UC7 : Suspicious security events detection/en - Historique des versions

Juliette : Page créée avec « == Notebooks == Retrouvez tous les éléments du Use Case sur le GitLab du Campus Cyber : https://gitlab.com/campuscyber/gt-ia-et-cyber/-/tree/main/UC7%20Suspicious%20security%20events%20detection?ref_type=heads »

2025-01-02T13:49:48Z

Page créée avec « == Notebooks == Retrouvez tous les éléments du Use Case sur le GitLab du Campus Cyber : https://gitlab.com/campuscyber/gt-ia-et-cyber/-/tree/main/UC7%20Suspicious%20security%20events%20detection?ref_type=heads »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 110 :		Ligne 110 :
	* seaborn (0.11.2 or +)		* seaborn (0.11.2 or +)

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	== Notebooks ==		== Notebooks ==
	Retrouvez tous les éléments du Use Case sur le GitLab du Campus Cyber : https://gitlab.com/campuscyber/gt-ia-et-cyber/-/tree/main/UC7%20Suspicious%20security%20events%20detection?ref_type=heads		Retrouvez tous les éléments du Use Case sur le GitLab du Campus Cyber : https://gitlab.com/campuscyber/gt-ia-et-cyber/-/tree/main/UC7%20Suspicious%20security%20events%20detection?ref_type=heads
	~~</div>~~

	{{PageSubHeader Commun		{{PageSubHeader Commun
	\|WorkGroup=IA et cybersécurité		\|WorkGroup=IA et cybersécurité
	}}		}}

Juliette : Page créée avec « * Python (3.6 or +) * scikit-learn (1.0.2 or +) * seaborn (0.11.2 or +) »

2025-01-02T13:49:46Z

Page créée avec « * Python (3.6 or +) * scikit-learn (1.0.2 or +) * seaborn (0.11.2 or +) »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 106 :		Ligne 106 :
	=== Requirements===		=== Requirements===

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	* Python (3.6 or +)		* Python (3.6 or +)
	* scikit-learn (1.0.2 or +)		* scikit-learn (1.0.2 or +)
	* seaborn (0.11.2 or +)		* seaborn (0.11.2 or +)
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « === Requirements=== »

2025-01-02T13:49:44Z

Page créée avec « === Requirements=== »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 104 :		Ligne 104 :
	\|}		\|}

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	=== Requirements===		=== Requirements===
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « === Risks & Compliance=== {| class="wikitable" |+ !Type !Applicable !Comment(s) (if applicable) |- |Bias |No |Has a complete bias study been carried out ? Comments if applicable |- |Ethics committee |No |Does the project needs to be screened by an ethics committee and if so has this been achieved ? Comments if applicable |- |RSSI |No |Does the project needs to inform the RSSI about its outcome and activity, and if so has this been achieved ? Commen... »

2025-01-02T13:49:42Z

Page créée avec « === Risks & Compliance=== {| class="wikitable" |+ !Type !Applicable !Comment(s) (if applicable) |- |Bias |No |Has a complete bias study been carried out ? Comments if applicable |- |Ethics committee |No |Does the project needs to be screened by an ethics committee and if so has this been achieved ? Comments if applicable |- |RSSI |No |Does the project needs to inform the RSSI about its outcome and activity, and if so has this been achieved ? Commen... »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 72 :		Ligne 72 :
	\|}		\|}

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	=== Risks & Compliance===		=== Risks & Compliance===
	{\| class="wikitable"		{\| class="wikitable"
Ligne 104 :		Ligne 103 :
	\|Does the project needs to inform the CNIL ? Comments if applicable		\|Does the project needs to inform the CNIL ? Comments if applicable
	\|}		\|}
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « === Notebooks=== {| class="wikitable" |+ !Notebook !Data Science step ! |- |UseCase7_DataPrep.ipynb |''Data preparation (executed outside the platform)'' | |- |UseCase7_Detection.ipynb |''Security events detection (including simple feature engineering)'' | |} »

2025-01-02T13:49:39Z

Page créée avec « === Notebooks=== {| class="wikitable" |+ !Notebook !Data Science step ! |- |UseCase7_DataPrep.ipynb |''Data preparation (executed outside the platform)'' | |- |UseCase7_Detection.ipynb |''Security events detection (including simple feature engineering)'' | |} »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 56 :		Ligne 56 :
	Not applicable		Not applicable

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	=== Notebooks===		=== Notebooks===
	{\| class="wikitable"		{\| class="wikitable"
Ligne 72 :		Ligne 71 :
	\|		\|
	\|}		\|}
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « === Specific feature engineering=== Not applicable »

2025-01-02T13:49:36Z

Page créée avec « === Specific feature engineering=== Not applicable »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 53 :		Ligne 53 :
	\|}		\|}

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~		=== Specific feature engineering===
	=== Specific feature engineering===
	Not applicable		Not applicable
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « Main columns used are: {| class="wikitable" |+ !Name !Description ! |- |SourceIP |Source IP address | |- |datetime |Local date&time of the reception of the request by the web server | |- |method |HTTP method of the request (i.e GET, POST..) | |} »

2025-01-02T13:49:34Z

Page créée avec « Main columns used are: {| class="wikitable" |+ !Name !Description ! |- |SourceIP |Source IP address | |- |datetime |Local date&time of the reception of the request by the web server | |- |method |HTTP method of the request (i.e GET, POST..) | |} »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 33 :		Ligne 33 :
	* Large size dataset: logs_sub_10.csv (1 030 453 lines)		* Large size dataset: logs_sub_10.csv (1 030 453 lines)

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	Main columns used are:		Main columns used are:
	{\| class="wikitable"		{\| class="wikitable"
Ligne 53 :		Ligne 52 :
	\|		\|
	\|}		\|}
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « * Small size dataset: logs_sub_2.csv (211 335 lines) * Medium size dataset: logs_sub_5.csv (495 997 lines) * Large size dataset: logs_sub_10.csv (1 030 453 lines) »

2025-01-02T13:49:31Z

Page créée avec « * Small size dataset: logs_sub_2.csv (211 335 lines) * Medium size dataset: logs_sub_5.csv (495 997 lines) * Large size dataset: logs_sub_10.csv (1 030 453 lines) »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 29 :		Ligne 29 :
	The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform:		The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform:

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	* Small size dataset: logs_sub_2.csv (211 335 lines)		* Small size dataset: logs_sub_2.csv (211 335 lines)
	* Medium size dataset: logs_sub_5.csv (495 997 lines)		* Medium size dataset: logs_sub_5.csv (495 997 lines)
	* Large size dataset: logs_sub_10.csv (1 030 453 lines)		* Large size dataset: logs_sub_10.csv (1 030 453 lines)
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform: »

2025-01-02T13:49:29Z

Page créée avec « The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform: »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 27 :		Ligne 27 :
	This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5).		This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5).

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform:		The dataset has been processed to convert it from a raw log file format into tabular elements corresponding to client requests to the web site. Then, to reduce its size, it has been sampled to keep only requests coming from a sub-part of the client IP adresses. Finally, 3 csv files have been ingested into the platform:
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

Juliette : Page créée avec « == Data== === Online Shopping Store=== This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5). »

2025-01-02T13:49:18Z

Page créée avec « == Data== === Online Shopping Store=== This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5). »

← Version précédente		Version du 2 janvier 2025 à 15:49
Ligne 23 :		Ligne 23 :
	* Keywords: Unsupervised detection, clustering, outlier detection, Isolation Forest, interquartile range (IQR)		* Keywords: Unsupervised detection, clustering, outlier detection, Isolation Forest, interquartile range (IQR)

	~~<div lang="fr" dir="ltr" class="mw-content-ltr">~~
	== Data==		== Data==
	=== Online Shopping Store===		=== Online Shopping Store===
	This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5).		This use case relies on the dataset ["Online Shopping Store - Web Server Logs"](https://doi.org/10.7910/DVN/3QBYB5).
	~~</div>~~

	<div lang="fr" dir="ltr" class="mw-content-ltr">		<div lang="fr" dir="ltr" class="mw-content-ltr">

UC7 : Suspicious security events detection/en - Historique des versions

Juliette : Page créée avec « == Notebooks == Retrouvez tous les éléments du Use Case sur le GitLab du Campus Cyber : https://gitlab.com/campuscyber/gt-ia-et-cyber/-/tree/main/UC7%20Suspicious%20security%20events%20detection?ref_type=heads »

Juliette : Page créée avec « * Python (3.6 or +) * scikit-learn (1.0.2 or +) * seaborn (0.11.2 or +) »

Juliette : Page créée avec « === Requirements=== »

Juliette : Page créée avec « === Notebooks=== {| class="wikitable" |+ !Notebook !Data Science step ! |- |UseCase7_DataPrep.ipynb |''Data preparation (executed outside the platform)'' | |- |UseCase7_Detection.ipynb |''Security events detection (including simple feature engineering)'' | |} »

Juliette : Page créée avec « === Specific feature engineering=== Not applicable »

Juliette : Page créée avec « Main columns used are: {| class="wikitable" |+ !Name !Description ! |- |SourceIP |Source IP address | |- |datetime |Local date&time of the reception of the request by the web server | |- |method |HTTP method of the request (i.e GET, POST..) | |} »

Juliette : Page créée avec « * Small size dataset: logs_sub_2.csv (211 335 lines) * Medium size dataset: logs_sub_5.csv (495 997 lines) * Large size dataset: logs_sub_10.csv (1 030 453 lines) »