Browse
Submit Data
Databases
API
Help

Dataset Information

25 Views

0 Connections

0 Citations

0 Reanalyses

0 Downloads

Omics score: 0

Dataset of intrusion detection alerts from a sharing platform.

ABSTRACT: The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including temporal and spatial correlations, reputation scoring, attack scenario reconstruction, and attack projection. The network identifiers (e.g., IP addresses, hostnames) are anonymized. However, the list of interesting features (e.g., presence on blacklists, geolocation) of such entities at the time of data collection is provided.

SUBMITTER: Husak M

PROVIDER: S-EPMC7701952 | biostudies-literature | 2020 Dec

REPOSITORIES: biostudies-literature

ACCESS DATA

Json Xml

Publications

Dataset of intrusion detection alerts from a sharing platform.

Husák Martin M Žádník Martin M Bartoš Václav V Sokol Pavol P

Data in brief 20201117

The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including tempo ...[more]

PMID: 33299907

Similar Datasets

ROSIDS23: Network intrusion detection dataset for robot operating system.

Project description:The data described herein pertains to the Robotic Systems Security domain. This data in brief presents the attributes of the ROSIDS23 dataset and its collection process in detail. This dataset comprises Robot Operating System (ROS)-based cyber-attacks to address the emerging need in high fidelity data for robotic system security research. The data was gathered from the IFARLab-DIH environment. IFARLab-DIH is a robotic and factory-level laboratory that includes a ROS-based network and is used to conduct studies up to TRL 5 on robotic systems. ROSIDS23 dataset contains benign and various attack traffic collected from the ROS middleware using the tcpdump network protocol analyser. Then the eighty-two traffic features were extracted from the captured pcap files and converted into CSV format using the CICFlowMeter tool. This dataset can serve as a valuable resource for developing and improving security countermeasures in robotic systems and can help the evolution of resilient robotics infrastructure.

| S-EPMC10654526 | biostudies-literature

Multi-platform optical remote sensing dataset for target detection.

Project description:Target detection in remote sensing has vital applications in mineral mapping, law enforcement, precision agriculture, strategic surveillance, etc. We present the acquisition of a first-of-its-kind high-resolution multi-platform (ground, airborne, and space-borne) remote sensing-based benchmark dataset for target detection studies. The dataset includes imagery acquired from terrestrial hyperspectral imager (THI), airborne hyperspectral sensor (AVIRIS-NG), and space-borne multi-spectral (Sentinel-2) sensor on 20th March 2018. Five engineered targets of different materials and colours were placed on different surface backgrounds. Besides, in-situ reflectance spectra of the targets were also acquired using a spectroradiometer for serving as a spectral reference source. The airborne and space-borne imagery were processed to remove un-calibrated/noisy bands and were atmospherically corrected using a radiative transfer method based Fast Line-of-sight Atmospheric Analysis of Spectral Hypercubes (FLAASH) model. The in-situ target reflectance spectra were resampled to spectrally match with airborne and space-borne imagery. Further, a target region of interest (ROI) was designated for each of the targets in both airborne and space-borne imagery using the known ground position of targets using a GPS device. This article provides a ground to space integrated target detection dataset, including ground positions ROI of the targets, point, and pixel-based in-situ target reference spectra, and the processed airborne and space-borne imagery to make the dataset ready for use. The data acquired in this experiment is an attempt to assess the potential of engineered material target detection in a multi-scale multi-platform view setup. The dataset is a valuable resource for testing and validation of target detection algorithms from various strategic and civilian application perspectives of remote sensing.

| S-EPMC7560709 | biostudies-literature

DReLAB - Deep REinforcement Learning Adversarial Botnet: A benchmark dataset for adversarial attacks against botnet Intrusion Detection Systems.

Project description:We present the first dataset that aims to serve as a benchmark to validate the resilience of botnet detectors against adversarial attacks. This dataset includes realistic adversarial samples that are generated by leveraging two widely used Deep Reinforcement Learning (DRL) techniques. These adversarial samples are proved to evade state of the art detectors based on Machine- and Deep-Learning algorithms. The initial corpus of malicious samples consists of network flows belonging to different botnet families presented in three public datasets containing real enterprise network traffic. We use these datasets to devise detectors capable of achieving state-of-the-art performance. We then train two DRL agents, based on Double Deep Q-Network and Deep Sarsa, to generate realistic adversarial samples: the goal is achieving misclassifications by performing small modifications to the initial malicious samples. These alterations involve the features that can be more realistically altered by an expert attacker, and do not compromise the underlying malicious logic of the original samples. Our dataset represents an important contribution to the cybersecurity research community as it is the first including thousands of automatically generated adversarial samples that are able to thwart state of the art classifiers with a high evasion rate. The adversarial samples are grouped by malware variant and provided in a CSV file format. Researchers can validate their defensive proposals by testing their detectors against the adversarial samples of the proposed dataset. Moreover, the analysis of these samples can pave the way to a deeper comprehension of adversarial attacks and to some sort of explainability of machine learning defensive algorithms. They can also support the definition of novel effective defensive techniques.

| S-EPMC7749366 | biostudies-literature

Fusion of Heterogeneous Intrusion Detection Systems for Network Attack Detection.

Project description:An intrusion detection system (IDS) helps to identify different types of attacks in general, and the detection rate will be higher for some specific category of attacks. This paper is designed on the idea that each IDS is efficient in detecting a specific type of attack. In proposed Multiple IDS Unit (MIU), there are five IDS units, and each IDS follows a unique algorithm to detect attacks. The feature selection is done with the help of genetic algorithm. The selected features of the input traffic are passed on to the MIU for processing. The decision from each IDS is termed as local decision. The fusion unit inside the MIU processes all the local decisions with the help of majority voting rule and makes the final decision. The proposed system shows a very good improvement in detection rate and reduces the false alarm rate.

| S-EPMC4532955 | biostudies-other

Introducing P2P service to a B2C sharing platform: A hybrid sharing mode.

Project description:With the rapid development of global technology, many firms have entered the product-sharing market, where business-to-consumer (B2C), peer-to-peer (P2P), and hybrid rental services are the three most common business models. The difference between these models lies in the product provider. The product provider in B2C mode is enterprises, while in P2P mode, individuals provide the products, and both enterprises and individuals provide the products in hybrid mode. We employ a game model to analyze the influence of a B2C platform introducing P2P sharing service by comparing the profit of the platform and the original equipment manufacturer (OEM) under each of the three models. Our findings indicate that introducing P2P service always benefits the B2C platform but sometimes harms the OEM. Our findings also indicate that as the quality of the platform's products improves, the profit improvement brought to the B2C platform by introducing P2P sharing decreases. We find that the impact of introducing P2P service also varies with consumer behaviors. For example, with increasing consumer usage level, the B2C platform's profit improvement brought by introducing P2P sharing increases. Furthermore, we determine the optimal pricing strategies of the OEM and sharing platform in B2C mode and in hybrid mode.

| S-EPMC9803320 | biostudies-literature

CytoML for cross-platform cytometry data sharing.

Project description:CytoML is an R/Bioconductor package that enables cross-platform import, export, and sharing of gated cytometry data. It currently supports Cytobank, FlowJo, Diva, and R, allowing users to import gated cytometry data from commercial platforms into R. Once data are available in R, the data can be further manipulated. For example it can be combined with other computational and analytic approaches, and the results can be exported to FlowJo or Cytobank to be explored by researchers using those platforms. We demonstrate how CytoML and related R packages can be used as a tool to import, modify and export several samples stained with the T cell panel from the FlowCAP IV Lyoplate data set. Once imported, the gating is modified using computational approaches, and exported for visualization in Cytobank and FlowJo. We further show how CytoML can be used to import gated data from a publicly accessible mass cytometry experiment from Cytobank. CytoML is the only tool that allows such sharing of gated cytometry data between researchers working across different platforms, and it will serve as a useful tool for validating and verifying the reproducibility of analyses. © 2018 The Authors. Cytometry Part A published by Wiley Periodicals, Inc. on behalf of International Society for Advancement of Cytometry.

| S-EPMC6443375 | biostudies-literature

IoT-based intrusion detection system using convolution neural networks

Project description:In the Information and Communication Technology age, connected objects generate massive amounts of data traffic, which enables data analysis to uncover previously hidden trends and detect unusual network-load. We identify five core design principles to consider when designing a deep learning-empowered intrusion detection system (IDS). We proposed the Temporal Convolution Neural Network (TCNN), an intelligent model for IoT-IDS that aggregates convolution neural network (CNN) and generic convolution, based on these concepts. To handle unbalanced datasets, TCNN is accumulated with synthetic minority oversampling technique with nominal continuity. It is also used in conjunction with effective feature engineering techniques like attribute transformation and reduction. The presented model is compared to two traditional machine learning algorithms, random forest (RF) and logistic regression (LR), as well as LSTM and CNN deep learning techniques, using the Bot-IoT data repository. The outcomes of the experiments depicts that TCNN maintains a strong balance of efficacy and performance. It is better as compared to other deep learning IDSs, with a multi-class traffic detection accuracy of 99.9986 percent and a training period that is very close to CNN.

| S-EPMC8507481 | biostudies-literature

An intrusion detection system based on convolution neural network.

Project description:With the rapid extensive development of the Internet, users not only enjoy great convenience but also face numerous serious security problems. The increasing frequency of data breaches has made it clear that the network security situation is becoming increasingly urgent. In the realm of cybersecurity, intrusion detection plays a pivotal role in monitoring network attacks. However, the efficacy of existing solutions in detecting such intrusions remains suboptimal, perpetuating the security crisis. To address this challenge, we propose a sparse autoencoder-Bayesian optimization-convolutional neural network (SA-BO-CNN) system based on convolutional neural network (CNN). Firstly, to tackle the issue of data imbalance, we employ the SMOTE resampling function during system construction. Secondly, we enhance the system's feature extraction capabilities by incorporating SA. Finally, we leverage BO in conjunction with CNN to enhance system accuracy. Additionally, a multi-round iteration approach is adopted to further refine detection accuracy. Experimental findings demonstrate an impressive system accuracy of 98.36%. Comparative analyses underscore the superior detection rate of the SA-BO-CNN system.

| S-EPMC11232621 | biostudies-literature

Research on data imbalance in intrusion detection using CGAN.

Project description:To address the problems of attack category omission and poor generalization ability of traditional Intrusion Detection System (IDS) when processing unbalanced input data, an intrusion detection strategy based on conditional Generative Adversarial Networks (cGAN) is proposed. The cGAN generates attack samples that approximately obey the distribution pattern of input data and are randomly distributed within a certain bounded interval, which can avoid the redundancy caused by mechanical data widening. The experimental results show that the strategy has better performance indexes and stronger generalization ability in overall performance, which can solve insufficient classification performance and detection omission caused by unbalanced distribution of data categories and quantities.

| S-EPMC10564237 | biostudies-literature

WebLab: a data-centric, knowledge-sharing bioinformatic platform.

Project description:With the rapid progress of biological research, great demands are proposed for integrative knowledge-sharing systems to efficiently support collaboration of biological researchers from various fields. To fulfill such requirements, we have developed a data-centric knowledge-sharing platform WebLab for biologists to fetch, analyze, manipulate and share data under an intuitive web interface. Dedicated space is provided for users to store their input data and analysis results. Users can upload local data or fetch public data from remote databases, and then perform analysis using more than 260 integrated bioinformatic tools. These tools can be further organized as customized analysis workflows to accomplish complex tasks automatically. In addition to conventional biological data, WebLab also provides rich supports for scientific literatures, such as searching against full text of uploaded literatures and exporting citations into various well-known citation managers such as EndNote and BibTex. To facilitate team work among colleagues, WebLab provides a powerful and flexible sharing mechanism, which allows users to share input data, analysis results, scientific literatures and customized workflows to specified users or groups with sophisticated privilege settings. WebLab is publicly available at http://weblab.cbi.pku.edu.cn, with all source code released as Free Software.

| S-EPMC2703900 | biostudies-literature

OmicsDI is part of the ELIXIR infrastructure

OmicsDI is an Elixir interoperability service. Learn more ›

Tweets

OmicsDI Databases

PRIDE
PeptideAtlas
MassIVE
JPOST Repository
Physiome Model Repository

EGA
EVA
ENA
LINCS
PAXDB
Cell Collective

MetaboLights
Metabolomics Workbench
MetabolomeExpress
GNPS
BioModels
FAIRDOMHub

ArrayExpress
dbGaP
ExpressionAtlas
GEO
NODE

Information

Databases
Help
API
Contact us
Code on GitHub
Terms of use
Submit Data