• DocumentCode
    3618530
  • Title

    Generating representative traffic for intrusion detection system benchmarking

  • Author

    H.G. Kayacik;N. Zincir-Heywood

  • Author_Institution
    Fac. of Comput. Sci., Dalhousie Univ., Halifax, NS, Canada
  • fYear
    2005
  • fDate
    6/27/1905 12:00:00 AM
  • Firstpage
    112
  • Lastpage
    117
  • Abstract
    In this paper, a modeling and simulation framework is proposed for generating data for training and testing intrusion detection systems. The framework can develop models of Web usage from Web server logs in a data driven fashion and the actual traffic is generated by employing the Web browser installed on the host. Additionally, we employed an intrusion detection system as a traffic analyzer to validate the synthetic data that the framework generated and compared it against the standard intrusion detection system benchmark data, namely KDD 99 datasets.
  • Keywords
    "Intrusion detection","Probability distribution","Delay","Training data","Web server","Testing","Uniform resource locators","Web pages","Exponential distribution","Telecommunication traffic"
  • Publisher
    ieee
  • Conference_Titel
    Communication Networks and Services Research Conference, 2005. Proceedings of the 3rd Annual
  • Print_ISBN
    0-7695-2333-1
  • Type

    conf

  • DOI
    10.1109/CNSR.2005.35
  • Filename
    1429954