Browse
Submit Data
Databases
API
Help

Dataset Information

0 Views

0 Connections

0 Citations

0 Reanalyses

0 Downloads

Omics score: 0

Collection of datasets with DNS over HTTPS traffic.

ABSTRACT: Recently, the Internet has adopted the DNS over HTTPS (DoH) resolution mechanism for privacy-aware network applications. As DoH becomes more disseminated, it has also become a network monitoring research topic. For comprehensive evaluation and comparison of developed classifiers, real-world datasets are needed, motivating this contribution. We created a new large-scale collection of datasets consisting of two classes of traffic: i) DoH HTTPS communication and ii) non-DoH HTTPS connections. The DoH traffic is captured for multiple DoH providers and clients to include nuances of various DoH implementations and configurations. The non-DoH HTTPS connections complement the DoH communication aiming to include a wide range of existing network applications. The dataset collection consists of network traffic generated in a controlled environment and traffic captured from a real ISP network. The resulting datasets thus provide real-world network traffic data suitable for evaluating existing classifiers and the development of new methods.

SUBMITTER: Jerabek K

PROVIDER: S-EPMC9168479 | biostudies-literature | 2022 Jun

REPOSITORIES: biostudies-literature

ACCESS DATA

Json Xml

Publications

Collection of datasets with DNS over HTTPS traffic.

Jeřábek Kamil K Hynek Karel K Čejka Tomáš T Ryšavý Ondřej O

Data in brief 20220527

Recently, the Internet has adopted the DNS over HTTPS (DoH) resolution mechanism for privacy-aware network applications. As DoH becomes more disseminated, it has also become a network monitoring research topic. For comprehensive evaluation and comparison of developed classifiers, real-world datasets are needed, motivating this contribution. We created a new large-scale collection of datasets consisting of two classes of traffic: i) DoH HTTPS communication and ii) non-DoH HTTPS connections. The D ...[more]

PMID: 35677460

Similar Datasets

Hybrid rule-based botnet detection approach using machine learning for analysing DNS traffic.

Project description:Botnets can simultaneously control millions of Internet-connected devices to launch damaging cyber-attacks that pose significant threats to the Internet. In a botnet, bot-masters communicate with the command and control server using various communication protocols. One of the widely used communication protocols is the 'Domain Name System' (DNS) service, an essential Internet service. Bot-masters utilise Domain Generation Algorithms (DGA) and fast-flux techniques to avoid static blacklists and reverse engineering while remaining flexible. However, botnet's DNS communication generates anomalous DNS traffic throughout the botnet life cycle, and such anomaly is considered an indicator of DNS-based botnets presence in the network. Despite several approaches proposed to detect botnets based on DNS traffic analysis; however, the problem still exists and is challenging due to several reasons, such as not considering significant features and rules that contribute to the detection of DNS-based botnet. Therefore, this paper examines the abnormality of DNS traffic during the botnet lifecycle to extract significant enriched features. These features are further analysed using two machine learning algorithms. The union of the output of two algorithms proposes a novel hybrid rule detection model approach. Two benchmark datasets are used to evaluate the performance of the proposed approach in terms of detection accuracy and false-positive rate. The experimental results show that the proposed approach has a 99.96% accuracy and a 1.6% false-positive rate, outperforming other state-of-the-art DNS-based botnet detection approaches.

| S-EPMC8372004 | biostudies-literature

Classification of traffic accidents datasets between 2003-2017 in Iraq.

Project description:After the epidemic disease and the violence, the traffic injuries in Iraq has become a massive threat that menace the lives of the citizens and plagued the number of victims in Iraq after 2003. Iraq is seeing a catastrophic growth in the number of the traffic injuries reaching a high level during the previous ten years. Datasets results for the previous 10 years in Iraq were collected in this study. The data was arranged into spreadsheets creating a useful database for the prospectus studies. Classification of the traffic injuries was performed according to the number of fatalities, the number of injuries, and the number of accidents. Overall, traffic accidents were drastically growing from 2005 to 2017. In additional, the number of accidents recorded a relatively higher rate of accidents in a month with about 9%. However, the highest rates were observed during 2014, 2015, 2016 and 2017 consecutively. It may be attributed to the absence of security and safety precautions procedures. The number of injuries was as high was 12% and it increased during 2014, 2015, 2016 and 2017 respectively. whereas the number of fatalities recorded the highest number during 2017 with a ratio about 21%.

| S-EPMC6940704 | biostudies-literature

DNS dataset for malicious domains detection.

Project description:The Domain Name Service (DNS) is a central point in the functioning of the internet. Just as organizations use domain names to enable the access to their computational services, malicious actors make use of domain names to point to the services under their control. Distinguishing between non-malicious and malicious domain names is extremely important, as it allows to grant or block the access to external services, maximizing the security of the organization and users. Nowadays there are many DNS firewall solutions. Most of these are based on known malicious domain lists that are being constantly updated. However, in this way, it is only possible to block known malicious communications, leaving out many others that can be malicious but are not known. Adopting machine learning to classify domains contributes to the detection of domains that are not yet on the block list. The dataset described in this manuscript is meant for supervised machine learning-based analysis of malicious and non-malicious domain names. The dataset was created from scratch, using publicly DNS logs of both malicious and non-malicious domain names. Using the domain name as input, 34 features were obtained. Features like the domain name entropy, number of strange characters and domain name length were obtained directly from the domain name. Other features like, domain name creation date, Internet Protocol (IP), open ports, geolocation were obtained from data enrichment processes (e.g. Open Source Intelligence (OSINT)). The class was determined considering the data source (malicious DNS log files and non-malicious DNS log files). The dataset consists of data from approximately 90000 domain names and it is balanced between 50% non-malicious and 50% of malicious domain names.

| S-EPMC8437788 | biostudies-literature

Datasets of RT spoofing attacks on MIL-STD-1553 communication traffic.

Project description:The datasets in this article are produced to evaluate the ability of MIL-STD-1553 intrusion detection systems to detect attacks that emulate normal non-periodical messages, at differing attack occurrence rates. And different data representations. We present three streams of simulated MIL-STD-1553 traffic containing both normal and attack messages corresponding to packets that were injected into the bus by a malicious remote terminal. The implemented attacks emulate normal non-periodical communication so detecting them with a low false positive rate is non-trivial. Each stream is separated into a training set of normal messages and a test set of both normal and attack messages. The test sets differ by the occurrence rate of attack messages (0.01%, 0.10%, and 1.00%). Each stream is also preprocessed into a dataset of message sequences so that it can be used for sequential anomaly detection analysis. The sequential test sets differ by the occurrence rate of attack sequences (0.14%, 1.26%, and 11.01%). All dataset files can be found in Mendeley Data, doi:10.17632/jvgdrmjvs3.3.

| S-EPMC6660615 | biostudies-literature

A collection of three-dimensional datasets of hydrating cement paste.

Project description:This dataset contains a collection of digitized three-dimensional hardened cement paste microstructures obtained from X-ray micro-computed tomography. Four sets of ordinary Portland cement-based pastes were produced and X-ray screened, varying in the initial water-to-cement ratio (wcr=0.35 and 0.50) and fineness of cement used (391 and 273 m2/kg Blaine). Individual paste samples from each set were screened after 1, 2, 3, 4, 7, 14, and 28 days of elapsed hydration at 20˚C in saturated conditions. Each digitized paste specimen captures a realistic spatial configuration of the principal microstructural phases (anhydrous cement, hydration products, and large capillary porosity). The dataset may be further used for assessing changes in the mix design on the resultant spatial configuration of the paste microstructure or aid the development of microstructure-inspired micromechanical models based on realistic material configuration.

| S-EPMC9876826 | biostudies-literature

Categorizing datasets of road traffic accidents in Oman spanning from 2012 to 2022

Project description: Not available

| S-EPMC10885600 | biostudies-literature

A collection of Australian Drosophila datasets on climate adaptation and species distributions.

Project description:The Australian Drosophila Ecology and Evolution Resource (ADEER) collates Australian datasets on drosophilid flies, which are aimed at investigating questions around climate adaptation, species distribution limits and population genetics. Australian drosophilid species are diverse in climatic tolerance, geographic distribution and behaviour. Many species are restricted to the tropics, a few are temperate specialists, and some have broad distributions across climatic regions. Whereas some species show adaptability to climate changes through genetic and plastic changes, other species have limited adaptive capacity. This knowledge has been used to identify traits and genetic polymorphisms involved in climate change adaptation and build predictive models of responses to climate change. ADEER brings together 103 datasets from 39 studies published between 1982-2013 in a single online resource. All datasets can be downloaded freely in full, along with maps and other visualisations. These historical datasets are preserved for future studies, which will be especially useful for assessing climate-related changes over time.

| S-EPMC4658573 | biostudies-literature

HDCytoData: Collection of high-dimensional cytometry benchmark datasets in Bioconductor object formats.

Project description:Benchmarking is a crucial step during computational analysis and method development. Recently, a number of new methods have been developed for analyzing high-dimensional cytometry data. However, it can be difficult for analysts and developers to find and access well-characterized benchmark datasets. Here, we present HDCytoData, a Bioconductor package providing streamlined access to several publicly available high-dimensional cytometry benchmark datasets. The package is designed to be extensible, allowing new datasets to be contributed by ourselves or other researchers in the future. Currently, the package includes a set of experimental and semi-simulated datasets, which have been used in our previous work to evaluate methods for clustering and differential analyses. Datasets are formatted into standard SummarizedExperiment and flowSet Bioconductor object formats, which include complete metadata within the objects. Access is provided through Bioconductor's ExperimentHub interface. The package is freely available from http://bioconductor.org/packages/HDCytoData.

| S-EPMC6904983 | biostudies-literature