Index

A

anderson_darling_dist_test() (CovertMark.analytics.entropy.EntropyAnalyser method)

B

BGC (CovertMark.constants.colours attribute) BLOCK_SIZE (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) BLOCK_SIZES (CovertMark.strategy.entropy_dist.EntropyStrategy attribute)

BOLD (CovertMark.constants.colours attribute) build_subnet() (in module CovertMark.data.utils) byte_entropy() (CovertMark.analytics.entropy.EntropyAnalyser static method)

C

check_file_exists() (in module CovertMark.data.utils) check_write_permission() (in module CovertMark.utils) Classifier (class in CovertMark.analytics.learning) clean_up() (CovertMark.data.parser.PCAPParser method) clean_up_mongo() (CovertMark.strategy.strategy.DetectionStrategy method) colours (class in CovertMark.constants) CommandHandler (class in CovertMark.handler) Commands (class in CovertMark.handler) config_specific_penalisation() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method) count() (CovertMark.data.retrieve.Retriever method) count_packets() (CovertMark.data.mongo.MongoDBManager method) CovertMark.analytics module CovertMark.analytics.constants module CovertMark.analytics.entropy module CovertMark.analytics.learning module CovertMark.analytics.traffic module CovertMark.constants module CovertMark.data module CovertMark.data.constants module CovertMark.data.mongo module

CovertMark.data.parser module CovertMark.data.plot module CovertMark.data.retrieve module CovertMark.data.utils module CovertMark.handler module CovertMark.strategy module CovertMark.strategy.constants module CovertMark.strategy.entropy_dist module CovertMark.strategy.entropy_est module CovertMark.strategy.length_clustering module CovertMark.strategy.sgd module CovertMark.strategy.strategy module CovertMark.utils module CRITERIA (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) CRITERIA_DESCRIPTIONS (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) cs (CovertMark.handler.Commands attribute) csv() (CovertMark.handler.CommandHandler method) current() (CovertMark.data.retrieve.Retriever method) (CovertMark.handler.CommandHandler method)

D

debug_print() (CovertMark.strategy.strategy.DetectionStrategy method) delete() (CovertMark.handler.CommandHandler method) delete_collection() (CovertMark.data.mongo.MongoDBManager method) delete_packets() (CovertMark.data.mongo.MongoDBManager method) delresults() (CovertMark.handler.CommandHandler method) DESCRIPTION (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) (CovertMark.strategy.sgd.SGDStrategy attribute) (CovertMark.strategy.strategy.DetectionStrategy attribute)

destroy_traces() (CovertMark.strategy.strategy.DetectionStrategy method) DetectionStrategy (class in CovertMark.strategy.strategy) dispatch() (CovertMark.handler.CommandHandler method) distinct() (CovertMark.data.retrieve.Retriever method) distinct_packets() (CovertMark.data.mongo.MongoDBManager method) DYNAMIC_ADJUSTMENT_STOPPING_CRITERIA (CovertMark.strategy.sgd.SGDStrategy attribute) DYNAMIC_THRESHOLD_PERCENTILES (CovertMark.strategy.sgd.SGDStrategy attribute)

E

ENDC (CovertMark.constants.colours attribute) entropy_estimation() (CovertMark.analytics.entropy.EntropyAnalyser method) EntropyAnalyser (class in CovertMark.analytics.entropy) EntropyEstimationStrategy (class in CovertMark.strategy.entropy_est)

EntropyStrategy (class in CovertMark.strategy.entropy_dist) execute() (CovertMark.handler.CommandHandler method) execute_procedure() (in module CovertMark.utils) exit() (CovertMark.handler.CommandHandler method)

F

FALSE_POSITIVE_SCORE_WEIGHT (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute)

FEATURE_SET (CovertMark.strategy.sgd.SGDStrategy attribute) find_packets() (CovertMark.data.mongo.MongoDBManager method) format_pcap_filters() (in module CovertMark.utils)

G

generate_name() (CovertMark.data.mongo.MongoDBManager static method) get_full_path() (in module CovertMark.data.utils) get_input_filters() (CovertMark.data.retrieve.Retriever method) get_ip_filter() (CovertMark.data.parser.PCAPParser method)

get_strategy_runs() (in module CovertMark.utils) get_window_stats() (in module CovertMark.analytics.traffic) GRAY (CovertMark.constants.colours attribute) GREEN (CovertMark.constants.colours attribute) group_packets_by_ip_fixed_size() (in module CovertMark.analytics.traffic)

H

help() (CovertMark.handler.CommandHandler method)

hs (CovertMark.handler.Commands attribute)

I

import_procedure() (in module CovertMark.utils) in_negative_filter() (CovertMark.strategy.strategy.DetectionStrategy method) in_positive_filter() (CovertMark.strategy.strategy.DetectionStrategy method) insert_packets() (CovertMark.data.mongo.MongoDBManager method)

interpret_config() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method)

K

kolmogorov_smirnov_dist_test() (CovertMark.analytics.entropy.EntropyAnalyser method)

kolmogorov_smirnov_uniform_test() (CovertMark.analytics.entropy.EntropyAnalyser method)

L

LengthClusteringStrategy (class in CovertMark.strategy.length_clustering) list() (CovertMark.data.retrieve.Retriever method) list_collections() (CovertMark.data.mongo.MongoDBManager method) list_traces() (in module CovertMark.utils) load() (CovertMark.handler.CommandHandler method) (CovertMark.strategy.strategy.DetectionStrategy method) load_and_insert_existing() (CovertMark.data.parser.PCAPParser method)

load_and_insert_new() (CovertMark.data.parser.PCAPParser method) load_packet_info() (CovertMark.data.parser.PCAPParser method) log_error() (CovertMark.data.mongo.MongoDBManager static method) log_invalid() (CovertMark.data.parser.PCAPParser static method) LogisticRegression (class in CovertMark.analytics.learning) lookup_collection() (CovertMark.data.mongo.MongoDBManager method) LOSS_FUNC (CovertMark.strategy.sgd.SGDStrategy attribute)

M

make_csv() (CovertMark.strategy.strategy.DetectionStrategy method) MAX_CRITERION (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) MEANSHIFT_BWS (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) MIN_TEST_SIZES (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) MINIMUM_TPR (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) modify_collection_description() (CovertMark.data.mongo.MongoDBManager method) module CovertMark.analytics CovertMark.analytics.constants CovertMark.analytics.entropy CovertMark.analytics.learning CovertMark.analytics.traffic CovertMark.constants CovertMark.data CovertMark.data.constants CovertMark.data.mongo CovertMark.data.parser CovertMark.data.plot CovertMark.data.retrieve CovertMark.data.utils CovertMark.handler CovertMark.strategy CovertMark.strategy.constants CovertMark.strategy.entropy_dist CovertMark.strategy.entropy_est CovertMark.strategy.length_clustering CovertMark.strategy.sgd CovertMark.strategy.strategy CovertMark.utils

MongoDBManager (class in CovertMark.data.mongo)

N

NAME (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) (CovertMark.strategy.sgd.SGDStrategy attribute) (CovertMark.strategy.strategy.DetectionStrategy attribute) negative_run() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method)

new() (CovertMark.handler.CommandHandler method) new_collection() (CovertMark.data.mongo.MongoDBManager method) NUM_RUNS (CovertMark.strategy.sgd.SGDStrategy attribute)

O

ordered_tcp_payload_length_frequency() (in module CovertMark.analytics.traffic)

ordered_udp_payload_length_frequency() (in module CovertMark.analytics.traffic)

P

P_THRESHOLD (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) parse_ip() (in module CovertMark.data.utils) parse_tcp_flags() (in module CovertMark.data.utils) PCAPParser (class in CovertMark.data.parser) plot() (CovertMark.handler.CommandHandler method) plot_hist() (in module CovertMark.data.plot) plot_performance() (in module CovertMark.data.plot) positive_run() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method)

predict() (CovertMark.analytics.learning.Classifier method) printable_procedure() (in module CovertMark.utils) printable_results() (in module CovertMark.utils) PT_SPLIT_RATIO (CovertMark.strategy.sgd.SGDStrategy attribute) PURPLE (CovertMark.constants.colours attribute)

R

random_file_name() (in module CovertMark.utils) read_mongo_credentials() (in module CovertMark.data.utils) read_strategy_map() (in module CovertMark.utils) recall_run() (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method) RED (CovertMark.constants.colours attribute) register() (CovertMark.handler.Commands class method) register_performance_stats() (CovertMark.strategy.strategy.DetectionStrategy method) report_blocked_ips() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method) request_random_bytes() (CovertMark.analytics.entropy.EntropyAnalyser method) results() (CovertMark.handler.CommandHandler method)

retrieve() (CovertMark.data.retrieve.Retriever method) Retriever (class in CovertMark.data.retrieve) run() (CovertMark.strategy.strategy.DetectionStrategy method) RUN_CONFIG_DESCRIPTION (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) (CovertMark.strategy.sgd.SGDStrategy attribute) (CovertMark.strategy.strategy.DetectionStrategy attribute) run_on_negative() (CovertMark.strategy.strategy.DetectionStrategy method) run_on_positive() (CovertMark.strategy.strategy.DetectionStrategy method) run_on_recall() (CovertMark.strategy.strategy.DetectionStrategy method) run_strategy() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method)

S

save() (CovertMark.handler.CommandHandler method) save_csvs() (in module CovertMark.utils) save_file() (in module CovertMark.utils) save_procedure() (in module CovertMark.utils) score() (CovertMark.handler.CommandHandler method) select() (CovertMark.data.retrieve.Retriever method) set_case_membership() (CovertMark.strategy.strategy.DetectionStrategy method) set_ip_filter() (CovertMark.data.parser.PCAPParser method) set_procedure() (CovertMark.handler.CommandHandler method)

set_strategic_filter() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method) setup() (CovertMark.strategy.strategy.DetectionStrategy method) SGD (class in CovertMark.analytics.learning) SGDStrategy (class in CovertMark.strategy.sgd) split_pt() (CovertMark.strategy.strategy.DetectionStrategy method) synchronise_packets() (in module CovertMark.analytics.traffic)

T

test_validation_split() (CovertMark.strategy.entropy_dist.EntropyStrategy method) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy method) (CovertMark.strategy.length_clustering.LengthClusteringStrategy method) (CovertMark.strategy.sgd.SGDStrategy method) (CovertMark.strategy.strategy.DetectionStrategy method) THRESHOLDS (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) TIME_SEGMENT_SIZE (CovertMark.strategy.sgd.SGDStrategy attribute)

TLS_HTTP_INCLUSION_THRESHOLD (CovertMark.strategy.entropy_dist.EntropyStrategy attribute) (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) TLS_INCLUSION_THRESHOLD (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) TLS_MODES (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute) to_percent() (in module CovertMark.data.plot) traces() (CovertMark.handler.CommandHandler method) train() (CovertMark.analytics.learning.Classifier method)

U

USE_TOP_CLUSTERS (CovertMark.strategy.length_clustering.LengthClusteringStrategy attribute)

V

valid_filename() (in module CovertMark.utils)

validate_procedure() (in module CovertMark.utils)

W

width() (in module CovertMark.utils) window_packets_fixed_size() (in module CovertMark.analytics.traffic) window_packets_time_series() (in module CovertMark.analytics.traffic)

WINDOW_SIZE (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) WINDOW_SIZES (CovertMark.strategy.entropy_est.EntropyEstimationStrategy attribute) wireshark() (CovertMark.handler.CommandHandler method)

Y

YELLOW (CovertMark.constants.colours attribute)