Computers & Security

The verification tool and input files of the case study and performance evaluation.

The dataset is composed of web requests collected during 12 days of July 2020 by a web server (Wordpress) installed on a virtual machine and exposed to Internet. On this server, Modsecurity version 2.9.2 for Apache, with Core Rule Set (CRS) version 3.3.0 was installed in ”Detection only” mode, so that all requests (legitimate and malicious) were recorded in the log generated by ModSecurity, but without being blocked. Daily, the logs generated by ModSecurity were collected and the virtual machine was restored to a clean state. Once the web server exposure period was over, the collected logs were manually and semi-automatically processed to review the web request tagging performed by Modsecurity, correcting where necessary the normal/attack assignment to the corresponding web request and ensuring an appropriate CAPEC classification assignment. The final result is a multi-label dataset aimed especially at web attack detection and composed of 907,814 requests of which 525,195 are normal requests and 382,619 are anomalous requests, where each record has 24 different features and a set of 13 labels.

This repository contains supplementary materials for the following journal paper: Valdemar Švábenský, Pavel Čeleda, Jan Vykopal, Silvia Brišáková. Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges. In Elsevier Computers & Security. 2020. https://doi.org/10.1016/j.cose.2020.102154 Preprint available at: https://arxiv.org/abs/2101.01421 How to cite If you use or build upon the materials, please use the BibTeX entry below to cite the original paper (not only this web link). @article{Svabensky2020cybersecurity,     author = {\v{S}v\'{a}bensk\'{y}, Valdemar and \v{C}eleda, Pavel and Vykopal, Jan and Bri\v{s}\'{a}kov\'{a}, Silvia},     title = {{Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges}},     journal = {Computers \& Security},     publisher = {Elsevier}, volume = {102},     year = {2020},     issn = {0167-4048},     url = {https://www.sciencedirect.com/science/article/pii/S0167404820304272},     doi = {10.1016/j.cose.2020.102154}, } Attached content See the README.md file inside the attached ZIP file for more details.

https://www.sciencedirect.com/science/article/pii/S0950584919301624