The Botnet data set was developed by combining the data traces of ISOT HTTP botnet data set, ISCX 2012 IDS data set, and Botnet traffic generated by the malware capture facility project . To merge the data traces into one unified data set, overlay methodology was implemented. Here, the malicious traffic is captured using honeypots or by infecting the systems with the given bot binary in the controlled environment. Considering the presence of a wide
range of IP addresses, botnet IP addresses were mapped to host IP addresses outside the current network using BitTwist packet generator .
| |
| Rate this Enabler as a Knowledge source |
|
|
| |