bibs2091 / Anomaly-detection-system

Machine learning based Intrusion detection system (IDS)
47 stars 16 forks source link

unable to get attack alerts #6

Closed abdulghafor closed 3 years ago

abdulghafor commented 3 years ago

Hi! I have worked as per your instructions. I have succeeded to run the complete code. Unfortunately, I am unable to get alerts for attacks. It creates a CSV file and captures traffic. It also scans but I can not get alerts. Please guide me. Thank you!! I am providing evidence below: 1 cic 2 gui 3 4 5

bibs2091 commented 3 years ago

Hey, I noticed that you are using the CicFlowMeter from the original repository, please use the CicFlowMeter in this repository because we modified it to match our use case (it doesn't save any CSV files, nor use the interface you showed in the first screenshots).

Try this and tell me if any other problem happened.

abdulghafor commented 3 years ago

Thank you for your Help! I run program in repository .i use hping3 (DDoS )as attacker model as shown below .But i cannot get alert. updated packet gui

bibs2091 commented 3 years ago

Can you try "GoldenEye" tool! it worked in our case, wait few minutes until the alert pop up. The alerts will be shown in the web interface and not the desktop one (we will remove the desktop soon)

abdulghafor commented 3 years ago

Thanks for help! can you tell me. which tool use for bot/botnet ,bruteforce and zeroday attack as attacker model .

bibs2091 commented 3 years ago

for the attacks for the moment we are detecting botnet, bruteforce, dos and ddoss attacks.

itsomkathe commented 1 year ago

@bibs2091 any tool for DDoS for windows users? Does goldeneye work?

souravs17031999 commented 1 year ago

@bibs2091 are there plans on updating models for more attacks ? Any guide from where I can enchance the model would be really helpful.

souravs17031999 commented 1 year ago

@abdulghafor Were you able to solve the issue ? I am facing the same.