Code and dataset for malicious cloud service traffic detection based on multi-feature fusion

DOI:10.4121/ae5d2dd8-20c7-46ec-a1da-d97a8122343f.v1
The DOI displayed above is for this specific version of this dataset, which is currently the latest. Newer versions may be published in the future. For a link that will always point to the latest version, please use
DOI: 10.4121/ae5d2dd8-20c7-46ec-a1da-d97a8122343f
Datacite citation style:
Chen, Zhouguo; Deng, Chen; Li, Xinze; Gao, Xiang; Hu, Hangyu (2025): Code and dataset for malicious cloud service traffic detection based on multi-feature fusion. Version 1. 4TU.ResearchData. dataset. https://doi.org/10.4121/ae5d2dd8-20c7-46ec-a1da-d97a8122343f.v1
Other citation styles (APA, Harvard, MLA, Vancouver, Chicago, IEEE) available at Datacite

Dataset

With the rapid growth of cloud computing, malicious attacks targeting cloud services have become more prevalent. We propose a method for detecting malicious cloud service traffic based on multi-feature fusion, addressing the issues of single feature extraction and weak generalization capabilities in traditional methods. By analyzing the attack patterns of malicious traffic, our model extracts features from both field attributes and statistical attributes of malicious requests. Furthermore, to enhance the generalization ability of the extracted features, a feature fusion algorithm based on an attention mechanism is employed for field feature fusion, and a feature selection algorithm based on the Gini coefficient and random forest is used for statistical feature selection. To balance the contribution of different types of features to the model during training, we propose a dual branch malicious request detection model, which processes and trains field feature vectors and statistical feature vectors through separate branches. After comparing currently available datasets for cloud service attack detection, this paper selects the HTTP dataset CSIC 2010 and a real-world cloud service log dataset for testing and validating the proposed method. Experimental results demonstrate that the proposed method exhibits strong competitiveness and achieves superior classification performance compared to other models.

History

  • 2025-03-04 first online, published, posted

Publisher

4TU.ResearchData

Format

script/.py text/.txt image/.png dataset/.csv

Organizations

School of Computer Science and Engineering, Southeast University;
University of Electronic Science and Technology of China, Chengdu, China;
The 30th Research Institute of China Electronics Technology Group Corporation, Chengdu, China

DATA

Files (18)