作者
Carson Brown, Alex Cowperthwaite, Abdulrahman Hijazi, Anil Somayaji
发表日期
2009/7/8
研讨会论文
2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications
页码范围
1-7
出版商
IEEE
简介
The 1999 DARPA/Lincoln Laboratory IDS evaluation data has been widely used in the intrusion detection and networking community, even though it is known to have a number of artifacts. Here we show that many of these artifacts, including the lack of damaged or unusual background packets and uniform host distribution, can be easily extracted using NetADHICT, a tool we developed for understanding networks. In addition, using NetADHICT we were able to identify extreme temporal variation in the data, a characteristic that was not identified in past analyses. These results illustrate the utility of NetADHICT in characterizing network traces for experimental purposes.
学术搜索中的文章
C Brown, A Cowperthwaite, A Hijazi, A Somayaji - 2009 IEEE Symposium on Computational Intelligence …, 2009