网络异常行为追踪溯源与定位原型系统数据库

本数据集为网络异常行为追踪溯源与定位原型系统的系统运行数据集，包括基础数据和日志数据两部分：基础数据包括用于测试的包含恶意证书的流量报文示例、用于证书合法性校验的权威根证书和权威中间证书数据；日志数据的时间范围为24小时，记录了网络异常行为追踪溯源与定位原型系统在执行任务时提取的客户端和服务端X.509数字证书日志、以及用于追踪溯源的流量处理日志。数据记录期间，原型系统以某办公区的入口网关处的流量作为输入流量。

This dataset is a system operation dataset for the prototype system of network anomaly behavior tracking, tracing and localization, which consists of two parts: basic data and log data.
The basic data includes sample traffic packets containing malicious certificates for testing, as well as authoritative root and intermediate certificate data used for certificate validity verification.
The log data spans a 24-hour time period, and records the client-side and server-side X.509 digital certificate logs extracted during the task execution of the prototype system, as well as traffic processing logs dedicated to network anomaly tracing and localization. During the data collection period, the prototype system took the traffic captured at the entrance gateway of an office area as its input traffic.

搜集汇总

背景与挑战

背景概述

该数据集是网络异常行为追踪溯源与定位原型系统的运行数据集，包含基础数据（如恶意证书流量报文示例和权威证书）和24小时的日志数据（记录X.509数字证书及流量处理日志）。数据源自某办公区入口网关的流量，用于支持异常行为的追踪与定位分析。