Are We Missing Labels? A Study of the Availability of Ground-Truth in Network Security Research

No abstract is available for this paper.

• Publication year

  2014

• Venue

  International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security

• Publication date

  2014-09-11

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/BADGERS.2014.11
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Research in Attacks, Intrusions, and Defenses

  2015cited by this paper
• Research in Attacks, Intrusions and Defenses

  2014cited by this paper
• The Core of the Matter: Analyzing Malicious Traffic in Cellular Carriers

  2013cited by this paper
• Automatically Inferring the Evolution of Malicious Activity on the Internet

  2013cited by this paper
• Detecting stealthy, distributed SSH brute-forcing

  2013cited by this paper
• Server-Side Code Injection Attacks: A Historical Perspective

  2013cited by this paper
• AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks

  2013cited by this paper
• The Parrot Is Dead: Observing Unobservable Network Communications

  2013cited by this paper
• Clear and Present Data: Opaque Traffic and its Security Implications for the Future

  2013cited by this paper
• Passive Remote Source NAT Detection Using Behavior Statistics Derived from NetFlow

  2013cited by this paper
• Finding the Linchpins of the Dark Web: a Study on Topologically Dedicated Hosts on Malicious Web Infrastructures

  2013cited by this paper
• FRESCO: Modular Composable Security Services for Software-Defined Networks

  2013cited by this paper
• Clickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting

  2013cited by this paper
• Active Credential Leakage for Observing Web-Based Attack Cycle

  2013cited by this paper
• Intention and Origination: An Inside Look at Large-Scale Bot Queries

  2013cited by this paper
• FIRMA: Malware Clustering and Network Signature Generation with Mixed Network Behaviors

  2013cited by this paper
• NEIGHBORWATCHER: A Content-Agnostic Comment Spam Inference System

  2013cited by this paper
• AUTHSCAN: Automatic Extraction of Web Authentication Protocols from Implementations

  2013cited by this paper
• Behind the Scenes of Online Attacks: an Analysis of Exploitation Behaviors on the Web

  2013cited by this paper
• Delta: automatic identification of unknown web-based infection campaigns

  2013cited by this paper
• Deobfuscating Embedded Malware Using Probable-Plaintext Attacks

  2013cited by this paper
• Bridging the Data Gap: Data Related Challenges in Evaluating Large Scale Collaborative Security Systems

  2013cited by this paper
• ViceROI: catching click-spam in search ad networks

  2013cited by this paper
• Shady paths: leveraging surfing crowds to detect malicious web pages

  2013cited by this paper
• Juice: A Longitudinal Study of an SEO Botnet

  2013cited by this paper
• Research in Attacks, Intrusions, and Defenses

  2013cited by this paper
• Research in attacks, intrusions, and defenses : 16th international symposium, RAID 2013, Rodney Bay, St. Lucia, October 23-25, 2013 : proceedings

  2013cited by this paper
• Beheading hydras: performing effective botnet takedowns

  2013cited by this paper
• Connected Colors: Unveiling the Structure of Criminal Networks

  2013cited by this paper
• Understanding SMS spam in a large cellular network

  2013cited by this paper
• ALERT-ID: Analyze Logs of the Network Element in Real Time for Intrusion Detection

  2012cited by this paper
• Large-scale IP network behavior anomaly detection and identification using substructure-based approach and multivariate time series mining

  2012cited by this paper
• N-Gram against the Machine: On the Feasibility of the N-Gram Network Analysis for Binary Protocols

  2012cited by this paper
• 19th Annual Network and Distributed System Security Symposium, NDSS 2012, San Diego, California, USA, February 5-8, 2012

  2012cited by this paper
• Rozzle: De-cloaking Internet Malware

  2012cited by this paper
• BotFinder: finding bots in network traffic without deep packet inspection

  2012cited by this paper
• EvilSeed: A Guided Approach to Finding Malicious Web Pages

  2012cited by this paper
• Host Fingerprinting and Tracking on the Web: Privacy and Security Implications

  2012cited by this paper
• Knowing your enemy: understanding and detecting malicious web advertising

  2012cited by this paper
• Populated IP addresses: classification and applications

  2012cited by this paper
• Blacksheep: detecting compromised hosts in homogeneous crowds

  2012cited by this paper
• the ACM Conference on Computer and Communications Security, CCS'12, Raleigh, NC, USA, October 16-18, 2012

  2012cited by this paper
• Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis

  2012cited by this paper
• PoisonAmplifier: A Guided Approach of Discovering Compromised Websites through Reversing Search Poisoning Attacks

  2012cited by this paper
• A Lone Wolf No More: Supporting Network Intrusion Detection with Real-Time Intelligence

  2012cited by this paper
• WarningBird: Detecting Suspicious URLs in Twitter Stream

  2012cited by this paper
• Proactive Discovery of Phishing Related Domain Names

  2012cited by this paper
• Kargus: a highly-scalable software-based intrusion detection system

  2012cited by this paper
• Crouching tiger - hidden payload: security risks of scalable vectors graphics

  2011cited by this paper
• Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation

  2011cited by this paper
• MIDeA: a multi-parallel intrusion detection architecture

  2011cited by this paper
• EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis

  2011cited by this paper
• TrumanBox: Improving Dynamic Malware Analysis by Emulating the Internet

  2011cited by this paper
• On Measuring the Similarity of Network Hosts: Pitfalls, New Metrics, and Empirical Analyses

  2011cited by this paper
• 32nd IEEE Symposium on Security and Privacy, S&P 2011, 22-25 May 2011, Berkeley, California, USA

  2011cited by this paper
• Recent Advances in Intrusion Detection - 14th International Symposium, RAID 2011, Menlo Park, CA, USA, September 20-21, 2011. Proceedings

  2011cited by this paper
• Click Trajectories: End-to-End Analysis of the Spam Value Chain

  2011cited by this paper
• Modeling User Search Behavior for Masquerade Detection

  2011cited by this paper
• IceShield: Detection and Mitigation of Malicious Websites with a Frozen DOM

  2011cited by this paper
• BitShred: feature hashing malware for scalable triage and semantic analysis

  2011cited by this paper
• Cross-Domain Collaborative Anomaly Detection: So Far Yet So Close

  2011cited by this paper
• Cross-Analysis of Botnet Victims: New Insights and Implications

  2011cited by this paper
• Automated Discovery of Parameter Pollution Vulnerabilities in Web Applications

  2011cited by this paper
• BotCloud: Detecting botnets using MapReduce

  2011cited by this paper
• SWIRL: A Scalable Watermark to Detect Correlated Network Flows

  2011cited by this paper
• Detecting Environment-Sensitive Malware

  2011cited by this paper
• SURF: detecting and measuring search poisoning

  2011cited by this paper
• Revisiting Traffic Anomaly Detection Using Software Defined Networking

  2011cited by this paper
• Dialing Privacy and Utility: A Proposed Data-Sharing Framework to Advance Internet Research

  2010cited by this paper
• Inspector Gadget: Automated Extraction of Proprietary Gadgets from Malware Binaries

  2010cited by this paper
• Community Epidemic Detection Using Time-Correlated Anomalies

  2010cited by this paper
• Losing control of the internet: using the data plane to attack the control plane

  2010cited by this paper
• A Centralized Monitoring Infrastructure for Improving DNS Security

  2010cited by this paper
• Automatic Discovery of Parasitic Malware

  2010cited by this paper
• A Data-Centric Approach to Insider Attack Detection in Database Systems

  2010cited by this paper
• A Practical Attack to De-anonymize Social Network Users

  2010cited by this paper
• Generating Client Workloads and High-Fidelity Network Traffic for Controllable, Repeatable Experiments in Computer Security

  2010cited by this paper
• Synthesizing Near-Optimal Malware Specifications from Suspicious Behaviors

  2010cited by this paper
• Anomaly Detection and Mitigation for Disaster Area Networks

  2010cited by this paper
• Revocation Systems with Very Small Private Keys

  2010cited by this paper
• Behavior-Based Worm Detectors Compared

  2010cited by this paper
• Dialog-based payload aggregation for intrusion detection

  2010cited by this paper
• Identifying Dormant Functionality in Malware Programs

  2010cited by this paper
• Proceedings of the 17th ACM conference on Computer and communications security

  2010cited by this paper
• Investigation of Triangular Spamming: A Stealthy and Efficient Spamming Technique

  2010cited by this paper
• On Network-level Clusters for Spam Detection

  2010cited by this paper
• Authenticating Primary Users' Signals in Cognitive Radio Networks via Integrated Cryptographic and Wireless Link Signatures

  2010cited by this paper
• Improving Spam Blacklisting Through Dynamic Thresholding and Speculative Aggregation

  2010cited by this paper
• Botnet Judo: Fighting Spam with Itself

  2010cited by this paper
• Effective Anomaly Detection with Scarce Training Data

  2010cited by this paper
• On Challenges in Evaluating Malware Clustering

  2010cited by this paper
• Round-Efficient Broadcast Authentication Protocols for Fixed Topology Classes

  2010cited by this paper
• What Is the Impact of P2P Traffic on Anomaly Detection?

  2010cited by this paper
• Sidebuster: automated detection and quantification of side-channel leaks in web application development

  2010cited by this paper
• On the Incoherencies in Web Browser Access Control Policies

  2010cited by this paper
• Fast-Flux Bot Detection in Real Time

  2010cited by this paper
• “But the data is already public”: on the ethics of research in Facebook

  2010cited by this paper
• Recent Advances in Intrusion Detection, 13th International Symposium, RAID 2010, Ottawa, Ontario, Canada, September 15-17, 2010. Proceedings

  2010cited by this paper
• 31st IEEE Symposium on Security and Privacy, S&P 2010, 16-19 May 2010, Berleley/Oakland, California, USA

  2010cited by this paper
• Outside the Closed World: On Using Machine Learning for Network Intrusion Detection

  2010cited by this paper

• Comprehensive performance benchmarking and comparative analysis of active ransomware threats

  2026cites this paper
• Towards Automated and Robust Forensic Event Reconstruction

  2025cites this paper
• From IaC to IoC—Using Infrastructure as Code (IaC) to Generate Synthetic Datasets of Compromised (IoC) Linux Systems for Use in Digital Forensics

  2025cites this paper
• What We Talk About When We Talk About Logs: Understanding the Effects of Dataset Quality on Endpoint Threat Detection Research

  2025cites this paper
• NetSSM: Multi-Flow and State-Aware Network Trace Generation using State-Space Models

  2025cites this paper
• Preserving meaning of evidence from evolving systems

  2025cites this paper
• Optimising data set creation in the cybersecurity landscape with a special focus on digital forensics: Principles, characteristics, and use cases

  2025cites this paper
• Network Intrusion Datasets: A Survey, Limitations, and Recommendations

  2025cites this paper
• Feasibility of State Space Models for Network Traffic Generation

  2024cites this paper
• Improving Synthetic Network Attack Traffic Generation

  2024cites this paper
• Ransomware Detection Using Machine Learning: A Review, Research Limitations and Future Directions

  2024cites this paper
• Data for Digital Forensics: Why a Discussion on “How Realistic is Synthetic Data” is Dispensable

  2023influential citation
• Global Analysis with Aggregation-based Beaconing Detection across Large Campus Networks

  2023cites this paper
• NetDiffusion: Network Data Augmentation Through Protocol-Constrained Traffic Generation

  2023cites this paper
• Analyzing Cyber Security Research Practices through a Meta-Research Framework

  2023cites this paper
• Adversarial Autoencoder Data Synthesis for Enhancing Machine Learning-Based Phishing Detection Algorithms

  2023cites this paper
• ThunderSecure: deploying real-time intrusion detection for 100G research networks by leveraging stream-based features and one-class classification network

  2022cites this paper
• Practical Intrusion Detection of Emerging Threats

  2022cites this paper
• NapierOne: A modern mixed file data set alternative to Govdocs1

  2022influential citation
• ForTrace - A holistic forensic data set synthesis framework

  2022cites this paper
• Multi-labeling of complex, multi-behavioral malware samples

  2022cites this paper
• Revisiting the dataset gap problem - On availability, assessment and perspective of mobile forensic corpora

  2022cites this paper
• Cohort-based federated learning services for industrial collaboration on the edge

  2021cites this paper
• Improved Phishing Detection Algorithms using Adversarial Autoencoder Synthesized Data

  2020cites this paper
• Digital forensic tools: Recent advances and enhancing the status quo

  2020cites this paper
• A Novel Approach for Generating Synthetic Datasets for Digital Forensics

  2020cites this paper
• Advances in Digital Forensics XVI: 16th IFIP WG 11.9 International Conference, New Delhi, India, January 6–8, 2020, Revised Selected Papers

  2020cites this paper
• TraceGen: User activity emulation for digital forensic test image generation

  2020cites this paper
• A Study on Labeling Network Hostile Behavior with Intelligent Interactive Tools

  2019cites this paper
• Automatic Detection of Network Traffic Anomalies and Changes

  2019cites this paper
• On Generating Network Traffic Datasets with Synthetic Attacks for Intrusion Detection

  2019influential citation
• Real-time Pattern Detection in IP Flow Data using Apache Spark

  2019cites this paper
• Towards Provable Network Traffic Measurement and Analysis via Semi-Labeled Trace Datasets

  2018cites this paper
• The study of keyword search in open source search engines and digital forensics tools with respect to the needs of cyber crime investigations

  2017cites this paper
• Visual Exploration of Network Hostile Behavior

  2017cites this paper
• Availability of datasets for digital forensics - And what is missing

  2017influential citation
• Correlating network events and transferring labels in the presence of IP address anonymisation

  2016cites this paper
• A research process that ensures reproducible network security research

  2015cites this paper
• Towards reproducible cyber-security research through complex node automation

  2015cites this paper
• A Plea for Utilising Synthetic Data when Performing Machine Learning Based Cyber-Security Experiments

  2014influential citation
• AN ENHANCED OPTIMIZATION MODEL WITH ENSEMBLE AUTOENCODER FOR ZERO-DAY ATTACK DETECTION

  year unknowncites this paper
• Digital Commons @ New Haven Digital Commons @ New Haven

  year unknowncites this paper