=== Run information ===

Scheme:       weka.classifiers.misc.InputMappedClassifier -I -trim -W weka.classifiers.meta.AttributeSelectedClassifier -- -E "weka.attributeSelection.CfsSubsetEval -P 1 -E 1" -S "weka.attributeSelection.BestFirst -D 1 -N 5" -W weka.classifiers.bayes.NaiveBayes
Relation:     TrainingKDD99
Instances:    40000
Attributes:   40
              duration
              protocol_type
              service
              flag
              src_bytes
              dst_bytes
              land
              wrong_fragment
              urgent
              hot
              num_failed_logins
              logged_in
              num_compromised
              root_shell
              su_attempted
              num_root
              num_file_creations
              num_shells
              num_access_files
              is_guest_login
              count
              srv_count
              serror_rate
              srv_serror_rate
              rerror_rate
              srv_rerror_rate
              same_srv_rate
              diff_srv_rate
              srv_diff_host_rate
              dst_host_count
              dst_host_srv_count
              dst_host_same_srv_rate
              dst_host_diff_srv_rate
              dst_host_same_src_port_rate
              dst_host_srv_diff_host_rate
              dst_host_serror_rate
              dst_host_srv_serror_rate
              dst_host_rerror_rate
              dst_host_srv_rerror_rate
              label
Test mode:    user supplied test set:  size unknown (reading incrementally)

=== Classifier model (full training set) ===

InputMappedClassifier:

AttributeSelectedClassifier:



=== Attribute Selection on all input data ===

Search Method:
	Best first.
	Start set: no attributes
	Search direction: forward
	Stale search after 5 node expansions
	Total number of subsets evaluated: 408
	Merit of best subset found:    0.663

Attribute Subset Evaluator (supervised, Class (nominal): 40 label):
	CFS Subset Evaluator
	Including locally predictive attributes

Selected attributes: 3,6,12,14,21,23,28,35 : 8
                     service
                     dst_bytes
                     logged_in
                     root_shell
                     count
                     serror_rate
                     diff_srv_rate
                     dst_host_srv_diff_host_rate


Header of reduced data:
@relation 'TrainingKDD99-weka.filters.unsupervised.attribute.Remove-V-R3,6,12,14,21,23,28,35,40'

@attribute service numeric
@attribute dst_bytes numeric
@attribute logged_in numeric
@attribute root_shell numeric
@attribute count numeric
@attribute serror_rate numeric
@attribute diff_srv_rate numeric
@attribute dst_host_srv_diff_host_rate numeric
@attribute label {probe,dos,normal,r2l,u2r}

@data


Classifier Model
Naive Bayes Classifier

                                Class
Attribute                       probe     dos  normal     r2l     u2r
                               (0.05)  (0.62)   (0.3)  (0.02)     (0)
======================================================================
service
  mean                          0.1632  0.1977  0.0314  0.1683   0.116
  std. dev.                     0.0896  0.1275  0.0915  0.0621  0.0546
  weight sum                      2130   24819   12000     999      52
  precision                     0.0161  0.0161  0.0161  0.0161  0.0161

dst_bytes
  mean                               0  0.0001  0.0008  0.0157   0.001
  std. dev.                     0.0001  0.0003  0.0088  0.1208  0.0019
  weight sum                      2130   24819   12000     999      52
  precision                     0.0005  0.0005  0.0005  0.0005  0.0005

logged_in
  mean                          0.0047   0.039  0.7976  0.9129  0.8846
  std. dev.                     0.1667  0.1936  0.4018   0.282  0.3195
  weight sum                      2130   24819   12000     999      52
  precision                          1       1       1       1       1

root_shell
  mean                               0       0  0.0002   0.006     0.5
  std. dev.                     0.1667  0.1667  0.1667  0.1667     0.5
  weight sum                      2130   24819   12000     999      52
  precision                          1       1       1       1       1

count
  mean                          0.3272  0.3392  0.0175  0.0027  0.0116
  std. dev.                     0.4401  0.1734  0.0359   0.001  0.0456
  weight sum                      2130   24819   12000     999      52
  precision                     0.0021  0.0021  0.0021  0.0021  0.0021

serror_rate
  mean                          0.0685  0.7216  0.0017  0.0129   0.038
  std. dev.                     0.1579  0.4469  0.0292   0.105  0.1902
  weight sum                      2130   24819   12000     999      52
  precision                      0.011   0.011   0.011   0.011   0.011

diff_srv_rate
  mean                          0.4018  0.0597  0.0179  0.0067  0.0637
  std. dev.                     0.4682   0.045  0.1159  0.0801  0.2196
  weight sum                      2130   24819   12000     999      52
  precision                     0.0149  0.0149  0.0149  0.0149  0.0149

dst_host_srv_diff_host_rate
  mean                          0.1842  0.0019  0.0262  0.0859  0.0806
  std. dev.                     0.2973  0.0327  0.0481  0.1068  0.2102
  weight sum                      2130   24819   12000     999      52
  precision                     0.0175  0.0175  0.0175  0.0175  0.0175


Attribute mappings:

Model attributes                       	    Incoming attributes
---------------------------------------	    ----------------
(numeric) duration                     	--> 1 (numeric) duration
(numeric) protocol_type                	--> 2 (numeric) protocol_type
(numeric) service                      	--> 3 (numeric) service
(numeric) flag                         	--> 4 (numeric) flag
(numeric) src_bytes                    	--> 5 (numeric) src_bytes
(numeric) dst_bytes                    	--> 6 (numeric) dst_bytes
(numeric) land                         	--> 7 (numeric) land
(numeric) wrong_fragment               	--> 8 (numeric) wrong_fragment
(numeric) urgent                       	--> 9 (numeric) urgent
(numeric) hot                          	--> 10 (numeric) hot
(numeric) num_failed_logins            	--> 11 (numeric) num_failed_logins
(numeric) logged_in                    	--> 12 (numeric) logged_in
(numeric) num_compromised              	--> 13 (numeric) num_compromised
(numeric) root_shell                   	--> 14 (numeric) root_shell
(numeric) su_attempted                 	--> 15 (numeric) su_attempted
(numeric) num_root                     	--> 16 (numeric) num_root
(numeric) num_file_creations           	--> 17 (numeric) num_file_creations
(numeric) num_shells                   	--> 18 (numeric) num_shells
(numeric) num_access_files             	--> 19 (numeric) num_access_files
(numeric) is_guest_login               	--> 20 (numeric) is_guest_login
(numeric) count                        	--> 21 (numeric) count
(numeric) srv_count                    	--> 22 (numeric) srv_count
(numeric) serror_rate                  	--> 23 (numeric) serror_rate
(numeric) srv_serror_rate              	--> 24 (numeric) srv_serror_rate
(numeric) rerror_rate                  	--> 25 (numeric) rerror_rate
(numeric) srv_rerror_rate              	--> 26 (numeric) srv_rerror_rate
(numeric) same_srv_rate                	--> 27 (numeric) same_srv_rate
(numeric) diff_srv_rate                	--> 28 (numeric) diff_srv_rate
(numeric) srv_diff_host_rate           	--> 29 (numeric) srv_diff_host_rate
(numeric) dst_host_count               	--> 30 (numeric) dst_host_count
(numeric) dst_host_srv_count           	--> 31 (numeric) dst_host_srv_count
(numeric) dst_host_same_srv_rate       	--> 32 (numeric) dst_host_same_srv_rate
(numeric) dst_host_diff_srv_rate       	--> 33 (numeric) dst_host_diff_srv_rate
(numeric) dst_host_same_src_port_rate  	--> 34 (numeric) dst_host_same_src_port_rate
(numeric) dst_host_srv_diff_host_rate  	--> 35 (numeric) dst_host_srv_diff_host_rate
(numeric) dst_host_serror_rate         	--> 36 (numeric) dst_host_serror_rate
(numeric) dst_host_srv_serror_rate     	--> 37 (numeric) dst_host_srv_serror_rate
(numeric) dst_host_rerror_rate         	--> 38 (numeric) dst_host_rerror_rate
(numeric) dst_host_srv_rerror_rate     	--> 39 (numeric) dst_host_srv_rerror_rate
(nominal) label                        	--> 40 (nominal) label


Time taken to build model: 2.74 seconds

=== Evaluation on test set ===

Time taken to test model on supplied test set: 6.93 seconds

=== Summary ===

Correctly Classified Instances      152477               49.0234 %
Incorrectly Classified Instances    158552               50.9766 %
Kappa statistic                          0.2924
Mean absolute error                      0.1834
Root mean squared error                  0.3869
Relative absolute error                 95.338  %
Root relative squared error            130.3476 %
Coverage of cases (0.95 level)          92.9354 %
Mean rel. region size (0.95 level)      30.7076 %
Total Number of Instances           311029     

=== Detailed Accuracy By Class ===

                 TP Rate  FP Rate  Precision  Recall   F-Measure  MCC      ROC Area  PRC Area  Class
                 0,817    0,434    0,025      0,817    0,048      0,089    0,864     0,775     probe
                 0,398    0,032    0,973      0,398    0,565      0,350    0,795     0,918     dos
                 0,949    0,090    0,718      0,949    0,818      0,778    0,959     0,861     normal
                 0,002    0,000    0,280      0,002    0,004      0,019    0,967     0,603     r2l
                 0,013    0,000    0,038      0,013    0,020      0,022    0,957     0,024     u2r
Weighted Avg.    0,490    0,047    0,874      0,490    0,578      0,413    0,837     0,888     

=== Confusion Matrix ===

      a      b      c      d      e   <-- classified as
   3405    344    417      0      0 |      a = probe
 131392  91507   6944      0     10 |      b = dos
   1302   1631  57532     72     56 |      c = normal
    502    580  15068     30      9 |      d = r2l
     21      9    190      5      3 |      e = u2r

