Windows-APT 2025: 一个针对Windows系统上APT启发的攻击场景的数据集
Maryam Mozaffari1, Abbas Yazdinejad2,3, Ali Dehghantanha1
1Cyber Science Lab (CSL), Guelph, ON, Canada.
Data in brief
|March 4, 2026
概括
本研究介绍了2025年Windows-APT数据集,为Windows系统的高级持久威胁 (APT) 研究提供了详细的策略,技术和程序 (TTP). 它有助于开发更好的威胁检测和防御策略来应对复杂的网络威胁.
科学领域:
- 网络安全 网络安全
- 计算机科学 计算机科学
- 数据科学数据科学数据科学
背景情况:
- 现有的网络安全数据集往往缺乏详细的战术,技术和程序 (TTPs) 针对Windows系统上的高级持久威胁 (APT).
- 迫切需要全面的数据集,以捕捉Windows环境中APT活动的复杂性.
研究的目的:
- 引入Windows-APT数据集2025,这是网络安全研究的新资源.
- 通过提供详细的系统和网络事件日志来解决了解APT TTP的差距.
- 促进先进威胁检测和防御机制的发展.
主要方法:
- 根据MITRE ATT&CK框架配置文件,开发了一个由36个APT启发的场景组成的数据集.
- 使用MITRE Caldera框架进行对手模拟以生成事件日志.
- 使用Wazuh收集系统和网络事件日志,并将其映射到MITRE ATT&CK框架.
主要成果:
- 生成了广泛的系统和网络事件日志,反映了现实的APT TTP.
- 数据集包括19个CSV文件和可复制的配置文件.
- 记录被系统地映射到MITRE ATT&CK框架,以便进行详细分析.
结论:
- 2025年Windows-APT数据集是训练机器学习模型和评估入侵检测系统的宝贵资产.
- 这一数据集增强了APT动态研究,并提高了威胁检测能力.
- 它可以在Windows环境中开发有效的应对新出现的网络威胁的措施.
相关概念视频
Synaptic Signaling
70.0K
Neurons communicate at synapses, or junctions, to excite or inhibit the activity of other neurons or target cells, such as muscles. Synapses may be chemical or electrical.
70.0K
Synaptic Signaling
5.7K
Neurons communicate at synapses, or junctions, to excite or inhibit the activity of other neurons or target cells, such as muscles. Synapses may be chemical or electrical.
Most synapses are chemical, meaning an electrical impulse or action potential spurs the release of chemical messengers called neurotransmitters. The neuron sending the signal is called the presynaptic neuron, and the neuron receiving the signal is the postsynaptic neuron.
The presynaptic neuron fires an action potential that...
Most synapses are chemical, meaning an electrical impulse or action potential spurs the release of chemical messengers called neurotransmitters. The neuron sending the signal is called the presynaptic neuron, and the neuron receiving the signal is the postsynaptic neuron.
The presynaptic neuron fires an action potential that...
5.7K
Integration of Synaptic Events
6.4K
Synaptic integration mainly includes the summation of graded potentials. Graded potentials, regardless of their type, cause subtle alterations in membrane voltage, resulting in either depolarization or hyperpolarization. These incremental changes, when combined or summed, can propel the neuron toward its threshold. Consider, for example, a membrane experiencing a +15 mV shift, causing it to depolarize from -70 mV to -55 mV. In this scenario, graded potentials govern the membrane's ability to...
6.4K
Distribution Reliability and Automation
678
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
678
Overview of Microsoft Excel as a Data Analysis Tool
1.8K
Microsoft Excel is a cornerstone tool for data analysis and statistical operations, offering a wide array of functionalities to manage, analyze, and visualize data efficiently. Recognized for its versatility, Excel facilitates the performance of basic to complex statistical operations, serving as an indispensable asset for analysts, researchers, and students alike. Excel's significance in data analysis emanates from its spreadsheet environment, where data can be organized in rows and...
1.8K
Performing a Simple Data Analysis using MS-Excel Function
1.1K
Microsoft Excel offers a suite of functions and tools ideal for statistical analysis, making it accessible to students and researchers. This article outlines fundamental Excel functions pivotal for data analysis.
SUM: This function calculates the total sum of a range of values. It's the foundation for aggregating data, essential for determining overall trends and totals in datasets.
AVERAGE: It computes the mean value of a given set of numbers, providing a quick insight into the central...
SUM: This function calculates the total sum of a range of values. It's the foundation for aggregating data, essential for determining overall trends and totals in datasets.
AVERAGE: It computes the mean value of a given set of numbers, providing a quick insight into the central...
1.1K


