tklab-tud / ID2TLinks
Official ID2T repository. ID2T creates labeled IT network datasets that contain user defined synthetic attacks.
☆65Updated 2 years ago
Alternatives and similar repositories for ID2T
Users that are interested in ID2T are comparing it to the libraries listed below
Sorting:
- nPrint provides a generalizable data representation for network packets that works directly with machine learning techniques☆118Updated 3 years ago
- A Zeek script to generate features based on timing, volume and metadata for traffic classification.☆59Updated 4 years ago
- ☆122Updated 5 years ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆81Updated last month
- ICS Cybersecurity PCAP respository☆58Updated 6 years ago
- A collection of resources for security data☆41Updated 7 years ago
- A logic-based enterprise network security analyzer☆128Updated 2 years ago
- Anomaly detection in network traffic and event logs using deep learning (w/ Pytorch)☆70Updated 6 years ago
- Industrial Intrusion Detection - A framework for protocol-independent industrial intrusion detection on top of IPAL.☆27Updated 2 months ago
- Pcap-splitter allows you to split a pcap file into subsets of pcap files based on sessions, flows, ip addresses, number of bytes, number …☆66Updated 6 years ago
- ☆25Updated 4 years ago
- "Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyb…☆96Updated last year
- This forked repository contains our fixed version of the original CICFlowmeter tool. The improvements were implemented as part of our pap…☆47Updated last year
- A python app to predict Att&ck tactics and techniques from cyber threat reports☆125Updated last year
- A method for grouping, clustering, and merging semi-structured alerts☆24Updated 10 months ago
- AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports☆162Updated 2 years ago
- DoHlyzer is a DNS over HTTPS (DoH) traffic flow generator and analyzer for anomaly detection and characterization.☆67Updated 2 years ago
- Original implementation and resources of DeepCASE as in the S&P '22 paper☆94Updated 2 years ago
- SecureBERT is a domain-specific language model to represent cybersecurity textual data.☆97Updated last year
- Material from the DARPA Transparent Computing Program☆205Updated 5 years ago
- These scripts conduct TCPDUMP in harmony with CICFlowMeter to operation real-time traffic capturing and converting in csv file.☆52Updated 5 years ago
- [TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854☆39Updated last year
- In this work, we aim at developing a NIDS (Network Intrusion Detection System) that detects attacks targeting SCADA systems, in a concret…☆71Updated 2 years ago
- Feature Extraction and Machine Learning from Network Traffic Traces☆71Updated last year
- ☆27Updated 2 years ago
- Coburg Intrusion Detection Data Sets☆51Updated 7 years ago
- This work shows the viability of automatically generated attack graphs that are used for adversary behavior execution in industrial contr…☆12Updated 4 years ago
- IoT SENTINEL : Automated Device-Type Identification for Security Enforcement in IoT with Machine Learning☆43Updated 6 years ago
- Payload-Byte is a tool for extracting and labeling packet capture (Pcap) files of modern network intrusion detection datasets.☆42Updated last year
- Repository of creating different example suricata data sets☆36Updated 6 years ago