委员会:用于分析Windows系统中恶意事件的数据集
Antonio Pérez-Sánchez1, Rafael Palacios1,2, Gregorio López López1
1Institute for Research in Technology (IIT), ICAI School of Engineering, Comillas Pontifical University, 28015 Madrid, Spain.
Data in brief
|July 17, 2025
概括
一个新的数据集,COMISET,解决了缺乏最新的事件数据来评估微软Windows威胁检测系统. 它包含2.5亿个标记事件,有助于网络安全研究.
科学领域:
- 网络安全 网络安全
- 数据科学数据科学数据科学
- 计算机系统 计算机系统
背景情况:
- 现有的事件数据集缺乏足够的最新信息来评估Windows系统上的威胁检测.
- 目前的数据集存在限制,阻碍了全面的威胁检测研究.
- 对于网络安全研究而言,有必要提供现实的,全面的数据集.
研究的目的:
- 引入COMISET,一种用于评估威胁检测和预防系统的新型大规模数据集.
- 为提供实时,最新事件反映当前威胁和恶意软件模糊的资源.
- 通过提供免费可用的,标记的网络安全事件数据来促进研究.
主要方法:
- 从两个不同的环境收集实时事件:一个小公司实验室和一个大学网络.
- 在实验室环境中执行真实攻击,采用各种敌方技术和战术.
- 使用MITRE ATT&CK矩阵进行标准化分析,标记捕获的事件.
主要成果:
- 创建了COMISET,一个包含大约2.5亿恶意和非恶意事件的数据集.
- 通过结合当前的威胁和恶意软件掩盖技术来确保数据集的相关性.
- 用有价值的标记事件的例子证明了数据集的实用性.
结论:
- COMISET的专门设计是为了克服评估威胁检测系统的现有数据集的局限性.
- 数据集的全面性质和MITRE ATT&CK标签增强了网络安全研究能力.
- COMISET提供了一个有价值的,免费可访问的资源,用于推进威胁检测和预防战略.
相关概念视频
01:13Mass Analyzers: Overview
817
The mass analyzer is a crucial component of the mass spectrometer. In the ionization chamber, the vaporized sample is bombarded with a high-energy electron beam to generate a radical cation and further fragment into neutral molecules, radicals, and cations. A series of negatively charged accelerator plates accelerate the cations into the mass analyzer. The mass analyzer separates ions according to their mass-to-charge (m/z) ratios and then directs them to the detector. The common types of mass...
817
01:19Mass Analyzers: Common Types
710
The quadrupole mass analyzer consists of four cylindrical metal rods arranged in a diamond carrying a DC voltage and a radio-frequency AC voltage. The motion of ions through the quadrupole depends on the field strength, causing only ions of a certain m/z to resonate successfully and strike the detector at a given field strength. Though the transmission rate for these analyzers is high, the exact elemental composition of the sample is not determined because of low resolution; however, they are...
710
01:18Guidelines and Strategies for Safe Computer Charting
880
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
880
01:09Censoring Survival Data
243
Survival analysis is a statistical method used to analyze time-to-event data, often employed in fields such as medicine, engineering, and social sciences. One of the key challenges in survival analysis is dealing with incomplete data, a phenomenon known as "censoring." Censoring occurs when the event of interest (such as death, relapse, or system failure) has not occurred for some individuals by the end of the study period or is otherwise unobservable, and it might have many different...
243
01:12Statistical Software for Data Analysis and Clinical Trials
796
Statistical software is pivotal in data analysis and clinical trials by providing tools to analyze data, draw conclusions, and make predictions. These software packages range from simple data management applications to complex analytical platforms, supporting various statistical tests, models, and simulation techniques. Their significance lies in their ability to handle vast amounts of data with precision and efficiency, enabling researchers to validate hypotheses, identify trends, and make...
796
01:25Statistical Methods for Analyzing Epidemiological Data
540
Epidemiological data primarily involves information on specific populations' occurrence, distribution, and determinants of health and diseases. This data is crucial for understanding disease patterns and impacts, aiding public health decision-making and disease prevention strategies. The analysis of epidemiological data employs various statistical methods to interpret health-related data effectively. Here are some commonly used methods:
540