daisy package

Subpackages

• Communication
  • Message Stream
    • EndpointServer
      • EndpointServer.close_connections()
      • EndpointServer.get_connections()
      • EndpointServer.get_new_connections()
      • EndpointServer.poll_connections()
      • EndpointServer.start()
      • EndpointServer.stop()
    • EndpointSocket
      • EndpointSocket.close()
      • EndpointSocket.open()
      • EndpointSocket.poll()
      • EndpointSocket.recv()
      • EndpointSocket.send()
    • StreamEndpoint
      • StreamEndpoint.create_quick_sender_ep()
      • StreamEndpoint.poll()
      • StreamEndpoint.receive()
      • StreamEndpoint.receive_latest_ep_objs()
      • StreamEndpoint.select_eps()
      • StreamEndpoint.send()
      • StreamEndpoint.start()
      • StreamEndpoint.stop()
  • Tests
    • daisy.communication.tests package
      • daisy.communication.tests.simple_acceptor module
      • daisy.communication.tests.simple_initiator module
      • daisy.communication.tests.simple_server module
      • Module contents
• Datasources
  • Data Handler
    • DataHandler
      • DataHandler.close()
      • DataHandler.open()
  • Data Processor
    • DataProcessor
      • DataProcessor.add_func()
      • DataProcessor.dict_to_array()
      • DataProcessor.dict_to_json()
      • DataProcessor.flatten_dict()
      • DataProcessor.keep_dict_feature()
      • DataProcessor.process()
      • DataProcessor.remove_dict_features()
      • DataProcessor.select_dict_features()
    • flatten_dict()
    • keep_feature()
    • remove_feature()
    • select_feature()
  • Data Relay
    • CSVFileRelay
      • CSVFileRelay.start()
      • CSVFileRelay.stop()
    • DataHandlerRelay
      • DataHandlerRelay.start()
      • DataHandlerRelay.stop()
  • Data Source
    • CSVFileDataSource
      • CSVFileDataSource.close()
      • CSVFileDataSource.open()
    • DataSource
      • DataSource.close()
      • DataSource.open()
    • SimpleDataSource
      • SimpleDataSource.close()
      • SimpleDataSource.open()
    • SimpleRemoteDataSource
      • SimpleRemoteDataSource.close()
      • SimpleRemoteDataSource.open()
  • Events
    • Event
      • Event.end_time
      • Event.evaluate()
      • Event.label
      • Event.start_time
    • EventHandler
      • EventHandler.add_event()
      • EventHandler.process()
    • EventParser
      • EventParser.parse()
  • Network Traffic
    • LivePysharkDataSource
      • LivePysharkDataSource.close()
      • LivePysharkDataSource.open()
    • PcapDataSource
      • PcapDataSource.close()
      • PcapDataSource.open()
    • PysharkProcessor
      • PysharkProcessor.create_simple_processor()
      • PysharkProcessor.packet_to_dict()
    • create_pyshark_processor()
    • demo_202303_label_data_point()
    • dict_to_json()
    • dict_to_numpy_array()
    • packet_to_dict()
    • pcap_nn_aggregator()
• Evaluation
  • ConfMatrSlidingWindowEvaluation
    • ConfMatrSlidingWindowEvaluation.result()
  • SlidingWindowEvaluation
    • SlidingWindowEvaluation.merge_state()
    • SlidingWindowEvaluation.pred_labels
    • SlidingWindowEvaluation.reset_state()
    • SlidingWindowEvaluation.result()
    • SlidingWindowEvaluation.true_labels
    • SlidingWindowEvaluation.update_state()
  • TFMetricSlidingWindowEvaluation
    • TFMetricSlidingWindowEvaluation.result()
• Federated IDS Components
  • Aggregator Module
  • Node Module
• Federated Learning
  • Aggregator
    • Aggregator
      • Aggregator.aggregate()
    • CumAggregator
      • CumAggregator.aggregate()
    • EMAggregator
      • EMAggregator.aggregate()
    • FedAvgAggregator
      • FedAvgAggregator.aggregate()
    • ModelAggregator
      • ModelAggregator.aggregate()
    • SMAggregator
      • SMAggregator.aggregate()
  • Federated Models
    • FederatedIFTM
      • FederatedIFTM.fit()
      • FederatedIFTM.get_parameters()
      • FederatedIFTM.predict()
      • FederatedIFTM.set_parameters()
    • FederatedModel
      • FederatedModel.fit()
      • FederatedModel.get_parameters()
      • FederatedModel.predict()
      • FederatedModel.set_parameters()
    • TFFederatedModel
      • TFFederatedModel.fit()
      • TFFederatedModel.get_fae()
      • TFFederatedModel.get_parameters()
      • TFFederatedModel.predict()
      • TFFederatedModel.set_parameters()
  • Threshold Models
    • AvgTM
      • AvgTM.get_parameters()
      • AvgTM.set_parameters()
      • AvgTM.update_mean()
      • AvgTM.update_threshold()
    • CumAvgTM
      • CumAvgTM.get_parameters()
      • CumAvgTM.set_parameters()
      • CumAvgTM.update_mean()
    • EMAvgTM
      • EMAvgTM.update_mean()
    • FederatedTM
      • FederatedTM.fit()
      • FederatedTM.get_parameters()
      • FederatedTM.predict()
      • FederatedTM.set_parameters()
      • FederatedTM.update_threshold()
    • MadTM
      • MadTM.fit()
      • MadTM.get_parameters()
      • MadTM.predict()
      • MadTM.set_parameters()
      • MadTM.update_threshold()
    • SMAvgTM
      • SMAvgTM.get_parameters()
      • SMAvgTM.set_parameters()
      • SMAvgTM.update_mean()
• Scripts
  • Data Collection
    • Pyshark data collector
      • pyshark_data_collector()
  • Demo Components
    • Demo Client
  • Demo Servers
    • Dashboard
    • Evaluation Aggregation Server
    • Model Aggregation Server
    • Prediction Aggregation Server

Module contents

DAISY aims to be an end-to-end framework to design, develop, and execute distributed intrusion detection systems (IDS) of varying topologies, in an edge-optimized fashion. All of which is done in python and done generically.

Basically: You provide the model along some data sources, plus any other customizations you want done following the defined interfaces, and you are set!

See the README.md for more information