Insider Threat Test Dataset

The Insider Threat Test Dataset is a collection of synthetic insider threat test datasets that provide both background and malicious actor synthetic data.<br><br>The CERT Division, in partnership with ExactData, LLC, and under sponsorship from DARPA I2O, generated a collection of synthetic insider threat test datasets. These datasets provide both synthetic background data and data from synthetic malicious actors.For more background on this data, please see the paper, Bridging the Gap: A Pragmatic Approach to Generating Insider Threat Data.Datasets are organized according to the data generator release that created them. Most releases include multiple datasets (e.g., r3.1 and r3.2). Generally, later releases include a superset of the data generation functionality of earlier releases. Each dataset file contains a readme file that provides detailed notes about the features of that release.The answer key file answers.tar.bz2 contains the details of the malicious activity included in each dataset, including descriptions of the scenarios enacted and the identifiers of the synthetic users involved.内部威胁测试数据集（Insider Threat Test Dataset）是一组合成内部威胁测试数据集的集合，可同时提供背景数据与恶意行为者合成数据。 美国卡内基梅隆大学软件工程研究所CERT分部（CERT Division）联合ExactData有限责任公司（ExactData, LLC），并在美国国防高级研究计划局信息与智能办公室（DARPA I2O）的资助下，生成了该系列合成内部威胁测试数据集。该数据集同时包含合成背景数据与合成恶意行为者相关数据。如需了解该数据集的更多背景信息，请参阅论文《填补空白：生成内部威胁数据的实用方法》（Bridging the Gap: A Pragmatic Approach to Generating Insider Threat Data）。 数据集按照生成它们的数据生成器版本进行组织。多数版本包含多个数据集（例如r3.1与r3.2）。通常而言，后续版本会涵盖早期版本的全部数据生成功能并进行扩展。每个数据集文件均附带一份自述文件，用于详细说明对应版本的各项特性。答案文件answers.tar.bz2包含各数据集内包含的恶意活动详情，涵盖所模拟场景的说明以及所涉及的合成用户标识符。