\documentclass[Print]{../Style/isecure-v24}

\pdfminorversion=4
%\usepackage{amsmath,amssymb}
%\usepackage{array}
\usepackage{lipsum}
\usepackage{algpseudocode,algorithm}
\usepackage[colorlinks, bookmarksnumbered, linkcolor=darkblue, citecolor=darkred, urlcolor=darkgreen]{hyperref}
\usepackage[numbers,sort&compress]{natbib}
\usepackage[all]{hypcap}
\usepackage{../Style/picins}
\usepackage{lettrine}
\usepackage{wrapfig}
\usepackage{graphicx}
\usepackage{rotating}
\usepackage{adjustbox}
 \usepackage{tikz}
%\usepackage{subcaption}
\usepackage{diagbox}
\usepackage{caption}
\usepackage{nicematrix}
\usepackage{pifont}
\usepackage{subfig}
\usepackage{slashbox,multirow}
\usepackage{xcolor,colortbl}
\usepackage{array}
\usepackage{multirow}
\usepackage{xltabular}
\usepackage[table]{xcolor}
\newcommand{\myrotate}[1]{\scriptsize\rotatebox[origin=c]{90}{#1}}
\newcolumntype{C}[1]{>{\centering\arraybackslash}m{\dimexpr#1-2\tabcolsep\relax}}
\newcommand{\thickhline}{%
    \noalign {\ifnum 0=`}\fi \hrule height 1pt
    \futurelet \reserved@a \@xhline}
%\usepackage{multicol}

%\hypersetup{colorlinks=true}
\usepackage{amsthm}
\usepackage{amssymb,amsmath,amsfonts,eqnarray,breqn}
\usepackage{fancyhdr}
%\usepackage{cite}
\usepackage{ragged2e}
\usepackage{enumitem}   
\usepackage{refcount}
\usepackage[protrusion=true,expansion=true]{microtype}
\usepackage{float}
\usepackage[greek,english]{babel}
\usepackage[LGR,T1]{fontenc}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%\theoremstyle{plain}

\DisableLigatures[f]{encoding=*,family=*}
\graphicspath{{Images/},{../Style/}}
\DeclareGraphicsExtensions{.jpg,.pdf,.png}
\input{../Style/Theorem-Styles.tex}
\articletype{Short Paper}
\def\sectionautorefname{Section} % localizing \autoref{}
\def\subsectionautorefname{Section} % localizing \autoref{}
\def\subsubsectionautorefname{Section} % localizing \autoref{}
\providecommand*{\lemmaautorefname}{Lemma}
%\newcommand{\subsubsectionautorefname}{Section}
\usepackage{titlesec}
\setcounter{secnumdepth}{4}
\titleformat{\paragraph}
{\normalfont\normalsize\bfseries}{\theparagraph}{1em}{}
\titlespacing*{\paragraph}
{0pt}{3.25ex plus 1ex minus .2ex}{1.5ex plus .2ex}

\journal{ISeCure}
\company{ISC}
\copyrightyear{2018}
\journalsite{http://www.isecure-journal.org}
\firstpage{1} % TODO



\makeatletter
\begingroup \lccode`+=32 \lowercase
 {\endgroup \def\Url@ObeySp{\Url@Edit\Url@String{ }{+}}}
 \def\Url@space{\penalty\Url@sppen\ }
\makeatother


%%%%% Use the following commands for putting a watermark
%\usepackage{type1cm}
%\usepackage{eso-pic}
%\makeatletter
%\AddToShipoutPicture{
%            \setlength{\@tempdimb}{.5\paperwidth}
%            \setlength{\@tempdimc}{.5\paperheight}
%            \setlength{\unitlength}{1pt}
%            \put(\strip@pt\@tempdimb,\strip@pt\@tempdimc){
%        \makebox(600,-900){\rotatebox{45}{\textcolor[gray]{0.90}
%        {\fontsize{2cm}{2cm}\selectfont{\bfseries{Uncorrected~~~~Proof}}}}}
%            }
%}
%\makeatother

%Use the following command for putting line numbers
\usepackage[displaymath]{lineno}  %DON'T COMMENT EVEN IF YOU DONT WANT LINE NOS
\newcommand*\patchAmsMathEnvironmentForLineno[1]{
  \expandafter\let\csname old#1\expandafter\endcsname\csname #1\endcsname
  \expandafter\let\csname oldend#1\expandafter\endcsname\csname end#1\endcsname
   \renewenvironment{#1}
     {\linenomath\csname old#1\endcsname}
     {\csname oldend#1\endcsname\endlinenomath}}
\newcommand*\patchBothAmsMathEnvironmentsForLineno[1]{
  \patchAmsMathEnvironmentForLineno{#1}
  \patchAmsMathEnvironmentForLineno{#1*}}
\AtBeginDocument{
\patchBothAmsMathEnvironmentsForLineno{equation}
\patchBothAmsMathEnvironmentsForLineno{align}
\patchBothAmsMathEnvironmentsForLineno{flalign}
\patchBothAmsMathEnvironmentsForLineno{alignat}
\patchBothAmsMathEnvironmentsForLineno{gather}
\patchBothAmsMathEnvironmentsForLineno{multline}
}

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\newtheorem{cor}{Corollary}[section]
\newtheorem{exmp}{Example}[section]
\newtheorem{construction}{Construction}[section]
\newtheorem{defn}{Definition}[section]
\newcommand*\concat{\mathbin{\|}}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\begin{document}
	\begin{table*}
		\tiny
		\centering
		\caption{A sample table}\label{tab6}		
		\footnotesize
		\setlength{\tabcolsep}{1.5pt}
		\renewcommand{\arraystretch}{1.6}	
		\scalebox{0.65}{           
			\begin{tabular}{|C{0.8cm}|C{5.5cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|	C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|C{0.8cm}|}
				\hline
				\cellcolor{gray!40}&\cellcolor{gray!40}	&\multicolumn{7}{C{5cm}|}{\textbf{Network}} &\multicolumn{7}{C{5cm}|}{\textbf{Host}}&	\multicolumn{6}{C{5cm}|}{\textbf{Application}}\\ \cline{3-22}	
				\cellcolor{gray!40}&\cellcolor{gray!40} &	\multicolumn{20}{C{15cm}|}{\textbf{Sensor-ID (SID)}} \\\cline{3-22}
				\cellcolor{gray!40}& \cellcolor{gray!40}&1& 2& 3& 4& 5& 6& 7& 8& 9& 10& 11& 12& 13& 14& 15& 16& 17& 18& 19& 20\\  \cline{3-22}
				\cellcolor{gray!40}\multirow{-2}{*}{\textbf{No.}}&\cellcolor{gray!40} {\multirow{-4}{*}{{\diagbox[dir=SE,height=10em,width=4.5cm,trim=r]{{\textbf{Feature}}}
				        {{{\textbf{Tool}}}}}}}
						& \rotatebox{90}{\textbf{Network-based IDS (NIDS)*} }& \rotatebox{90}{\textbf{Firewall*}}& \rotatebox{90}{\textbf{Router**}}& \rotatebox{90}{\textbf{Honeypot*}}& \rotatebox{90}{\textbf{NetFlow**}}& \rotatebox{90}{\textbf{Network Behavior Analysis (NBA)*}}& \rotatebox{90}{\textbf{Deep Packet Inspection (DPI)**}}& \rotatebox{90}{\textbf{Host-based IDS (HIDS)*}}& \rotatebox{90}{\textbf{Antivirus*}}& \rotatebox{90}{\textbf{Anti-malware*}}& \rotatebox{90}{\textbf{Host OS Log**}}& \rotatebox{90}{\textbf{Audit Log*}}& \rotatebox{90}{\textbf{Domain Controller**}}& \rotatebox{90}{\textbf{Vulnerability Scanner*}}& \rotatebox{90}{\textbf{DNS Server**}}& \rotatebox{90}{\textbf{Mail Server**}}& \rotatebox{90}{\textbf{Web Server**}}& \rotatebox{90}{\textbf{Data Loss Prevention (DLP)*}}& \rotatebox{90}{\textbf{FTP Server**}}& \rotatebox{90}{\textbf{Proxy Server**}}\\ \hline
			\cellcolor{gray!40}	1 &\cellcolor{gray!40} Timestamp& $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ & $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}2 &\cellcolor{gray!40} Source IP Address&$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- & $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}3&\cellcolor{gray!40} Source MAC Address& --&-- &-- &--&$\checkmark$ &-- &-- &-- &-- &-- &-- &-- &-- &-- & $\checkmark$&-- & --&$\checkmark$ &-- &$\checkmark$ \\ \hline
\cellcolor{gray!40}4&\cellcolor{gray!40} Source Port&$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- & $\checkmark$&-- & --&-- &-- &$\checkmark$ \\ \hline
\cellcolor{gray!40}5&\cellcolor{gray!40} Destination IP Address &$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- & $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}6&\cellcolor{gray!40} Destination MAC Address &--&-- &-- &-- &$\checkmark$ &-- &-- &-- &-- &-- &-- &-- &--&-- & $\checkmark$&-- & --&-- &-- &$\checkmark$ \\ \hline
\cellcolor{gray!40}7 &\cellcolor{gray!40} Destination Port &$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- & $\checkmark$&$\checkmark$ & --&-- &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}8&\cellcolor{gray!40} Event/Attack Type/Class/Name &$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ & $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}9&\cellcolor{gray!40} Event/Attack/Signature ID &$\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$ & $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$ \\ \hline
\cellcolor{gray!40}10&\cellcolor{gray!40} CVE ID &$\checkmark$&-- &-- &$\checkmark$ &-- &-- &$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &--&$\checkmark$ & --&-- & --&-- &-- &-- \\ \hline
\cellcolor{gray!40}11&\cellcolor{gray!40} Priority/Severity Level &$\checkmark$&$\checkmark$ &-- &$\checkmark$ &-- &-- &$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &--&$\checkmark$ & --&-- & --&$\checkmark$ &-- &-- \\ \hline
\cellcolor{gray!40}12&\cellcolor{gray!40} Process Name & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ & --&-- & --&-- &--&$\checkmark$&$\checkmark$&--\\ \hline
\cellcolor{gray!40}13&\cellcolor{gray!40} Process ID & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ & --&-- & --&-- &--&$\checkmark$&$\checkmark$&--\\ \hline
\cellcolor{gray!40}14&\cellcolor{gray!40} Parent Process ID & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$ & --&-- & --&-- &--&--&--&--\\ \hline
\cellcolor{gray!40}15&\cellcolor{gray!40} File Name & -- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$&-- &-- & --&-- & --&-- &$\checkmark$&$\checkmark$&--\\ \hline
\cellcolor{gray!40}16&\cellcolor{gray!40} File Path & -- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$&-- &-- & --&-- & --&-- &$\checkmark$&$\checkmark$&--\\ \hline
\cellcolor{gray!40}17&\cellcolor{gray!40} File Hash & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&-- &$\checkmark$&--&--\\ \hline
\cellcolor{gray!40}18&\cellcolor{gray!40} Folder Name & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$&-- &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}19&\cellcolor{gray!40} Folder Path & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$&-- &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}20&\cellcolor{gray!40} Registry Key & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$&-- &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}21&\cellcolor{gray!40} Privilege Information & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$&-- &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}22&\cellcolor{gray!40} Payload & $\checkmark$ &-- &-- &$\checkmark$ &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &--&-- &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}23&\cellcolor{gray!40} Queried Name & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&$\checkmark$ & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}24&\cellcolor{gray!40} Queried Type & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&$\checkmark$ & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}25&\cellcolor{gray!40} Resolved IP Address & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&$\checkmark$ & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}26&\cellcolor{gray!40} Message Type (Request/Response) & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & $\checkmark$&$\checkmark$ &--&--&--\\ \hline
\cellcolor{gray!40}27&\cellcolor{gray!40} Message Length & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & $\checkmark$&$\checkmark$ &--&--&--\\ \hline
\cellcolor{gray!40}28&\cellcolor{gray!40} URL Path &$\checkmark$&-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & $\checkmark$&$\checkmark$ &$\checkmark$&--&$\checkmark$\\ \hline
\cellcolor{gray!40}29& \cellcolor{gray!40}Client Request Method (Get/Post) & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&$\checkmark$ &$\checkmark$&--&$\checkmark$\\ \hline
\cellcolor{gray!40}30&\cellcolor{gray!40} Response Code& -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&$\checkmark$ &--&--&$\checkmark$\\ \hline
\cellcolor{gray!40}31&\cellcolor{gray!40} Host/Computer Name & -- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$&-- &$\checkmark$ & --&-- & --&-- &$\checkmark$&$\checkmark$&--\\ \hline
\cellcolor{gray!40}32&\cellcolor{gray!40} User/Account Name & -- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$&-- &$\checkmark$ & --&-- & --&-- &$\checkmark$&$\checkmark$&$\checkmark$\\ \hline
\cellcolor{gray!40}33&\cellcolor{gray!40} User/Account Group Name& -- &-- &-- &-- &-- &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &$\checkmark$&-- &-- & --&-- & --&-- &--&--&$\checkmark$\\ \hline
\cellcolor{gray!40}34&\cellcolor{gray!40} Referrer of Requested URI& -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&$\checkmark$ &--&--&$\checkmark$\\ \hline
\cellcolor{gray!40}35&\cellcolor{gray!40} Resolved & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&$\checkmark$ &--&--&--\\ \hline
\cellcolor{gray!40}36&\cellcolor{gray!40} Object Name & -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &$\checkmark$&$\checkmark$ &-- & --&-- & --&-- &--&--&--\\ \hline
\cellcolor{gray!40}37&\cellcolor{gray!40} Time to Live (TTL)&$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&-- &-- &--&--\\ \hline
\cellcolor{gray!40}38&\cellcolor{gray!40} Domain Name& -- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- &--& $\checkmark$&$\checkmark$ & $\checkmark$&$\checkmark$ &$\checkmark$ &$\checkmark$\\ \hline
\cellcolor{gray!40}39&\cellcolor{gray!40} Email Address &-- &-- &-- &-- &-- &-- &-- &-- &-- &-- &--&-- &-- & --& --&$\checkmark$ & --&$\checkmark$ &-- &--\\ \hline
\cellcolor{gray!40}40&\cellcolor{gray!40} Session ID &--&$\checkmark$ &$\checkmark$ &-- &$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &-- &--&-- &-- & --&-- & --&-- &$\checkmark$ &--\\ \hline
\cellcolor{gray!40}41&\cellcolor{gray!40} Protocol Type &$\checkmark$&$\checkmark$ &-- &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &-- &-- &-- & --&-- & --&-- &-- &$\checkmark$ \\ \hline
\cellcolor{gray!40}42&\cellcolor{gray!40} Transmitted Bytes &	--&-- &$\checkmark$ &-- &$\checkmark$ &$\checkmark$ &$\checkmark$ &-- &-- &-- &-- &-- &-- &-- & --&$\checkmark$ & --&-- &-- &$\checkmark$ \\ \hline
\multicolumn{22}{p{6cm}}{*Security Sensor, **Non-security Sensor}\\			 
		\end{tabular}} 
	\end{table*}