针对Linux系统的高级持久威胁 (APT) 和入侵检测评估数据集 2024
Syed Sohaib Karim1, Mehreen Afzal1, Waseem Iqbal1,2
1Department of Information Security, National University of Science and Technology (NUST), Islamabad-44000, Pakistan.
Data in brief
|July 4, 2024
概括
Linux-APT数据集2024提供了一个全面的资源,用于研究Linux系统上的高级持久威胁 (APT) 攻击. 它包括最近的有效载荷和详细的日志,以提高入侵检测能力.
科学领域:
- 网络安全 网络安全
- 网络安全 网络安全
- 恶意软件分析 恶意软件分析
背景情况:
- 现有的数据集缺乏全面的Linux特定的高级持久威胁 (APT) 数据.
- 需要详细的日志来源来理解在Linux上的APT策略和行为.
研究的目的:
- 介绍Linux-APT数据集2024,这是一个用于分析Linux上的APT攻击的新型资源.
- 为研究提供现实的环境,使用当前的APT技术和有效载荷.
主要方法:
- 在Linux环境中模拟最近的APT和复杂的有效负载.
- 使用集中日志系统来捕获各种Linux日志来源.
- 将被捕获的事件映射到MITRE ATT&CK框架中进行概括分析.
主要成果:
- 创建了一个详细的数据集,捕获APT攻击和Linux上的高级有效负载.
- 数据集包括来自各种Linux源的全面日志,与典型系统不同.
- 将攻击者行为映射到 MITRE ATT&CK 框架中.
结论:
- Linux-APT数据集2024对于培训和开发Linux的高级入侵检测解决方案非常有价值.
- 通过提供最新的,现实的攻击数据来增强对APT的研究.
- 有助于更深入地了解Linux系统上的APT操作和检测策略.
更多相关视频
相关概念视频
01:13Attenuated Total Reflectance (ATR) Infrared Spectroscopy: Overview
1.5K
Attenuated total reflectance (ATR) infrared spectroscopy is a powerful analytical technique used to study the composition of materials. It is widely employed in chemistry, materials science, forensic science, and other fields where sample characterization is required. ATR has several advantages over traditional transmission IR spectroscopy, including the requirement of little to no sample preparation and the ability to analyze a wide range of samples.
The ATR process begins by directing a beam...
The ATR process begins by directing a beam...
1.5K
01:26Inductively Coupled Plasma Atomic Emission Spectroscopy: Instrumentation
1.1K
Inductively coupled plasma (ICP) is the common plasma source used in atomic emission spectroscopy (AES), a technique that detects and analyzes various elements in a sample. This method is often called inductively coupled plasma atomic emission spectroscopy (ICP-AES).
There are three main types of inductively coupled plasma atomic emission spectroscopy (ICP-AES) instruments: sequential, simultaneous multichannel, and Fourier transform instruments, with the latter being less commonly used....
There are three main types of inductively coupled plasma atomic emission spectroscopy (ICP-AES) instruments: sequential, simultaneous multichannel, and Fourier transform instruments, with the latter being less commonly used....
1.1K
01:24Automated Microbial Diagnostics
77
Automated diagnostic analyzers have transformed clinical microbiology by providing rapid and reliable methods for pathogen identification and antibiotic susceptibility testing. Among these systems, the Vitek 2 is widely used because it automates the traditionally labor-intensive processes of microbial identification (ID) and antibiotic susceptibility testing (AST), delivering standardized and timely results that are essential for effective patient care.Microbial Identification with ID CardsThe...
77