To request access this dataset you will need to login with an IMPACT account. Accounts are free. If you don't have one please register.

Summary

DS-1143
GT Malware Netflow Daily Feed 2018
Dataset
Georgia Tech
Georgia Tech
09/01/2018
Data collection is ongoing
34 (lowest rank is 55)

Category & Restrictions

Traffic Flow Data
malware, traffic flow data
Quasi-Restricted
true

Description


GT Malware Netflow Daily Feed 2018

This dataset contains a daily feed of network flow data produced by the Georgia Tech Information Security Center's malware analysis system. Metadata included with the feed associates each body of netflow with a specific suspect Windows executable, which is run in a sterile, isolated environment, with controlled access to the Internet, for a short period of time. Each sample's full network activity is recorded, distilled using nfcapd, and the resulting netflow information made available.

This feed is structured as a set of archives that each correspond to a single day of sample processing-based netflow data. Each archive decompresses to a top-level folder containing files that are named according to the MD5 of the sample that generated them.
This dataset is the subject of ongoing measurement and data collection. As such the data is continuously growing. Researchers who are granted access will be able to download updates for a period of one year after their request.

Additional Details

N/A
Size is growing as more data is collected
true
cybercrime, metadata, gt malware netflow daily feed 2018, malware, computer network analysis, 1143, technical communication, cisco protocols, technological universities in the united states, business intelligence, universities and colleges in atlanta, engineering universities and colleges in georgia, atlantic coast conference schools, malware analysis, netflow, security and maintenance, georgia tech, network flow, georgia institute of technology, universities and colleges in georgia, exploit, microsoft windows security technology, university system of georgia