| 类别 | 攻击子类型 | KDDTrain+_20Percent | KDDTest+ |
| Normal | normal | 13,449 | 9711 |
| Probe | ipsweep | 710 | 141 |
| nmap | 301 | 73 | |
| portsweep | 587 | 157 | |
| saint | 0 | 319 | |
| satan | 691 | 735 | |
| Dos | apache2 | 0 | 737 |
| back | 196 | 359 | |
| land | 1 | 7 | |
| mailbomb | 0 | 293 | |
| neptune | 8282 | 4657 | |
| pod | 38 | 41 | |
| processtable | 0 | 685 | |
| smurf | 529 | 665 | |
| teardrop | 188 | 12 | |
| udpstorm | 0 | 2 | |
| U2R | buffer_overflow | 6 | 20 |
| httptunnel | 0 | 133 | |
| loadmodule | 1 | 2 | |
| perl | 0 | 2 | |
| ps | 0 | 15 | |
| rootkit | 4 | 13 | |
| sqlatack | 0 | 2 | |
| xterm | 0 | 13 |