Dataset of intrusion detection alerts from a sharing platform

J 2020

Dataset of intrusion detection alerts from a sharing platform

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ and Pavol SOKOL

Basic information

Original name

Dataset of intrusion detection alerts from a sharing platform

Authors

HUSÁK, Martin (203 Czech Republic, guarantor, belonging to the institution), Martin ŽÁDNÍK (203 Czech Republic), Václav BARTOŠ (203 Czech Republic) and Pavol SOKOL (703 Slovakia)

Edition

Data in Brief, Elsevier, 2020, 2352-3409

Other information

Language

English

Type of outcome

Článek v odborném periodiku

Field of Study

10200 1.2 Computer and information sciences

Country of publisher

Netherlands

Confidentiality degree

není předmětem státního či obchodního tajemství

References:

URL URL

RIV identification code

RIV/00216224:14610/20:00116889

Organization unit

Institute of Computer Science

DOI

http://dx.doi.org/10.1016/j.dib.2020.106530

UT WoS

000600652300195

Keywords in English

Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation

Abstract

V originále

The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including temporal and spatial correlations, reputation scoring, attack scenario reconstruction, and attack projection. The network identifiers (e.g., IP addresses, hostnames) are anonymized. However, the list of interesting features (e.g., presence on blacklists, geolocation) of such entities at the time of data collection is provided.

Links

EF16_019/0000822, research and development project

Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Citovat

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ and Pavol SOKOL. Dataset of intrusion detection alerts from a sharing platform. Data in Brief. Elsevier, 2020, vol. 33, December, p. 1-12. ISSN 2352-3409. Available from: https://dx.doi.org/10.1016/j.dib.2020.106530.

@article{1691217,
   author = {Husák, Martin and Žádník, Martin and Bartoš, Václav and Sokol, Pavol},
   article_number = {December},
   doi = {http://dx.doi.org/10.1016/j.dib.2020.106530},
   keywords = {Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation},
   language = {eng},
   issn = {2352-3409},
   journal = {Data in Brief},
   title = {Dataset of intrusion detection alerts from a sharing platform},
   url = {https://doi.org/10.1016/j.dib.2020.106530},
   volume = {33},
   year = {2020}
}

TY  - JOUR
ID  - 1691217
AU  - Husák, Martin - Žádník, Martin - Bartoš, Václav - Sokol, Pavol
PY  - 2020
TI  - Dataset of intrusion detection alerts from a sharing platform
JF  - Data in Brief
VL  - 33
IS  - December
SP  - 1-12
EP  - 1-12
PB  - Elsevier
SN  - 23523409
KW  - Cyber security;Intrusion detection alerts;Information exchange;Geolocation;Reputation
UR  - https://doi.org/10.1016/j.dib.2020.106530
N2  - The dataset contains intrusion detection alerts obtained via an alert sharing platform (SABU) for one week. A plethora of heterogeneous intrusion detection systems deployed across several organizations contributed to the sharing platform. The alerts are stored in the intrusion Detection Extensible Alert (IDEA) format and categorized using the eCSIRT.net Incident Taxonomy. Dataset can be used in several areas of cybersecurity research for the analysis of intrusion detection alerts including temporal and spatial correlations, reputation scoring, attack scenario reconstruction, and attack projection. The network identifiers (e.g., IP addresses, hostnames) are anonymized. However, the list of interesting features (e.g., presence on blacklists, geolocation) of such entities at the time of data collection is provided.
ER  -

HUSÁK, Martin, Martin ŽÁDNÍK, Václav BARTOŠ and Pavol SOKOL. Dataset of intrusion detection alerts from a sharing platform. \textit{Data in Brief}. Elsevier, 2020, vol.~33, December, p.~1-12. ISSN~2352-3409. Available from: https://dx.doi.org/10.1016/j.dib.2020.106530.

Detailed Information on Publication Record