Geração de datasets com ataques criptografados para IDS.

Abstract

Due to the growing need of devices that communicate amongst themselves for exchange of information, computer networks are being widely used. However, there are users who misuse these networks with the purpose of exploiting them, illegally using available resources or trying to get unauthorized information. The encryption that was seen as a protection has become a technology that facilitates the entry of attacks on the network, as attackers are using this feature to mask their attacks. Most security devices, such as the IDS (Intrusion Detection System), are unable to detect this type of intrusion, unless this traffic has previously been deciphered. To validate an IDS, it is necessary to use a database, also known as IDS datasets. These are data sets generated by collecting packages on the network. This paper proposes the creation of datasets containing encrypted packages, applying encryption algorithms on existing datasets. These datasets are important for testing intrusion detection methods in order to identify malicious activity in encrypted traffic.