Trace-Share Dataset for Evaluation of Statistical Characteristics Preservation

<p>The dataset contains all data used during the evaluation of statistical characteristics preservation. Archives are protected by password &quot;<strong>trace-share</strong>&quot; to avoid false detection by antivirus software.</p> <p>For more information, see the project repository at <strong><a href="https://github.com/Trace-Share">https://github.com/Trace-Share</a></strong>.</p> <p>&nbsp;</p> <p><strong>Selected Attack Traces</strong></p> <p>We selected 72 different traces of network attacks obtained from various internet databases. File names refer to common names of contained vulnerabilities, malware, or attack tools.</p> <p>&nbsp;</p> <p><strong>Background Traffic Data</strong></p> <p>Publicly available dataset <a href="https://www.unb.ca/cic/datasets/ids-2018.html">CSE-CIC-IDS-2018</a>&nbsp;was used as a background traffic data. The evaluation uses data from the day Thursday-01-03-2018 containing a sufficient proportion of regular traffic without any statistically significant attacks. Only traffic aimed at victim machines (range 172.31.69.0/24) is used to reduce less significant traffic.</p> <p>&nbsp;</p> <p><strong>Evaluation Results and Dataset&nbsp;Structure</strong></p> <ul> <li>Traces variants (<a href="https://zenodo.org/record/3553063/files/traces-normalized.zip">traces-normalized.zip</a>, <a href="https://zenodo.org/record/3553063/files/traces-adjusted.zip">traces-adjusted.zip</a>) <ul> <li>./traces-normalized/&nbsp;&mdash;&nbsp;normalized PCAP files and details in YAML format;</li> <li>./traces-adjusted/&nbsp;&mdash;&nbsp;configuration files for traces combination in YAML format.</li> </ul> </li> <li>Computed statistics (<a href="https://zenodo.org/record/3553063/files/statistics.zip">statistics.zip</a>) <ul> <li>./statistics-background/&nbsp;&mdash;&nbsp;background traffic statistics computed by ID2T;</li> <li>./statistics-combination/&nbsp;&mdash;&nbsp;combined traces statistics computed by ID2T for all adjust options (selected only combinations where ID2T provided all statistics files);</li> <li>./statistics-difference/&nbsp;&mdash;&nbsp;computed mean and median differences of background and combined traffic traces.</li> </ul> </li> <li>Evaluation results&nbsp; <ul> <li><a href="https://zenodo.org/record/3553063/files/statistics-difference.ipynb">statistics-difference.ipynb</a> &mdash; file containing visualization of statistics differences.</li> </ul> </li> </ul>