## 3 Background
### CSE-CIC-IDS2018 Dataset  
The CSE-CIC-IDS2018 dataset is a collaboration project proposed in 2018 by CSE [38] and CIC [39]. The dataset is available to download on Amazon Web Services (AWS) [40; 41]. The dataset contains ten CSV files representing ten days from the captured network flow, with more than 16.2 million samples. Furthermore, more than 80 features were extracted by the CICFlowMeter tool. This dataset includes six primary intrusion attack types: distributed DoS (DDoS), DoS, brute force, bot, infiltration, and web attacks, as shown in Tables 5 and 6 and Figure 6. \begin{table}
\begin{tabular}{c c} \hline \hline
**Parameter** & **Description** \\ \hline \(p_{k}\) & the position of a particle \\ \(v_{k}\) & the velocity of a particle \\ \(pbest_{k}\) & the best solution for the particle \\ \(gbest_{k}\) & the best solution for the swarm \\ \(c_{1}\) & cognitive factor \\ \(c_{2}\) & social factor \\ \(r_{1}\), \(r_{2}\) & random numbers between 0 and 1 \\ \(t\) & the iteration number \\ \hline \hline \end{tabular}
\end{table} 
Table 4: Parameters of PSO. Figure 4: Moving particle in PSO. Figure 5: Steps of the PSO algorithm. \begin{table}
\begin{tabular}{c c c c c c c c} \hline
**Class** & **Benign** & **DDoS** & **DoS** & **Brute Force** & **Bot** & **Infiltration** & **Web** \\ \hline \multirow{3}{*}{Type} & \multirow{3}{*}{Benign} & HOIC & Hulk & \multirow{3}{*}{FTP} & \multirow{3}{*}{Botnet} & Web \\  & & LOIC-UDP & GoldenEye & & & & \
\begin{tabular}{c} Web \\ XSS \\ \end{tabular} \\  & & LOIC-HTTP & SlowHTTPTest & SSH & & &
\begin{tabular}{c} SQL Injection \\ \end{tabular} \\ \hline Count & 13,484,708 & 1,263,933 & 654,300 & 380,949 & 286,191 & 161,934 & 928 \\ \hline \end{tabular}
\end{table} 
Table 6: Primary attack classes of CSE-CIC-IDS2018. \begin{table}
\begin{tabular}{c c c c c} \hline
**Day** & **File Name** & **Features** & **Type of Attack** & **Count** & **Total** \\ \hline \multirow{2}{*}{1} & \multirow{2}{*}{Wednesday-14-02-2018} & \multirow{2}{*}{80} & Benign & 667,626 & \multirow{2}{*}{1,048,575} \\  & & & FTP-BruteForce & 193,360 & & \\  & & SSH-Bruteforce & 187,589 & & \\ \hline \multirow{2}{*}{2} & \multirow{2}{*}{Thursday-15-02-2018} & \multirow{2}{*}{80} & Benign & 996,077 & \multirow{2}{*}{1,048,575} \\  & & & DoS attacks-GoldenEye & 41,508 & & \\  & & & DoS attacks-Slowloris & 10,990 & & \\ \hline \multirow{2}{*}{3} & \multirow{2}{*}{Friday-16-02-2018} & \multirow{2}{*}{80} & Benign & 446,772 & \multirow{2}{*}{1,048,574} \\  & & & DoS attacks-Hulk & 461,912 & & \\  & & & DoS attacks-SlowHTTPTest & 139,890 & & \\ \hline \multirow{2}{*}{4} & \multirow{2}{*}{Thursday-20-02-2018} & \multirow{2}{*}{84} & Benign & 7,372,557 & \multirow{2}{*}{7,948,748} \\  & & & DDoS attacks-LOIC-HTTP & 576,191 & & \\ \hline \multirow{2}{*}{5} & \multirow{2}{*}{Wednesday-21-02-2018} & \multirow{2}{*}{80} & Benign & 360,833 & \multirow{2}{*}{1,048,575} \\  & & & DDoS attack-HOIC & 686,012 & & \\  & & & DDoS attack-LOIC-UDP & 1730 & & \\ \hline \multirow{2}{*}{6} & \multirow{2}{*}{Thursday-22-02-2018} & \multirow{2}{*}{80} & Benign & 1,048,213 & \multirow{2}{*}{1,048,575} \\  & & & Brute Force -Web & 249 & & \\  & & & Brute Force -XSS & 79 & \\  & & & SQL Injection & 34 & \\ \hline \multirow{2}{*}{7} & \multirow{2}{*}{Friday-23-02-2018} & \multirow{2}{*}{80} & Benign & 1,048,009 & \multirow{2}{*}{1,048,575} \\  & & & Brute Force -Web & 362 & & \\  & & & Brute Force -XSS & 151 & & \\  & & & SQL Injection & 53 & \\ \hline \multirow{2}{*}{8} & \multirow{2}{*}{Wednesday-28-02-2018} & \multirow{2}{*}{80} & Benign & 544,200 & \multirow{2}{*}{613,071} \\  & & & Infiltration & 68,871 & & \\ \hline \multirow{2}{*}{9} & \multirow{2}{*}{Thursday-01-03-2018} & \multirow{2}{*}{80} & Benign & 238,037 & \multirow{2}{*}{331,100} \\  & & & Infiltration & 93,063 & & \\ \hline \multirow{2}{*}{10} & \multirow{2}{*}{Friday-02-03-2018} & \multirow{2}{*}{80} & Benign & 762,384 & \multirow{2}{*}{1,048,575} \\  & & & Botnet & 286,191 & & \\ \hline \end{tabular}
\end{table} 
Table 5: The network traffic of CSE-CIC-IDS2018.