SYNTHETIC DATASET GENERATION FOR DDOS ATTACKS
In Network based Intrusion Detection Systems(NIDS), anomaly-based approaches in particular suffer from accurate evaluation, comparison, and deployment which originates from the scarcity of adequate datasets. Many such datasets are internal and cannot be shared due to privacy issues, whereas others are heavily anonymized and do not reflect current trends, or they lack certain statistical characteristics.
These deficiencies are primarily the reasons why a perfect dataset is yet to exist. Thus, researchers must resort to datasets which are easily available, that are often suboptimal.As network behaviors and patterns change and intrusions evolve, it has very much become necessary to move away from static and one-time datasets toward more dynamically generated datasets which not only reflect the traffic compositions and intrusions of that time, but are also modifiable, extensible, and reproducible.The profiles are then employed in an experiment to generate the desirable dataset in a testbed environment.
Various multi-stage attacks scenarios were subsequently carried out to supply the anomalous portion of the dataset. The intend for this dataset is to assist various researchers in acquiring datasets of this kind for testing, evaluation, and comparison purposes, through sharing the generated datasets and profiles.
SASTRA Intrusion Detection Evaluation Dataset pocesses the following characteristics:
* Complete packet capture
* Realistic network traffic
* Multiple varieties of attacks
Distributed Denial of Service(DDOS) is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system or a service causing a Denial of Service (DoS) attack. Victims of a DDoS attack consist of both the targeted system / service / organizations and all systems maliciously used and controlled by the hacker in the distributed attack. So,our work mainly focuses on generating firehose of network packets for various kinds of DDOS attacks. SASTRA IDS dataset consists of 12 varieties of network based DDOS attacks which attackers usually carryout to take down the target network. Environmental setup, server configuration, attack description, tools used and python scripts for dataset generation and preprocessing will be available in this repository.
SASTRA IDS dataset consists of labeled network traces, including full packet payloads in pcap format, which along with the relevant profiles are publicly available for researchers.
NOTE: These scripts should be used only for educational/research purpose and practice in environment where you have the authorization to carryout such operations.