esp8266-ping-normal-and-flood
ESP-01s code for generating ICMP/Ping normal and malicious traffic, and ICMP/Ping Detection using machine learning.
Science Score: 67.0%
This score indicates how likely this project is to be science-related based on various indicators:
-
✓CITATION.cff file
Found CITATION.cff file -
✓codemeta.json file
Found codemeta.json file -
✓.zenodo.json file
Found .zenodo.json file -
✓DOI references
Found 6 DOI reference(s) in README -
✓Academic publication links
Links to: zenodo.org -
○Academic email domains
-
○Institutional organization owner
-
○JOSS paper metadata
-
○Scientific vocabulary similarity
Low similarity (9.1%) to scientific vocabulary
Repository
ESP-01s code for generating ICMP/Ping normal and malicious traffic, and ICMP/Ping Detection using machine learning.
Basic Info
- Host: GitHub
- Owner: AlmorabeaO
- License: mit
- Language: Jupyter Notebook
- Default Branch: main
- Size: 38.1 KB
Statistics
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
- Releases: 2
Metadata Files
README.md
esp8266-ping
ESP-01s code for generating ICMP/Ping normal and malicious traffic, along with detection of said traffic using Machine Learning.
Traffic type
Both scenarios have a packet header like Microsoft Windows OS.
Normal : Normal ping packet traffic, meaning 1 second delay for each request sent.
Malicious: continuous ping flood traffic with spoofed IP, no delay set.
The code found in folders "1-ESP01sScenariosC++CodeSpoofedIP" and "2-FlaskServerCode" has generated a dataset that can be found here: 
Folder "3-FeatureExtractionShell_Script" is where shell script uses the Zeek tool and other Linux utilities to extract flow information from the pcap files (pcap found in the dataset).
Folder "4-MachineLearningCode" is where the Machine Learning process happens, the code is in Jupyter Notebook, python.
The publication reference for this work is here.
If you use this code, please cite it as below.
O. M. Almorabea, T. J. S. Khanzada, M. A. Aslam, F. A. Hendi and A. M. Almorabea, "IoT Network-Based Intrusion Detection Framework: A Solution to Process Ping Floods Originating From Embedded Devices," in IEEE Access, vol. 11, pp. 119118-119145, 2023, doi: 10.1109/ACCESS.2023.3327061.
Branch
The flood branch has a code where the ESP just bombards the target IP address.
The master branch uses a server for logging the traffic, it created the dataset mentioned above, which is dedicated for an Intrusion Detection framework research "pending publication"
Credit
Owner
- Login: AlmorabeaO
- Kind: user
- Repositories: 1
- Profile: https://github.com/AlmorabeaO
Citation (CITATION.cff)
cff-version: 1.2.0 message: "If you use this software, please cite it as below." authors: - family-names: "Almorabea" given-names: "Omar" orcid: "https://orcid.org/0000-0003-2965-6778" - family-names: "Khanzada" given-names: "Tariq" orcid: "https://orcid.org/0000-0003-1617-4403" - family-names: "Aslam" given-names: "Muhammad" orcid: "https://orcid.org/0000-0001-7080-0327" - family-names: "Hendi" given-names: "Fatheah" orcid: "https://orcid.org/0000-0002-2657-7997" - family-names: "Almorabea" given-names: "Ahmad" orcid: "https://orcid.org/0000-0002-5240-0263" title: "Code for Emulation of ICMP/Ping Normal and Malicious Traffic by using ESP-01s" version: 0.2.0 doi: 10.5281/zenodo.8112222 date-released: 2023-07-04 url: "https://doi.org/10.5281/zenodo.8112222"