Dataset of intrusion detection alerts from a sharing platform

J 2020

Dataset of intrusion detection alerts from a sharing platform

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ a Pavol SOKOL

Základní údaje

Originální název

Dataset of intrusion detection alerts from a sharing platform

Autoři

HUSÁK, Martin (203 Česká republika, garant, domácí), Martin ŽÁDNÍK (203 Česká republika), Václav BARTOŠ (203 Česká republika) a Pavol SOKOL (703 Slovensko)

Vydání

Data in Brief, Elsevier, 2020, 2352-3409

Další údaje

Jazyk

angličtina

Typ výsledku

Článek v odborném periodiku

Obor

10200 1.2 Computer and information sciences

Stát vydavatele

Nizozemské království

Utajení

není předmětem státního či obchodního tajemství

Odkazy

URL URL

Kód RIV

RIV/00216224:14610/20:00116889

Organizační jednotka

Ústav výpočetní techniky

DOI

http://dx.doi.org/10.1016/j.dib.2020.106530

UT WoS

000600652300195

Klíčová slova anglicky

Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation

Štítky

rivok

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 27. 4. 2021 12:04, Mgr. Alena Mokrá

Anotace

V originále

The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including temporal and spatial correlations, reputation scoring, attack scenario reconstruction, and attack projection. The network identifiers (e.g., IP addresses, hostnames) are anonymized. However, the list of interesting features (e.g., presence on blacklists, geolocation) of such entities at the time of data collection is provided.

Návaznosti

EF16_019/0000822, projekt VaV

Název: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Citovat

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ a Pavol SOKOL. Dataset of intrusion detection alerts from a sharing platform. Data in Brief. Elsevier, 2020, roč. 33, December, s. 1-12. ISSN 2352-3409. Dostupné z: https://dx.doi.org/10.1016/j.dib.2020.106530.

@article{1691217,
   author = {Husák, Martin and Žádník, Martin and Bartoš, Václav and Sokol, Pavol},
   article_number = {December},
   doi = {http://dx.doi.org/10.1016/j.dib.2020.106530},
   keywords = {Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation},
   language = {eng},
   issn = {2352-3409},
   journal = {Data in Brief},
   title = {Dataset of intrusion detection alerts from a sharing platform},
   url = {https://doi.org/10.1016/j.dib.2020.106530},
   volume = {33},
   year = {2020}
}

TY  - JOUR
ID  - 1691217
AU  - Husák, Martin - Žádník, Martin - Bartoš, Václav - Sokol, Pavol
PY  - 2020
TI  - Dataset of intrusion detection alerts from a sharing platform
JF  - Data in Brief
VL  - 33
IS  - December
SP  - 1-12
EP  - 1-12
PB  - Elsevier
SN  - 23523409
KW  - Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation
UR  - https://doi.org/10.1016/j.dib.2020.106530
N2  - The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including temporal and spatial correlations, reputation scoring, attack scenario reconstruction, and attack projection. The network identifiers (e.g., IP addresses, hostnames) are anonymized. However, the list of interesting features (e.g., presence on blacklists, geolocation) of such entities at the time of data collection is provided.
ER  -

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ a Pavol SOKOL. Dataset of intrusion detection alerts from a sharing platform. \textit{Data in Brief}. Elsevier, 2020, roč.~33, December, s.~1-12. ISSN~2352-3409. Dostupné z: https://dx.doi.org/10.1016/j.dib.2020.106530.

Podrobný výpis o publikaci