Traffic and log data captured during a cyber defense exercise.
Ontology highlight
ABSTRACT:
SUBMITTER: Tovarnak D
PROVIDER: S-EPMC7300108 | biostudies-literature | 2020 Aug
REPOSITORIES: biostudies-literature
Publications
Traffic and log data captured during a cyber defense exercise.
Tovarňák Daniel D Špaček Stanislav S Vykopal Jan J
Data in brief 20200529
Cybersecurity research relies on relevant datasets providing researchers a snapshot of network traffic generated by current users and modern applications and services. The lack of datasets coming from a realistic network environment leads to inefficiency of newly designed methods that are not useful in practice. This data article provides network traffic flows and event logs (Linux and Windows) from a two-day cyber defense exercise involving attackers, defenders, and fictitious users operating i ...[more]
Similar Datasets
Project description:A critical requirement for developing a cyber capable workforce is to understand how to challenge, assess, and rapidly develop human cyber skill-sets in realistic cyber operational environments. Fortunately, cyber team competitions make use of simulated operational environments with scoring criteria of task performance that objectively define overall team effectiveness, thus providing the means and context for observation and analysis of cyber teaming. Such competitions allow researchers to address the key determinants that make a cyber defense team more or less effective in responding to and mitigating cyber attacks. For this purpose, we analyzed data collected at the 12th annual Mid-Atlantic Collegiate Cyber Defense Competition (MACCDC, http://www.maccdc.org), where eight teams were evaluated along four independent scoring dimensions: maintaining services, incident response, scenario injects, and thwarting adversarial activities. Data collected from the 13-point OAT (Observational Assessment of Teamwork) instrument by embedded observers and a cyber teamwork survey completed by all participants were used to assess teamwork and leadership behaviors and team composition and work processes, respectively. The scores from the competition were used as an outcome measure in our analysis to extract key features of team process, structure, leadership, and skill-sets in relation to effective cyber defense. We used Bayesian regression to relate scored performance during the competition to team skill composition, team experience level, and an observational construct of team collaboration. Our results indicate that effective collaboration, experience, and functional role-specialization within the teams are important factors that determine the success of these teams in the competition and are important observational predictors of the timely detection and effective mitigation of ongoing cyber attacks. These results support theories of team maturation and the development of functional team cognition applied to mastering cybersecurity.
| S-EPMC6252333 | biostudies-literature
Project description:Traffic-related air pollution (TRAP) is increasing worldwide. Habitual physical activity is known to prevent cardiorespiratory diseases and mortality, but whether exposure to TRAP during exercise affects respiratory health is still uncertain. Exercise causes inflammatory changes in the airways, and its interaction with the effects of TRAP or ozone might be detrimental, for both athletes exercising outdoor and urban active commuters. In this Mini-Review, we summarize the literature on the effects of exposure to TRAP and/or ozone during exercise on lung function, respiratory symptoms, performance, and biomarkers. Ozone negatively affected pulmonary function after exercise, especially after combined exposure to ozone and diesel exhaust (DE). Spirometric changes after exercise during exposure to particulate matter and ultrafine particles suggest a decrease in lung function, especially in patients with chronic obstructive pulmonary disease. Ozone frequently caused respiratory symptoms during exercise. Women showed decreased exercise performance and higher symptom prevalence than men during TRAP exposure. However, performance was analyzed in few studies. To date, research has not identified reliable biomarkers of TRAP-related lung damage useful for monitoring athletes' health, except in scarce studies on airway cells obtained by induced sputum or bronchoalveolar lavage. In conclusion, despite partly counteracted by the positive effects of habitual exercise, the negative effects of TRAP exposure to pollutants during exercise are hard to assess: outdoor exercise is a complex model, for multiple and variable exposures to air pollutants and pollutant concentrations. Further studies are needed to identify pollutant and/or time thresholds for performing safe outdoor exercise in cities.
| S-EPMC7793908 | biostudies-literature
Project description:Cyber-physical systems embed software into the physical world. They appear in a wide range of applications such as smart grids, robotics, and intelligent manufacturing. Cyber-physical systems have proved resistant to modeling due to their intrinsic complexity arising from the combination of physical and cyber components and the interaction between them. This study proposes a general framework for discovering cyber-physical systems directly from data. The framework involves the identification of physical systems as well as the inference of transition logics. It has been applied successfully to a number of real-world examples. The novel framework seeks to understand the underlying mechanism of cyber-physical systems as well as make predictions concerning their state trajectories based on the discovered models. Such information has been proven essential for the assessment of the performance of cyber-physical systems; it can potentially help debug in the implementation procedure and guide the redesign to achieve the required performance.
| S-EPMC6814766 | biostudies-literature
Project description:Cybercrime is estimated to have cost the global economy just under USD 1 trillion in 2020, indicating an increase of more than 50% since 2018. With the average cyber insurance claim rising from USD 145,000 in 2019 to USD 359,000 in 2020, there is a growing necessity for better cyber information sources, standardised databases, mandatory reporting and public awareness. This research analyses the extant academic and industry literature on cybersecurity and cyber risk management with a particular focus on data availability. From a preliminary search resulting in 5219 cyber peer-reviewed studies, the application of the systematic methodology resulted in 79 unique datasets. We posit that the lack of available data on cyber risk poses a serious problem for stakeholders seeking to tackle this issue. In particular, we identify a lacuna in open databases that undermine collective endeavours to better manage this set of risks. The resulting data evaluation and categorisation will support cybersecurity researchers and the insurance industry in their efforts to comprehend, metricise and manage cyber risks.Supplementary informationThe online version contains supplementary material available at 10.1057/s41288-022-00266-6.
| S-EPMC8853293 | biostudies-literature
Project description:MotivationThe automatic discovery of sparse biomarkers that are associated with an outcome of interest is a central goal of bioinformatics. In the context of high-throughput sequencing (HTS) data, and compositional data (CoDa) more generally, an important class of biomarkers are the log-ratios between the input variables. However, identifying predictive log-ratio biomarkers from HTS data is a combinatorial optimization problem, which is computationally challenging. Existing methods are slow to run and scale poorly with the dimension of the input, which has limited their application to low- and moderate-dimensional metagenomic datasets.ResultsBuilding on recent advances from the field of deep learning, we present CoDaCoRe, a novel learning algorithm that identifies sparse, interpretable and predictive log-ratio biomarkers. Our algorithm exploits a continuous relaxation to approximate the underlying combinatorial optimization problem. This relaxation can then be optimized efficiently using the modern ML toolbox, in particular, gradient descent. As a result, CoDaCoRe runs several orders of magnitude faster than competing methods, all while achieving state-of-the-art performance in terms of predictive accuracy and sparsity. We verify the outperformance of CoDaCoRe across a wide range of microbiome, metabolite and microRNA benchmark datasets, as well as a particularly high-dimensional dataset that is outright computationally intractable for existing sparse log-ratio selection methods.Availability and implementationThe CoDaCoRe package is available at https://github.com/egr95/R-codacore. Code and instructions for reproducing our results are available at https://github.com/cunningham-lab/codacore.Supplementary informationSupplementary data are available at Bioinformatics online.
| S-EPMC8696089 | biostudies-literature
Project description:The log-rank test statistic is very broadly used in biology. Unfortunately, P-values based on the popular chi-square approximation are often inaccurate and can be misleading.
| S-EPMC6690426 | biostudies-literature
Project description:The logistic regression model is the workhorse of epidemiological data analysis. The model helps to clarify the relationship between multiple exposures and a binary outcome. Logistic regression analysis is readily implemented using existing statistical software, and this has contributed to it becoming a routine procedure for epidemiologists. In this paper, the authors focus on a causal model which has recently received much attention from the epidemiologic community, namely, the sufficient-component cause model (causal-pie model). The authors show that the sufficient-component cause model is associated with a particular 'link' function: the complementary log link. In a complementary log regression, the exponentiated coefficient of a main-effect term corresponds to an adjusted 'peril ratio', and the coefficient of a cross-product term can be used directly to test for causal mechanistic interaction (sufficient-cause interaction). The authors provide detailed instructions on how to perform a complementary log regression using existing statistical software and use three datasets to illustrate the methodology. Complementary log regression is the model of choice for sufficient-cause analysis of binary outcomes. Its implementation is as easy as conventional logistic regression.
| S-EPMC5154187 | biostudies-literature
Project description:There is a growing body of knowledge on network intrusion detection, and several open data sets with network traffic and cyber-security threats have been released in the past decades. However, many data sets have aged, were not collected in a contemporary industrial communication system, or do not easily support research focusing on distributed anomaly detection. This paper presents the Westermo network traffic data set, 1.8 million network packets recorded in over 90 minutes in a network built up of twelve hardware devices. In addition to the raw data in PCAP format, the data set also contains pre-processed data in the form of network flows in CSV files. This data set can support the research community for topics such as intrusion detection, anomaly detection, misconfiguration detection, distributed or federated artificial intelligence, and attack classification. In particular, we aim to use the data set to continue work on resource-constrained distributed artificial intelligence in edge devices. The data set contains six types of events: harmless SSH, bad SSH, misconfigured IP address, duplicated IP address, port scan, and man in the middle attack.
| S-EPMC10482735 | biostudies-literature
Project description:Sensors in Cyber-Physical Systems (CPS) are typically used to collect various aspects of the region of interest and transmit the data towards upstream nodes for further processing. However, data collection in CPS is often unreliable due to severe resource constraints (e.g., bandwidth and energy), environmental impacts (e.g., equipment faults and noises), and security concerns. Besides, detecting an event through the aggregation in CPS can be intricate and untrustworthy if the sensor's data is not validated during data acquisition, before transmission, and before aggregation. This paper introduces In-network Generalized Trustworthy Data Collection (IGTDC) framework for event detection in CPS. This framework facilitates reliable data for aggregation at the edge of CPS. The main idea of IGTDC is to enable a sensor's module to examine locally whether the event's acquired data is trustworthy before transmitting towards the upstream nodes. It further validates whether the received data can be trusted or not before data aggregation at the sink node. Additionally, IGTDC helps to identify faulty sensors. For reliable event detection, we use collaborative IoT tactics, gate-level modeling with Verilog User Defined Primitive (UDP), and Programmable Logic Device (PLD) to ensure that the event's acquired data is reliable before transmitting towards the upstream nodes. We employ Gray code in gate-level modeling. It helps to ensure that the received data is reliable. Gray code also helps to distinguish a faulty sensor. Through simulation and extensive performance analysis, we demonstrate that the collected data in the IGTDC framework is reliable and can be used in the majority of CPS applications.
| S-EPMC8114821 | biostudies-literature
Project description:BACKGROUND:The potential mechanisms underlying cyber victimization and the resulting psychological and physical symptoms remain unclear. Thus, the present study investigated whether Internet addiction mediates the association between peer victimization (e.g., cyberbullying) and psychological and physical symptoms. Furthermore, it was assessed whether physical exercise moderates the hypothetical mediation. METHODS:1854 students from 11 middle and high schools in Shenzhen, Guangdong Province, China, were sampled for this study. Psychological and physical symptoms were assessed using the World Health Organization Quality of Life-BREF, while Internet addiction was evaluated using the Internet addiction test by Young. Cyber victimization was measured using a single question. In addition, this study examined whether Internet addiction mediated the association between cyber victimization and both psychological and physical symptoms. Additional work was conducted to test if physical exercise played a moderating role in the mediation hypothesized above. Mediation and moderation were analyzed using PROCESS macro for SPSS. RESULTS:Regression analysis showed that both cyber victimization (??=?-?0.102, p?< 0.05) and Internet addiction (??=?-?0.278, p?< 0.05) significantly predicted psychological and physical symptoms and demographic variables were controlled. Further mediation analysis suggested that Internet addiction mediated the relationship between cyber victimization and psychological and physical symptoms. The 95% CI (confidence interval) of the direct effect was (-?4.283, -?1.696) and the indirect effect (-?1.904, -?0.820), respectively, excluding zero. Finally, moderation analysis indicated that physical exercise moderated the relationship between Internet addiction and psychological and physical symptoms (p?=?0.047). CONCLUSIONS:Internet addiction plays a mediating role in the association between cyber victimization and both psychological and physical symptoms, Thus, addressing Internet addiction among cyberbullying victims is worthwhile. Furthermore, physical exercise alleviates negative impacts on health and should thus be promoted.
| S-EPMC7118978 | biostudies-literature