DARPA TCE3

该数据集包含了在一场涉及多个独立攻击者进行各类高级持续性威胁（APT）攻击的演习中收集的日志数据。具体来说，数据集总共有13,880,763个事件。为了进一步分析，该数据集被筛选出了一个包含237,721个事件的子集，其中236,160个为正常事件，而有1,561个为攻击事件。在规模上，整个数据集包含了超过1380万个事件。任务上，该数据集被用于利用机器学习进行APT检测。

This dataset contains log data collected during an exercise where multiple independent attackers launched various advanced persistent threat (APT) attacks. Specifically, the total number of events in the full dataset is 13,880,763. For further analytical purposes, a subset comprising 237,721 events was extracted from this dataset, with 236,160 of them being normal events and 1,561 being attack events. In terms of scale, the entire dataset contains over 13.8 million events. This dataset is utilized for APT detection using machine learning.

搜集汇总

背景与挑战

背景概述

DARPA TCE3数据集是DARPA透明计算计划的一部分，专注于通过高保真度的系统组件交互记录来检测和对抗高级持续性威胁（APTs）。数据集包含多个技术领域的数据，特别是TA1生成的交互跟踪数据和TA5.1提供的对抗性挑战数据，旨在促进相关研究。