HTTP

Download: http Zip File

Abstract

Number of Instances:	245708	Security Area:	Network Protocols
Number of Attributes:	27	Date Donated:	2012
Missing Values?	-	Associated ML Tasks:	Network Analysis

Source

Mike Sconzo

Security Repository

Secrepo.com

Dataset Information

Implements base functionality for HTTP analysis. The logging model is to log request/response pairs and all relevant metadata together in a single record.

Attribute Information

	Data Type	Count	Unique Values	Missing Values
ts	float64	245708	245698	0
uid	object	245708	103927	0
id.orig_h	object	245708	128	0
id.orig_p	int64	245708	2400	0
id.resp_h	object	245708	16653	0
id.resp_p	int64	245708	80	0
trans_depth	int64	245708	307	0
method	object	245686	7	22
host	object	243129	15681	2579
uri	object	245686	137398	22
referrer	object	202232	14350	43476
user_agent	object	244201	263	1507
request_body_len	int64	245708	518	0
response_body_len	int64	245708	39244	0
status_code	float64	242791	23	2917
status_msg	object	242791	79	2917
info_code	float64	8	1	245700
info_msg	object	8	1	245700
filename	float64	0	0	245708
tags	object	245708	2	0
username	object	1	1	245707
password	float64	0	0	245708
proxied	object	6	1	245702
orig_fuids	object	2960	2960	242748
orig_mime_types	object	2960	10	242748
resp_fuids	object	206251	206247	39457
resp_mime_types	object	206251	41	39457

Relevant Papers

Bro Logs http://gauss.ececs.uc.edu/Courses/c6055/pdf/bro_log_vars.pdf

Neise, Patrick. "Intrusion Detection Through Relationship Analysis". Oct 2016 https://www.sans.org/reading-room/whitepapers/detection/intrusion-detection-relationship-analysis-37352

Frances Bernadette C. De Ocampo, Trisha Mari L. Del Castillo, Miguel Alberto N. Gomez. "AUTOMATED SIGNATURE CREATOR FOR A SIGNATURE BASED INTRUSION DETECTION SYSTEM WITH NETWORK ATTACK DETECTION CAPABILITIES". 2013 http://sdiwc.net/digital-library/automated-signature-creator-for-a-signature-based-intrusion-detection-system-with-network-attack-detection-capabilities-pancakes.html

Associate Data Science Notebook