Network Intrusion Detection with Threat Agent Profiling

Table 1

Sources of data.

Name of sensor	Count	Description
Dionaea	74731	Honeypot
Kippo	19132	Honeypot
Nemea	2847552	Set of detectors
LaBrea	66561368	Honeypot
Fail2Ban	4606	Detector
HostStats	1252748	NetFlow Analyzer
Flowmon ADS	446	Monitoring tool
IntelMQ	1687132	Security feeds collector
Sentinel	1650	Endpoint security
FTAS	1836	NetFlow Analyzer
Other	15484	For example, Warden filter sender