{"id":"https://openalex.org/W2008224380","doi":"https://doi.org/10.1145/1978672.1978676","title":"Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation","display_name":"Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation","publication_year":2011,"publication_date":"2011-04-10","ids":{"openalex":"https://openalex.org/W2008224380","doi":"https://doi.org/10.1145/1978672.1978676","mag":"2008224380"},"language":"en","primary_location":{"id":"doi:10.1145/1978672.1978676","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1978672.1978676","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security","raw_type":"proceedings-article"},"type":"dataset","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111922634","display_name":"Jungsuk Song","orcid":null},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jungsuk Song","raw_affiliation_strings":["National Institute of Information and Communications Technology (NICT)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology (NICT)","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103015266","display_name":"Hiroki Takakura","orcid":"https://orcid.org/0000-0003-0238-4506"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hiroki Takakura","raw_affiliation_strings":["Naogya University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Naogya University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108796861","display_name":"Yasuo Okabe","orcid":null},"institutions":[{"id":"https://openalex.org/I22299242","display_name":"Kyoto University","ror":"https://ror.org/02kpeqv85","country_code":"JP","type":"education","lineage":["https://openalex.org/I22299242"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yasuo Okabe","raw_affiliation_strings":["Kyoto University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyoto University","institution_ids":["https://openalex.org/I22299242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013302768","display_name":"Masashi Eto","orcid":null},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masashi Eto","raw_affiliation_strings":["National Institute of Information and Communications Technology (NICT)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology (NICT)","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071687365","display_name":"Daisuke Inoue","orcid":"https://orcid.org/0000-0002-4373-0834"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daisuke Inoue","raw_affiliation_strings":["National Institute of Information and Communications Technology (NICT)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology (NICT)","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016277128","display_name":"Koji Nakao","orcid":"https://orcid.org/0009-0004-5167-6163"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Koji Nakao","raw_affiliation_strings":["National Institute of Information and Communications Technology (NICT)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology (NICT)","institution_ids":["https://openalex.org/I90023481"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":324,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"29","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.956210196018219},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8567485809326172},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7383722066879272},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.677787721157074},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5909855365753174},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5858318209648132},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5741032958030701},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4992187023162842},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.323442280292511},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2664325535297394}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.956210196018219},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8567485809326172},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7383722066879272},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.677787721157074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5909855365753174},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5858318209648132},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5741032958030701},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4992187023162842},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.323442280292511},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2664325535297394}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1978672.1978676","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1978672.1978676","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W1540819628","https://openalex.org/W2076126990","https://openalex.org/W2110324540"],"related_works":["https://openalex.org/W4230824443","https://openalex.org/W2292210693","https://openalex.org/W2312996858","https://openalex.org/W2392120181","https://openalex.org/W2307276533","https://openalex.org/W2390124310","https://openalex.org/W2361650029","https://openalex.org/W2158220440","https://openalex.org/W1852121458","https://openalex.org/W2352199719"],"abstract_inverted_index":{"With":[0],"the":[1,64,92,107,129,154,215,222],"rapid":[2],"evolution":[3],"and":[4,20,23,58,80,106,188,201,221],"proliferation":[5],"of":[6,28,131,157,172,198,217],"botnets,":[7],"large-scale":[8],"cyber":[9,25,219],"attacks":[10,220],"such":[11,34],"as":[12,35],"DDoS,":[13],"spam":[14],"emails":[15],"are":[16,167,209],"also":[17],"becoming":[18],"more":[19,21,123,185],"dangerous":[22],"serious":[24],"threats.":[26],"Because":[27],"this,":[29],"network":[30,104,122],"based":[31,37,76],"security":[32,207],"technologies":[33],"Network":[36],"Intrusion":[38,42],"Detection":[39],"Systems":[40,44],"(NIDSs),":[41],"Prevention":[43],"(IPSs),":[45],"firewalls":[46],"have":[47],"received":[48],"remarkable":[49],"attention":[50],"to":[51,180,211],"defend":[52],"our":[53,132,203],"crucial":[54],"computer":[55],"systems,":[56],"networks":[57],"sensitive":[59],"information":[60],"from":[61,169],"attackers":[62],"on":[63,77,153],"Internet.":[65],"In":[66,140],"particular,":[67],"there":[68,85,134],"has":[69],"been":[70],"much":[71],"effort":[72],"towards":[73],"high-performance":[74],"NIDSs":[75],"data":[78,160,200],"mining":[79],"machine":[81],"learning":[82],"techniques.":[83],"However,":[84],"is":[86,112,135],"a":[87,120,145],"fatal":[88],"problem":[89],"in":[90,183],"that":[91,206],"existing":[93],"evaluation":[94,138,147,190],"dataset,":[95,100,148],"called":[96,149],"KDD":[97],"Cup":[98],"99'":[99],"cannot":[101],"reflect":[102],"current":[103],"situations":[105],"latest":[108,218],"attack":[109],"trends.":[110],"This":[111],"because":[113],"it":[114],"was":[115],"generated":[116],"by":[117],"simulation":[118],"over":[119],"virtual":[121],"than":[124],"10":[125],"years":[126,156],"ago.":[127],"To":[128],"best":[130],"knowledge,":[133],"no":[136],"alternative":[137],"dataset.":[139],"this":[141],"paper,":[142],"we":[143,193],"present":[144],"new":[146],"Kyoto":[150,174],"2006+,":[151],"built":[152],"3":[155],"real":[158],"traffic":[159],"(Nov.":[161],"2006":[162],"~":[163],"Aug.":[164],"2009)":[165],"which":[166],"obtained":[168],"diverse":[170],"types":[171],"honeypots.":[173],"2006+":[175],"dataset":[176],"will":[177],"greatly":[178],"contribute":[179],"IDS":[181],"researchers":[182,208],"obtaining":[184],"practical,":[186],"useful":[187],"accurate":[189],"results.":[191],"Furthermore,":[192],"provide":[194],"detailed":[195],"analysis":[196],"results":[197],"honeypot":[199],"share":[202],"experiences":[204],"so":[205],"able":[210],"get":[212],"insights":[213],"into":[214],"trends":[216],"Internet":[223],"situations.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":30},{"year":2023,"cited_by_count":34},{"year":2022,"cited_by_count":40},{"year":2021,"cited_by_count":33},{"year":2020,"cited_by_count":31},{"year":2019,"cited_by_count":29},{"year":2018,"cited_by_count":29},{"year":2017,"cited_by_count":23},{"year":2016,"cited_by_count":12},{"year":2015,"cited_by_count":12},{"year":2014,"cited_by_count":11},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":4}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}