串接式加密流量解析处理平台测试数据集

本数据集包含SSL、SSH、IPsec三类加密协议流量，总计1529个数据包，覆盖通信加密核心场景。其中SSL流量758个，完整涵盖算法协商、证书验证、密钥交换、Finished加密验证及加密状态错误处理流程；SSH流量367个，完整覆盖版本协商、密钥交换、用户认证、会话加密通道建立的四层安全通信流程；IPsec流量404个，包含IKE阶段的安全关联协商、身份认证、密钥生成，以及ESP阶段的载荷封装、序列号防重放、完整性校验的双重安全流程。数据以pcap形式存储，共计1.08MB。该数据集为验证考核指标“支持不少于3种加密流量中间人代理（SSL、SSH、IPsec），实现对加密公害流量的解密。双路x86设备下，加密流量解析处理平台支持的代理并发数不低于100万个”，时产生的中间数据。This dataset contains encrypted protocol traffic of three categories: SSL, SSH, and IPsec, with a total of 1529 packets covering core communication encryption scenarios. Specifically, there are 758 SSL traffic packets, which fully cover the processes of algorithm negotiation, certificate verification, key exchange, Finished encryption verification, and encryption status error handling. For SSH traffic, there are 367 packets that completely cover the four-layer secure communication workflow including version negotiation, key exchange, user authentication, and session encrypted channel establishment. As for IPsec traffic, there are 404 packets involving the dual security procedures of the IKE phase: security association negotiation, identity authentication, and key generation, as well as the ESP phase: payload encapsulation, sequence number anti-replay, and integrity verification. The data is stored in pcap format with a total size of 1.08 MB. This dataset is the intermediate data generated during the verification of the assessment indicator: "Support no less than 3 types of encrypted traffic man-in-the-middle proxies (SSL, SSH, IPsec) to achieve decryption of encrypted malicious traffic. Under dual x86 devices, the encrypted traffic analysis and processing platform supports a proxy concurrency of no less than 1,000,000."

搜集汇总

背景与挑战

背景概述

该数据集是用于测试串接式加密流量解析处理平台的专用数据集，包含SSL、SSH、IPsec三类加密协议流量，总计1529个数据包，覆盖算法协商、身份认证等核心通信加密流程。数据以pcap格式存储，旨在验证平台对多种加密流量进行中间人代理和解密的能力。