@attribute root_shell numeric
@attribute count numeric
@attribute serror_rate numeric
@attribute diff_srv_rate numeric
@attribute dst_host_srv_diff_host_rate numeric
@attribute label {probe,dos,normal,r2l,u2r}

@data


Classifier Model
Sigmoid Node 0
    Inputs    Weights
    Threshold    -0.5095030073818713
    Node 5    -17.555431768152104
    Node 6    -7.5063962736004255
    Node 7    -2.6602769037375293
    Node 8    -18.526358476218057
    Node 9    20.643838667499956
    Node 10    -3.265519525159634
Sigmoid Node 1
    Inputs    Weights
    Threshold    -21.248672489822965
    Node 5    10.949082418943457
    Node 6    8.282609277715464
    Node 7    -2.1246563653391446
    Node 8    8.58929573996804
    Node 9    8.277436119286163
    Node 10    2.7053299820676617
Sigmoid Node 2
    Inputs    Weights
    Threshold    -4.230832204135475
    Node 5    9.622299706872218
    Node 6    -3.100389257255815
    Node 7    10.292007519017211
    Node 8    -8.907229849827532
    Node 9    -14.08038469215622
    Node 10    -6.3339823088729
Sigmoid Node 3
    Inputs    Weights
    Threshold    -10.925613423265908
    Node 5    -36.19434784977397
    Node 6    -8.325448974082859
    Node 7    3.763163560203533
    Node 8    9.803782794538648
    Node 9    -37.41318338135004
    Node 10    32.79742689082953
Sigmoid Node 4
    Inputs    Weights
    Threshold    -4.771354502363446
    Node 5    -0.5054927600154574
    Node 6    -0.6556069073938904
    Node 7    -0.38544639167769557
    Node 8    -5.210862265521712
    Node 9    -5.0898629492920815
    Node 10    6.984681494909223
Sigmoid Node 5
    Inputs    Weights
    Threshold    -25.029833994252428
    Attrib service    -38.92804858373318
    Attrib dst_bytes    25.343552410195574
    Attrib logged_in    -3.280724321033606
    Attrib root_shell    19.836857049651872
    Attrib count    -10.85194872423634
    Attrib serror_rate    22.488581277453946
    Attrib diff_srv_rate    -11.6998548206331
    Attrib dst_host_srv_diff_host_rate    -61.330185137716775
Sigmoid Node 6
    Inputs    Weights
    Threshold    -3.7600496447291096
    Attrib service    -21.053269178256794
    Attrib dst_bytes    -2.584878332421592
    Attrib logged_in    -16.277272119343223
    Attrib root_shell    8.323761959337324
    Attrib count    84.34013420221451
    Attrib serror_rate    -11.147725047391573
    Attrib diff_srv_rate    -69.8247270698041
    Attrib dst_host_srv_diff_host_rate    20.85968436752777
Sigmoid Node 7
    Inputs    Weights
    Threshold    -16.920764767382686
    Attrib service    -6.809752225539445
    Attrib dst_bytes    16.761235210337304
    Attrib logged_in    7.23289756161984
    Attrib root_shell    16.864459829029833
    Attrib count    -49.4734935011645
    Attrib serror_rate    -2.8746051741518435
    Attrib diff_srv_rate    -1.6499937151011779
    Attrib dst_host_srv_diff_host_rate    -2.9023838732349687
Sigmoid Node 8
    Inputs    Weights
    Threshold    5.415309986728535
    Attrib service    18.63958809972841
    Attrib dst_bytes    -15.661961580513521
    Attrib logged_in    14.389488352643816
    Attrib root_shell    -4.38326306960995
    Attrib count    5.705714075761202
    Attrib serror_rate    12.519892086317578
    Attrib diff_srv_rate    -8.462911591245339
    Attrib dst_host_srv_diff_host_rate    -3.3562522603916767
Sigmoid Node 9
    Inputs    Weights
    Threshold    19.764560496512814
    Attrib service    62.6083340390215
    Attrib dst_bytes    -4.719789629270689
    Attrib logged_in    -19.988876459234945
    Attrib root_shell    -19.704565950802255
    Attrib count    5.001581261252672
    Attrib serror_rate    11.397566544732149
    Attrib diff_srv_rate    -3.6129237751001737
    Attrib dst_host_srv_diff_host_rate    3.077194057361035
Sigmoid Node 10
    Inputs    Weights
    Threshold    -21.219699564265838
    Attrib service    27.092492760014228
    Attrib dst_bytes    57.3766412937851
    Attrib logged_in    8.877162452801022
    Attrib root_shell    20.423872115704764
    Attrib count    -40.199372555768
    Attrib serror_rate    3.483934144181918
    Attrib diff_srv_rate    -16.65396503939453
    Attrib dst_host_srv_diff_host_rate    -66.35025157216765
Class probe
    Input
    Node 0
Class dos
    Input
    Node 1
Class normal
    Input
    Node 2
Class r2l
    Input
    Node 3
Class u2r
    Input
    Node 4

Attribute mappings:

Model attributes                       	    Incoming attributes
---------------------------------------	    ----------------
(numeric) duration                     	--> 1 (numeric) duration
(numeric) protocol_type                	--> 2 (numeric) protocol_type
(numeric) service                      	--> 3 (numeric) service
(numeric) flag                         	--> 4 (numeric) flag
(numeric) src_bytes                    	--> 5 (numeric) src_bytes
(numeric) dst_bytes                    	--> 6 (numeric) dst_bytes
(numeric) land                         	--> 7 (numeric) land
(numeric) wrong_fragment               	--> 8 (numeric) wrong_fragment
(numeric) urgent                       	--> 9 (numeric) urgent
(numeric) hot                          	--> 10 (numeric) hot
(numeric) num_failed_logins            	--> 11 (numeric) num_failed_logins
(numeric) logged_in                    	--> 12 (numeric) logged_in
(numeric) num_compromised              	--> 13 (numeric) num_compromised
(numeric) root_shell                   	--> 14 (numeric) root_shell
(numeric) su_attempted                 	--> 15 (numeric) su_attempted
(numeric) num_root                     	--> 16 (numeric) num_root
(numeric) num_file_creations           	--> 17 (numeric) num_file_creations
(numeric) num_shells                   	--> 18 (numeric) num_shells
(numeric) num_access_files             	--> 19 (numeric) num_access_files
(numeric) is_guest_login               	--> 20 (numeric) is_guest_login
(numeric) count                        	--> 21 (numeric) count
(numeric) srv_count                    	--> 22 (numeric) srv_count
(numeric) serror_rate                  	--> 23 (numeric) serror_rate
(numeric) srv_serror_rate              	--> 24 (numeric) srv_serror_rate
(numeric) rerror_rate                  	--> 25 (numeric) rerror_rate
(numeric) srv_rerror_rate              	--> 26 (numeric) srv_rerror_rate
(numeric) same_srv_rate                	--> 27 (numeric) same_srv_rate
(numeric) diff_srv_rate                	--> 28 (numeric) diff_srv_rate
(numeric) srv_diff_host_rate           	--> 29 (numeric) srv_diff_host_rate
(numeric) dst_host_count               	--> 30 (numeric) dst_host_count
(numeric) dst_host_srv_count           	--> 31 (numeric) dst_host_srv_count
(numeric) dst_host_same_srv_rate       	--> 32 (numeric) dst_host_same_srv_rate
(numeric) dst_host_diff_srv_rate       	--> 33 (numeric) dst_host_diff_srv_rate
(numeric) dst_host_same_src_port_rate  	--> 34 (numeric) dst_host_same_src_port_rate
(numeric) dst_host_srv_diff_host_rate  	--> 35 (numeric) dst_host_srv_diff_host_rate
(numeric) dst_host_serror_rate         	--> 36 (numeric) dst_host_serror_rate
(numeric) dst_host_srv_serror_rate     	--> 37 (numeric) dst_host_srv_serror_rate
(numeric) dst_host_rerror_rate         	--> 38 (numeric) dst_host_rerror_rate
(numeric) dst_host_srv_rerror_rate     	--> 39 (numeric) dst_host_srv_rerror_rate
(nominal) label                        	--> 40 (nominal) label


Time taken to build model: 61.55 seconds

=== Evaluation on test set ===

Time taken to test model on supplied test set: 3.6 seconds

=== Summary ===

Correctly Classified Instances      284672               91.5259 %
Incorrectly Classified Instances     26357                8.4741 %
Kappa statistic                          0.7963
Mean absolute error                      0.0424
Root mean squared error                  0.1627
Relative absolute error                 22.0437 %
Root relative squared error             54.8213 %
Coverage of cases (0.95 level)          95.014  %
Mean rel. region size (0.95 level)      24.3665 %
Total Number of Instances           311029     

=== Detailed Accuracy By Class ===

                 TP Rate  FP Rate  Precision  Recall   F-Measure  MCC      ROC Area  PRC Area  Class
                 0,765    0,003    0,768      0,765    0,767      0,763    0,876     0,645     probe
                 0,967    0,018    0,993      0,967    0,980      0,928    0,990     0,996     dos
                 0,974    0,095    0,713      0,974    0,824      0,788    0,965     0,828     normal
                 0,005    0,001    0,290      0,005    0,009      0,030    0,567     0,277     r2l
                 0,000    0,000    0,000      0,000    0,000      -0,000   0,849     0,033     u2r
Weighted Avg.    0,915    0,032    0,898      0,915    0,896      0,851    0,961     0,921     

=== Confusion Matrix ===

      a      b      c      d      e   <-- classified as
   3189    281    567    128      1 |      a = probe
    103 222364   7386      0      0 |      b = dos
    410   1088  59046     49      0 |      c = normal
    447     92  15577     73      0 |      d = r2l
      5      0    221      2      0 |      e = u2r

