CESNET-MINER22
收藏资源简介：
<strong>CESNET-MINER22 : Datasets of Cryptomining Communication</strong> This dataset was created to design a detector of cryptominers communication, soon to be published in NordSec 2022 - IT security conference: Plný, R.; Hynek, K.; Čejka; T.: DeCrypto: Finding Cryptocurrency Miners on ISP networks, in Proceedings of the 27th Nordic Conference on Secure IT Systems, 2022. File named <code>decrypto_dataset_design.csv</code> contains 2,024,903 anonymized flows collected on the national CESNET2 network from December 2021 to February 2022. File named <code>decrypto_dataset_evaluation.csv</code> contains of 1,075,576 anonymized flows collected on the national CESNET2 network during March 2022. Both datasets are provided in CSV format and were created by ipfixprobe. See field description provided below. <strong>BYTES</strong> Number of transferred bytes (from client to server). <strong>BYTES_REV</strong> Number of transferred bytes in the opposite direction (from server to client). <strong>DST_PORT</strong> Destination port. <strong>LABEL</strong> Flow label. Possible values are: Miner Other <strong>PACKETS</strong> Number of transferred packets (from client to server). <strong>PACKETS_REV</strong> Number of transferred packets in the opposite direction (from server to client). <strong>PPI_PKT_DIRECTIONS</strong> Array of directions of the first 30 packets. Values: 1 represents direction client->server -1 represents direction server->client. <strong>PPI_PKT_FLAGS</strong> Array of TCP flags of the first 30 packets. <strong>PPI_PKT_LENGTHS</strong> Array of packet sizes of the first 30 packets. <strong>PPI_PKT_TIMES</strong> Array of timestamps of intercept of the first 30 packets. <strong>PROTOCOL</strong> Used protocol on the Transport layer of the ISO/OSI. TCP is represented by the value 6. <strong>SRC_PORT</strong> Source port. <strong>TCP_FLAGS</strong> TCP flags of the first packet (sent by client). <strong>TCP_FLAGS_REV</strong> TCP flags of the first packer from the opposite direction (sent by server). <strong>TIME_FIRST</strong> Time of interception of the first packet in the flow. <strong>TIME_LAST</strong> Time of interception of the last packet in the flow.
**CESNET-MINER22：加密货币挖矿通信数据集** 本数据集用于构建加密货币挖矿通信检测器，相关研究成果已被2022年第27届北欧安全IT系统会议（NordSec 2022）收录，即将正式发表：Plný, R.; Hynek, K.; Čejka, T.: DeCrypto: Finding Cryptocurrency Miners on ISP Networks, 见《27th Nordic Conference on Secure IT Systems会议论文集》, 2022。名为`decrypto_dataset_design.csv`的数据集包含2021年12月至2022年2月期间在国家CESNET2网络上采集的2,024,903条匿名流量流。名为`decrypto_dataset_evaluation.csv`的数据集包含2022年3月期间在国家CESNET2网络上采集的1,075,576条匿名流量流。两个数据集均采用CSV格式存储，由ipfixprobe工具生成，请参见下文提供的字段说明。 **BYTES**：客户端至服务端传输的字节数。 **BYTES_REV**：反向（服务端至客户端）传输的字节数。 **DST_PORT**：目标端口。 **LABEL**：流量流标签，可选取值为：Miner、Other。 **PACKETS**：客户端至服务端传输的数据包数。 **PACKETS_REV**：反向（服务端至客户端）传输的数据包数。 **PPI_PKT_DIRECTIONS**：前30个数据包的方向数组，取值1代表客户端→服务端方向，-1代表服务端→客户端方向。 **PPI_PKT_FLAGS**：前30个数据包的TCP标志位数组。 **PPI_PKT_LENGTHS**：前30个数据包的大小数组。 **PPI_PKT_TIMES**：前30个数据包的捕获时间戳数组。 **PROTOCOL**：ISO/OSI模型传输层使用的协议，其中TCP协议对应取值6。 **SRC_PORT**：源端口。 **TCP_FLAGS**：客户端发送的首个数据包的TCP标志位。 **TCP_FLAGS_REV**：服务端发送的反向首个数据包的TCP标志位。 **TIME_FIRST**：流量流中首个数据包的捕获时间。 **TIME_LAST**：流量流中最后一个数据包的捕获时间。
