Datasets
Standard Dataset
MM-TBM evaluation datasets
- Citation Author(s):
-
GeorgiosIoannou
PanosLouvieris - Submitted by:
- Georgios Ioannou
- Last updated:
- Tue, 05/17/2022 - 22:17
- DOI:
- 10.21227/8dt8-gx46
- Data Format:
- Research Article Link:
- License:
355 Views- Categories:
- Keywords:
Abstract
These datasets were generated in a computer network environment where eXfiltration Advanced Persistent Threats were launched against a number of high-value targets.
It is the alert log of the Security Onion SIEM which aggregates alerts from network and host-based intrusion detection systems that are securing the network environment.
Background traffic and attack clutter (noise) are also injected in the network alongside the cyber attacks. In order to confuse the algorithm, clutter attacks generate similar evidence to that of the cyber attack that relatess to the ground truth.
To use the dataset, first convert the columns 4 and 5 from decimal to IP format.
The dataset is unlabelled. To test the dataset with MM-TBM you have to assign a set of belief assignments to each packet with relevance to a specific Alert frame of discernment.
Dataset Files
- datasets.zip (1.88 MB)
- A matlab script for converting decimal IP addresses to standard IPv4 addresses dec2IP.m (1.22 kB)
Documentation
| Attachment | Size |
|---|---|
 Readme file | 425 bytes |
