O24Sec(Object-Oriented Clustering for Security Monitoring)
v2.0 Preprocessing(Object Separation) and Clustering
-
in
"capstone-2021-18/O24Sec/" -
Separating events into 6 categories(4 datasets , 2 exceptions) based on source IP: add category(int) column data to event
- inner_server -> outer_client
- inner_client -> outer_server
- outer_server -> inner_client
- outer_client -> inner_server
- can't separate events (
exception)- packet protocol is ICMP (
exception)
- Encryption determination:
With 1 ~ 4 categories dataset, dividing events into two directory(saved_folder):
"\encrypt": Folder with encrypted events"\plain": Folder with unencrypted events
- Events Clustering in 4-kind Objects:
Clustering with Jaccard Similarity
- Else:
/docs
/image
updating README.md
updating index.md (webpage)