{'fraction_non_alphanumeric': 0.011335012594458438, 'fraction_numerical': 0.0, 'mean_word_length': 5.516393442622951, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Securing network traffic and intrusion detection data

Networking devices and intrusion detection systems are capable of generating large volumes of audit information. This information should be considered sensitive, as it can be used by organizations for forensic investigations when a compromise of the network occurs. Privacy concerns must also be considered, as there are many legal and ethical issues with maintaining these types of data sets. Until now, little attention has been paid to protecting these data sets from attackers, both internal and external. This work provides solutions to this problem by describing the data integrity and user authentication mechanisms needed to properly secure network traffic and intrusion detection data sets within an intrusion detection framework.