This is a non-IMPACT record, meaning that access to the data is not
controlled by IMPACT. For access, see the directions below.
Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.
Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.
Summary
DS-0926
CIC DoS dataset
External Dataset
External Data Source
University of New Brunswick
01/01/2017
01/01/2017
57 (lowest rank is 57)
Description
DoS attacks dataset
In this study the focus was on the universal type of application DoS slow-rate attacks that are often seen in two variations: slow send and slow read.
The lack of data with application layer DoS attacks prompted us to create an evaluation dataset. We have set up a testbed environment with a victim webserver running Apache Linux v.2.2.22, PHP5 and Drupal v.7 as a content management system. The attacks were selected to represent the most common types of application layer DoS. We assume that an attacker is non-oblivious, i.e., he understands the attack, knows exactly when and how much traffic to send to maximize the attack damage.
Since the main premise of low-volume DoS attacks is their ability to impact a service without significant resources on an attacker side, the attacks were generated with just enough traffic to impact the targeted service, i.e, the attacks were stopped once a server became unresponsive. As a result we noticed that to be successful it was sufficient for these attacks to produce small amounts of traffic during short periods of time. ; cic@unb.ca
Additional Details
4.3GB
false
Unknown
dos, dataset, cic, 926, cic dos dataset, 2017, external, inferlink, inferlink corporation, corporation, source, external data source, attacks, slow, traffic, application, layer, send, impact, attack, attacker, service, ability, victim, periods, targeted, oblivious, short, linux, time, variations, management, webserver, resources, produce, noticed, stopped, environment, types, unb, successful, universal, represent, rate, common, result, selected, create, testbed, sufficient, generated, premise, amounts, apache, maximize, evaluation, type, main, php5, read, prompted, running, understands, content, other, study, server, damage, assume, unresponsive, drupal, system, volume, lack, focus