DocumentCode
3618530
Title
Generating representative traffic for intrusion detection system benchmarking
Author
H.G. Kayacik;N. Zincir-Heywood
Author_Institution
Fac. of Comput. Sci., Dalhousie Univ., Halifax, NS, Canada
fYear
2005
fDate
6/27/1905 12:00:00 AM
Firstpage
112
Lastpage
117
Abstract
In this paper, a modeling and simulation framework is proposed for generating data for training and testing intrusion detection systems. The framework can develop models of Web usage from Web server logs in a data driven fashion and the actual traffic is generated by employing the Web browser installed on the host. Additionally, we employed an intrusion detection system as a traffic analyzer to validate the synthetic data that the framework generated and compared it against the standard intrusion detection system benchmark data, namely KDD 99 datasets.
Keywords
"Intrusion detection","Probability distribution","Delay","Training data","Web server","Testing","Uniform resource locators","Web pages","Exponential distribution","Telecommunication traffic"
Publisher
ieee
Conference_Titel
Communication Networks and Services Research Conference, 2005. Proceedings of the 3rd Annual
Print_ISBN
0-7695-2333-1
Type
conf
DOI
10.1109/CNSR.2005.35
Filename
1429954
Link To Document