From 06213eded5b6af00a03614c382bd26f3986bcddd Mon Sep 17 00:00:00 2001 From: luiscal4a <l.delacal@alumnos.upm.es> Date: Tue, 18 Apr 2023 15:37:02 +0200 Subject: [PATCH] Added GetScalabilityConfig rpc to CAD: - Allows DAD to start async csv generation - Allows DAD to send scalability parameters to CAD --- cad_log.txt | 39160 ++++++++++++++-- proto/l3_centralizedattackdetector.proto | 9 + scalability_accuracy.csv | 2 + .../l3_centralizedattackdetectorClient.py | 8 + ...alizedattackdetectorServiceServicerImpl.py | 30 +- 5 files changed, 34059 insertions(+), 5150 deletions(-) diff --git a/cad_log.txt b/cad_log.txt index 1bc94597b..6d72e0075 100644 --- a/cad_log.txt +++ b/cad_log.txt @@ -1,17 +1,28649 @@ +INFO:__main__:Starting... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Starting Service (tentative endpoint: 0.0.0.0:10001, max_workers: 10)... +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating Centralized Attack Detector Service +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Features: [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0] +DEBUG:monitoring.client.MonitoringClient:Creating channel to 10.152.183.156:7070... +DEBUG:monitoring.client.MonitoringClient:Channel created +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Creating channel to l3-attackmitigatorservice:10002... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Channel created +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Listening on 0.0.0.0:10001... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Service started +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds request: {"message": ""} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds reply: {"auto_features": [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig request: {"max_connection_time": 60.0, "time_to_stabilize": 5.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Received scalability config request +E0418 13:24:22.010794181 108 fork_posix.cc:76] Other threads are currently calling into gRPC, skipping fork() handlers +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig reply: {"message": "CSV generated"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Starting async prediction accuracy analysis 2 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Correct csv load: True +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.026291847229003906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 1 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating KPIs for service context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Confidence of the cryptomining detector in the security status in the last time interval of the service 24b32c06-89b1-403b-8370-d7fefb69acac", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_SECURITY_STATUS_CRYPTO", "service_id": {"service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "17"}} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_security_status +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Security status of the service in a time interval of the service 24b32c06-89b1-403b-8370-d7fefb69acac (\u201c0\u201d if no attack has been detected on the service and \u201c1\u201d if a cryptomining attack has been detected)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_ML_CONFIDENCE", "service_id": {"service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "18"}} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_ml_model_confidence +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of attack connections detected in a time interval of the service 24b32c06-89b1-403b-8370-d7fefb69acac (attacks of the same connection [origin IP, origin port, destination IP and destination port] are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACK_CONNS", "service_id": {"service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "19"}} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attack_conns +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of unique compromised clients of the service in a time interval of the service 24b32c06-89b1-403b-8370-d7fefb69acac (attacks from the same origin IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_COMPROMISED_CLIENTS", "service_id": {"service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "20"}} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_compromised_clients +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - number of unique attackers of the service in a time interval of the service 24b32c06-89b1-403b-8370-d7fefb69acac (attacks from the same destination IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACKERS", "service_id": {"service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "21"}} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attackers +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPIs for service context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:self.time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval: 60 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:0:01:00 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.423413 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:No KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0007236003875732422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.04061770439148 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006229877471923828 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 2 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.427616 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.4281089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.4281089 +} +kpi_value { + floatVal: 0.997864544 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.4281089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.4281089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.4281089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.428109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99786454}, "timestamp": {"timestamp": 1681824262.428109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.428109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.428109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.428109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0823659896850586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.12647032737732 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004951953887939453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 3 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.512379 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.5127089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.5127089 +} +kpi_value { + floatVal: 0.998932242 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.5127089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.5127089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.5127089 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.512709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99893224}, "timestamp": {"timestamp": 1681824262.512709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.512709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.512709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.512709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05459856986999512 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.1833143234253 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005028247833251953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 4 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.569253 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.5695429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.5695429 +} +kpi_value { + floatVal: 0.999288201 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.5695429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.5695429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.5695429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.569543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9992882}, "timestamp": {"timestamp": 1681824262.569543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.569543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.569543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.569543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040701866149902344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.23046207427979 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005559921264648438 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 5 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.616441 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.6167171 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.6167171 +} +kpi_value { + floatVal: 0.999466121 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.6167171 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.6167171 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.6167171 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.616717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994661}, "timestamp": {"timestamp": 1681824262.616717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.616717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.616717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.616717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04327654838562012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.2759816646576 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00045990943908691406 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 6 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.661541 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.661885 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.661885 +} +kpi_value { + floatVal: 0.999572933 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.661885 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.661885 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.661885 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.661885}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957293}, "timestamp": {"timestamp": 1681824262.661885}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.661885}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.661885}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.661885}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06304717063903809 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.34087562561035 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000400543212890625 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.726512 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.7267449 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.7267449 +} +kpi_value { + floatVal: 0.999644101 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.7267449 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.7267449 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.7267449 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.726745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996441}, "timestamp": {"timestamp": 1681824262.726745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.726745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.726745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.726745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07203316688537598 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.41485810279846 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004055500030517578 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 8 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.800337 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.8005619 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.8005619 +} +kpi_value { + floatVal: 0.999389887 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.8005619 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.8005619 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.8005619 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.800562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9993899}, "timestamp": {"timestamp": 1681824262.800562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.800562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.800562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.800562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03225970268249512 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.44885396957397 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00035500526428222656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 9 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.834431 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.8346291 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.8346291 +} +kpi_value { + floatVal: 0.999199212 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.8346291 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.8346291 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.8346291 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.834629}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9991992}, "timestamp": {"timestamp": 1681824262.834629}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.834629}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.834629}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.834629}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04696774482727051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.49791526794434 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005438327789306641 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 10 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:22.883762 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824262.884011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824262.884011 +} +kpi_value { + floatVal: 0.9990049 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824262.884011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824262.884011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824262.884011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.884011}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9990049}, "timestamp": {"timestamp": 1681824262.884011}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.884011}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.884011}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824262.884011}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05022168159484863 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.55040526390076 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.6458570957183838 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006330013275146484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 11 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.028843 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.0291381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.0291381 +} +kpi_value { + floatVal: 0.999104381 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.0291381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.0291381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.0291381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.029138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9991044}, "timestamp": {"timestamp": 1681824263.029138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.029138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.029138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.029138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02734208106994629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.67268085479736 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005018711090087891 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 12 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.058390 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.0586491 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.0586491 +} +kpi_value { + floatVal: 0.999185801 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.0586491 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.0586491 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.0586491 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.058649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9991858}, "timestamp": {"timestamp": 1681824263.058649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.058649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.058649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.058649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06357884407043457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.73821926116943 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004107952117919922 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 13 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.123720 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.123929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.123929 +} +kpi_value { + floatVal: 0.99925369 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.123929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.123929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.123929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.123929}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9992537}, "timestamp": {"timestamp": 1681824263.123929}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.123929}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.123929}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.123929}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024228334426879883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.76421427726746 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003342628479003906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 14 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.149713 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.150418 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.150418 +} +kpi_value { + floatVal: 0.99931109 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.150418 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.150418 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.150418 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.150418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9993111}, "timestamp": {"timestamp": 1681824263.150418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.150418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.150418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.150418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04249072074890137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.8085207939148 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001100301742553711 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 15 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.194766 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.1949761 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.1949761 +} +kpi_value { + floatVal: 0.999360263 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.1949761 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.1949761 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.1949761 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.194976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99936026}, "timestamp": {"timestamp": 1681824263.194976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.194976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.194976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.194976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03528928756713867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.84634852409363 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00041604042053222656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 16 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.231908 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.2321031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.2321031 +} +kpi_value { + floatVal: 0.99940294 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.2321031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.2321031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.2321031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.232103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99940294}, "timestamp": {"timestamp": 1681824263.232103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.232103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.232103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.232103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05671286582946777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.9049322605133 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00040268898010253906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 17 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.290519 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.2907231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.2907231 +} +kpi_value { + floatVal: 0.999440253 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.2907231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.2907231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.2907231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.290723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99944025}, "timestamp": {"timestamp": 1681824263.290723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.290723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.290723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.290723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039783477783203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.94654083251953 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003769397735595703 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 18 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.332042 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.3322289 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.3322289 +} +kpi_value { + floatVal: 0.999473155 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.3322289 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.3322289 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.3322289 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.332229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99947315}, "timestamp": {"timestamp": 1681824263.332229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.332229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.332229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.332229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03870654106140137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 244.98697519302368 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00029587745666503906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 19 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.372764 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.372963 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.372963 +} +kpi_value { + floatVal: 0.99950242 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.372963 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.372963 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.372963 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.372963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995024}, "timestamp": {"timestamp": 1681824263.372963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.372963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.372963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.372963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03443336486816406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.02415680885315 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007607936859130859 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 20 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.410865 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.411525 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.411525 +} +kpi_value { + floatVal: 0.999416232 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.411525 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.411525 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.411525 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.411525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99941623}, "timestamp": {"timestamp": 1681824263.411525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.411525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.411525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.411525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05961966514587402 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.0878119468689 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4459993839263916 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007765293121337891 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 21 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.485227 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.4860311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.4860311 +} +kpi_value { + floatVal: 0.999445438 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.4860311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.4860311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.4860311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.486031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99944544}, "timestamp": {"timestamp": 1681824263.486031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.486031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.486031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.486031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0377802848815918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.13925671577454 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005422353744506836 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 22 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.530229 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.5310249 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.5310249 +} +kpi_value { + floatVal: 0.999471843 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.5310249 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.5310249 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.5310249 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.531025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99947184}, "timestamp": {"timestamp": 1681824263.531025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.531025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.531025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.531025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05089974403381348 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.19824075698853 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007393360137939453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 23 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.586028 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.5868411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.5868411 +} +kpi_value { + floatVal: 0.999495864 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.5868411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.5868411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.5868411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.586841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949586}, "timestamp": {"timestamp": 1681824263.586841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.586841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.586841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.586841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0286557674407959 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.2320613861084 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009021759033203125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 24 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.619203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.6201849 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.6201849 +} +kpi_value { + floatVal: 0.999517739 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.6201849 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.6201849 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.6201849 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.620185}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99951774}, "timestamp": {"timestamp": 1681824263.620185}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.620185}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.620185}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.620185}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.060699462890625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.29812693595886 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016989707946777344 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 25 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.687212 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.688448 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.688448 +} +kpi_value { + floatVal: 0.999537885 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.688448 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.688448 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.688448 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.688448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995379}, "timestamp": {"timestamp": 1681824263.688448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.688448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.688448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.688448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05064058303833008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.3879611492157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018129348754882812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 26 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.779924 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.781405 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.781405 +} +kpi_value { + floatVal: 0.999556363 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.781405 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.781405 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.781405 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.781405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955636}, "timestamp": {"timestamp": 1681824263.781405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.781405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.781405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.781405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04901933670043945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.44687390327454 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.03806352615356445 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 27 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.871826 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.872993 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.872993 +} +kpi_value { + floatVal: 0.99957341 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.872993 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.872993 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.872993 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.872993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995734}, "timestamp": {"timestamp": 1681824263.872993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.872993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.872993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.872993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033854007720947266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.52312350273132 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010755062103271484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 28 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.910795 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.911526 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.911526 +} +kpi_value { + floatVal: 0.999589205 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.911526 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.911526 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.911526 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.911526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995892}, "timestamp": {"timestamp": 1681824263.911526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.911526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.911526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.911526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03589296340942383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.5868022441864 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006110668182373047 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 29 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:23.972568 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824263.97282 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824263.97282 +} +kpi_value { + floatVal: 0.999603868 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824263.97282 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824263.97282 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824263.97282 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.97282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960387}, "timestamp": {"timestamp": 1681824263.97282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.97282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.97282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824263.97282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028545618057250977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.61905980110168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00033283233642578125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 30 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.006147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.007977 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.007977 +} +kpi_value { + floatVal: 0.999617517 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.007977 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.007977 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.007977 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.007977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996175}, "timestamp": {"timestamp": 1681824264.007977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.007977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.007977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.007977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030329227447509766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.65341234207153 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5555286407470703 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010955333709716797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 31 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.132445 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.1330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.1330919 +} +kpi_value { + floatVal: 0.999630272 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.1330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.1330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.1330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.133092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996303}, "timestamp": {"timestamp": 1681824264.133092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.133092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.133092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.133092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047078847885131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.79713416099548 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007162094116210938 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 32 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.184021 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.184587 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.184587 +} +kpi_value { + floatVal: 0.999642193 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.184587 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.184587 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.184587 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.184587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996422}, "timestamp": {"timestamp": 1681824264.184587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.184587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.184587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.184587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03979015350341797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.84128761291504 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001298666000366211 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 33 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.229433 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.230356 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.230356 +} +kpi_value { + floatVal: 0.999653399 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.230356 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.230356 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.230356 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.230356}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996534}, "timestamp": {"timestamp": 1681824264.230356}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.230356}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.230356}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.230356}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05196881294250488 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.8976593017578 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007350444793701172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 34 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.284447 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.284997 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.284997 +} +kpi_value { + floatVal: 0.999599159 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.284997 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.284997 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.284997 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.284997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959916}, "timestamp": {"timestamp": 1681824264.284997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.284997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.284997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.284997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030798912048339844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.93208956718445 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007727146148681641 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 35 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.319069 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.3200581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.3200581 +} +kpi_value { + floatVal: 0.999536 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.3200581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.3200581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.3200581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.320058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999536}, "timestamp": {"timestamp": 1681824264.320058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.320058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.320058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.320058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0572509765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 245.9934287071228 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008571147918701172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 36 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.380660 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.381573 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.381573 +} +kpi_value { + floatVal: 0.999480665 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.381573 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.381573 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.381573 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.381573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948066}, "timestamp": {"timestamp": 1681824264.381573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.381573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.381573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.381573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038897037506103516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.03694796562195 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007464885711669922 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 37 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.424033 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.424768 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.424768 +} +kpi_value { + floatVal: 0.999495089 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.424768 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.424768 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.424768 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.424768}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994951}, "timestamp": {"timestamp": 1681824264.424768}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.424768}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.424768}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.424768}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.059380292892456055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.10109996795654 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010161399841308594 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 38 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.488537 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.489423 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.489423 +} +kpi_value { + floatVal: 0.999508739 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.489423 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.489423 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.489423 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.489423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99950874}, "timestamp": {"timestamp": 1681824264.489423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.489423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.489423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.489423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027135610580444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.13299775123596 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009796619415283203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 39 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.520191 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.5210071 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.5210071 +} +kpi_value { + floatVal: 0.999521613 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.5210071 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.5210071 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.5210071 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.521007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995216}, "timestamp": {"timestamp": 1681824264.521007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.521007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.521007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.521007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06830453872680664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.2058663368225 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008392333984375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 40 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.592732 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.5935259 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.5935259 +} +kpi_value { + floatVal: 0.999533892 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.5935259 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.5935259 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.5935259 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.593526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995339}, "timestamp": {"timestamp": 1681824264.593526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.593526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.593526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.593526}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037247419357299805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.247323513031 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5022172927856445 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001802206039428711 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 41 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.742581 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.7439339 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.7439339 +} +kpi_value { + floatVal: 0.999545574 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.7439339 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.7439339 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.7439339 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.743934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995456}, "timestamp": {"timestamp": 1681824264.743934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.743934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.743934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.743934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.050020694732666016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.40994882583618 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010979175567626953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 42 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.798267 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.799299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.799299 +} +kpi_value { + floatVal: 0.999556661 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.799299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.799299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.799299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.799299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955666}, "timestamp": {"timestamp": 1681824264.799299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.799299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.799299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.799299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03715395927429199 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.45362281799316 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014765262603759766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 43 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.842430 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.843751 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.843751 +} +kpi_value { + floatVal: 0.999567211 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.843751 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.843751 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.843751 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.843751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995672}, "timestamp": {"timestamp": 1681824264.843751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.843751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.843751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.843751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0370485782623291 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.49787831306458 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001733541488647461 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 44 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.886964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.88833 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.88833 +} +kpi_value { + floatVal: 0.999577284 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.88833 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.88833 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.88833 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.88833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995773}, "timestamp": {"timestamp": 1681824264.88833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.88833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.88833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.88833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04713177680969238 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.55045986175537 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005366802215576172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 45 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.936536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.936918 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.936918 +} +kpi_value { + floatVal: 0.999538362 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.936918 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.936918 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.936918 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.936918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99953836}, "timestamp": {"timestamp": 1681824264.936918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.936918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.936918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.936918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046706199645996094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.59976363182068 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005767345428466797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 46 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:24.985970 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824264.9863429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824264.9863429 +} +kpi_value { + floatVal: 0.999548614 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824264.9863429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824264.9863429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824264.9863429 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.986343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995486}, "timestamp": {"timestamp": 1681824264.986343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.986343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.986343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824264.986343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029137611389160156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.63158321380615 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006506443023681641 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 47 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.017695 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.01806 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.01806 +} +kpi_value { + floatVal: 0.999558389 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.01806 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.01806 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.01806 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.01806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995584}, "timestamp": {"timestamp": 1681824265.01806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.01806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.01806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.01806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07289981842041016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.70688724517822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004916191101074219 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 48 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.092962 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.0932441 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.0932441 +} +kpi_value { + floatVal: 0.999567807 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.0932441 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.0932441 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.0932441 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.093244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995678}, "timestamp": {"timestamp": 1681824265.093244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.093244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.093244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.093244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06314253807067871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.77259635925293 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007381439208984375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 49 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.159348 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.1595659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.1595659 +} +kpi_value { + floatVal: 0.999576807 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.1595659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.1595659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.1595659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.159566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995768}, "timestamp": {"timestamp": 1681824265.159566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.159566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.159566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.159566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07141304016113281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.8472146987915 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007746219635009766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 50 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.236323 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.236763 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.236763 +} +kpi_value { + floatVal: 0.99958545 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.236763 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.236763 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.236763 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.236763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958545}, "timestamp": {"timestamp": 1681824265.236763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.236763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.236763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.236763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06734395027160645 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 246.91747999191284 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5638508796691895 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007936954498291016 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 51 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.410666 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.411098 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.411098 +} +kpi_value { + floatVal: 0.999593735 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.411098 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.411098 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.411098 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.411098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959373}, "timestamp": {"timestamp": 1681824265.411098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.411098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.411098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.411098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04473614692687988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.07171082496643 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005495548248291016 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 52 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.458142 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.4585209 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.4585209 +} +kpi_value { + floatVal: 0.999601722 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.4585209 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.4585209 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.4585209 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.458521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996017}, "timestamp": {"timestamp": 1681824265.458521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.458521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.458521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.458521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03143501281738281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.10598373413086 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005552768707275391 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 53 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.492239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.4925439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.4925439 +} +kpi_value { + floatVal: 0.999568284 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.4925439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.4925439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.4925439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.492544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995683}, "timestamp": {"timestamp": 1681824265.492544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.492544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.492544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.492544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025318145751953125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.13384819030762 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005021095275878906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 54 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.519862 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.520175 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.520175 +} +kpi_value { + floatVal: 0.999576449 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.520175 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.520175 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.520175 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.520175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957645}, "timestamp": {"timestamp": 1681824265.520175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.520175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.520175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.520175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06502008438110352 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.20131635665894 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006604194641113281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 55 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.587361 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.5875831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.5875831 +} +kpi_value { + floatVal: 0.999584258 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.5875831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.5875831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.5875831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.587583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958426}, "timestamp": {"timestamp": 1681824265.587583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.587583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.587583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.587583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03657126426696777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.24046730995178 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00047850608825683594 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 56 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.626600 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.626893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.626893 +} +kpi_value { + floatVal: 0.999591827 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.626893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.626893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.626893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.626893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995918}, "timestamp": {"timestamp": 1681824265.626893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.626893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.626893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.626893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07693862915039062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.3201711177826 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004749298095703125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 57 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.710509 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.7107511 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.7107511 +} +kpi_value { + floatVal: 0.999599159 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.7107511 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.7107511 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.7107511 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.710751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959916}, "timestamp": {"timestamp": 1681824265.710751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.710751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.710751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.710751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07873082160949707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.405513048172 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004398822784423828 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 58 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.791147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.7913361 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.7913361 +} +kpi_value { + floatVal: 0.999606192 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.7913361 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.7913361 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.7913361 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.791336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996062}, "timestamp": {"timestamp": 1681824265.791336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.791336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.791336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.791336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030553340911865234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.43805575370789 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007469654083251953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 59 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.823968 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.824158 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.824158 +} +kpi_value { + floatVal: 0.999612927 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.824158 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.824158 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.824158 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.824158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996129}, "timestamp": {"timestamp": 1681824265.824158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.824158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.824158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.824158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022216081619262695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.46239829063416 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00029277801513671875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 60 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:25.847822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824265.848037 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824265.848037 +} +kpi_value { + floatVal: 0.999619544 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824265.848037 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824265.848037 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824265.848037 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.848037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961954}, "timestamp": {"timestamp": 1681824265.848037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.848037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.848037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824265.848037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03910183906555176 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.50322365760803 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4788687229156494 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007977485656738281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 61 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.123171 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.1237831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.1237831 +} +kpi_value { + floatVal: 0.999625862 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.1237831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.1237831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.1237831 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.123783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962586}, "timestamp": {"timestamp": 1681824266.123783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.123783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.123783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.123783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03759503364562988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.7769901752472 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000316619873046875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 62 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.162405 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.162581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.162581 +} +kpi_value { + floatVal: 0.999632 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.162581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.162581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.162581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.162581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999632}, "timestamp": {"timestamp": 1681824266.162581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.162581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.162581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.162581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032354116439819336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.81104469299316 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00037598609924316406 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 63 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.196556 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.1967909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.1967909 +} +kpi_value { + floatVal: 0.999637902 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.1967909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.1967909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.1967909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.196791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996379}, "timestamp": {"timestamp": 1681824266.196791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.196791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.196791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.196791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038753509521484375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.8515636920929 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003685951232910156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 64 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.237400 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.237607 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.237607 +} +kpi_value { + floatVal: 0.999643683 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.237607 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.237607 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.237607 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.237607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996437}, "timestamp": {"timestamp": 1681824266.237607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.237607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.237607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.237607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052303314208984375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.90606570243835 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003185272216796875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 65 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.291474 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.291723 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.291723 +} +kpi_value { + floatVal: 0.999615848 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.291723 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.291723 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.291723 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.291723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961585}, "timestamp": {"timestamp": 1681824266.291723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.291723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.291723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.291723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03415203094482422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.94193053245544 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006470680236816406 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 66 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.327653 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.3278551 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.3278551 +} +kpi_value { + floatVal: 0.999621809 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.3278551 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.3278551 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.3278551 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.327855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996218}, "timestamp": {"timestamp": 1681824266.327855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.327855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.327855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.327855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047647953033447266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 247.99156618118286 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00037741661071777344 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 67 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.377047 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.3772621 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.3772621 +} +kpi_value { + floatVal: 0.999588907 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.3772621 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.3772621 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.3772621 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.377262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995889}, "timestamp": {"timestamp": 1681824266.377262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.377262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.377262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.377262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048293352127075195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.04163575172424 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004119873046875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 68 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.427256 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.4274571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.4274571 +} +kpi_value { + floatVal: 0.999563158 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.4274571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.4274571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.4274571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.427457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956316}, "timestamp": {"timestamp": 1681824266.427457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.427457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.427457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.427457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04385733604431152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.08806777000427 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001277923583984375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 69 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.476971 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.478183 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.478183 +} +kpi_value { + floatVal: 0.999538183 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.478183 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.478183 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.478183 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.478183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995382}, "timestamp": {"timestamp": 1681824266.478183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.478183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.478183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.478183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041113853454589844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.13602900505066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009913444519042969 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 70 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.524417 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.525399 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.525399 +} +kpi_value { + floatVal: 0.999507904 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.525399 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.525399 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.525399 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.525399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995079}, "timestamp": {"timestamp": 1681824266.525399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.525399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.525399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.525399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07021617889404297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.2121102809906 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.47582411766052246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008695125579833984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 71 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.684100 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.6846681 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.6846681 +} +kpi_value { + floatVal: 0.999480665 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.6846681 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.6846681 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.6846681 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.684668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948066}, "timestamp": {"timestamp": 1681824266.684668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.684668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.684668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.684668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03531503677368164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.33692479133606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021762847900390625 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 72 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.725132 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.7257979 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.7257979 +} +kpi_value { + floatVal: 0.999487936 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.7257979 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.7257979 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.7257979 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.725798}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948794}, "timestamp": {"timestamp": 1681824266.725798}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.725798}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.725798}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.725798}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03690052032470703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.37887167930603 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006659030914306641 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 73 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.765409 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.7660789 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.7660789 +} +kpi_value { + floatVal: 0.999495089 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.7660789 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.7660789 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.7660789 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.766079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994951}, "timestamp": {"timestamp": 1681824266.766079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.766079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.766079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.766079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039717912673950195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.4224636554718 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000919342041015625 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 74 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.809893 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.8105149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.8105149 +} +kpi_value { + floatVal: 0.999502 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.8105149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.8105149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.8105149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.810515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999502}, "timestamp": {"timestamp": 1681824266.810515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.810515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.810515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.810515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028923749923706055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.45561480522156 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 5991.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007123947143554688 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 75 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.842257 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.843415 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.843415 +} +kpi_value { + floatVal: 0.999508739 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.843415 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.843415 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.843415 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.843415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99950874}, "timestamp": {"timestamp": 1681824266.843415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.843415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.843415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.843415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052659034729003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.51202201843262 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 7389.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008425712585449219 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 76 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.898822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.8993521 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.8993521 +} +kpi_value { + floatVal: 0.999515235 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.8993521 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.8993521 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.8993521 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.899352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99951524}, "timestamp": {"timestamp": 1681824266.899352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.899352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.899352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.899352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024794816970825195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.54040479660034 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005967617034912109 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 77 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.926755 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.9273119 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.9273119 +} +kpi_value { + floatVal: 0.999521613 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.9273119 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.9273119 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.9273119 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.927312}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995216}, "timestamp": {"timestamp": 1681824266.927312}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.927312}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.927312}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.927312}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05950736999511719 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.6030616760254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000576019287109375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 78 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:26.989303 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824266.98991 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824266.98991 +} +kpi_value { + floatVal: 0.999527872 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824266.98991 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824266.98991 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824266.98991 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.98991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995279}, "timestamp": {"timestamp": 1681824266.98991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.98991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.98991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824266.98991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027150392532348633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.63331294059753 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 8787.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006237030029296875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 79 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.019811 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.020416 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.020416 +} +kpi_value { + floatVal: 0.999533892 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.020416 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.020416 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.020416 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.020416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995339}, "timestamp": {"timestamp": 1681824267.020416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.020416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.020416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.020416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0565953254699707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.6934895515442 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008516311645507812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 80 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.080780 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.081341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.081341 +} +kpi_value { + floatVal: 0.999539793 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.081341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.081341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.081341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.081341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995398}, "timestamp": {"timestamp": 1681824267.081341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.081341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.081341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.081341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026874780654907227 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.7247669696808 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4280729293823242 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006175041198730469 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 81 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.117021 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.1175389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.1175389 +} +kpi_value { + floatVal: 0.999518871 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.1175389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.1175389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.1175389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.117539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995189}, "timestamp": {"timestamp": 1681824267.117539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.117539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.117539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.117539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08241438865661621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.8158860206604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006530284881591797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 82 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.202239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.2026341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.2026341 +} +kpi_value { + floatVal: 0.999524832 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.2026341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.2026341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.2026341 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.202634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99952483}, "timestamp": {"timestamp": 1681824267.202634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.202634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.202634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.202634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04616045951843262 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.8647358417511 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004589557647705078 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 83 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.250589 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.250829 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.250829 +} +kpi_value { + floatVal: 0.999530613 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.250829 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.250829 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.250829 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.250829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995306}, "timestamp": {"timestamp": 1681824267.250829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.250829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.250829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.250829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03262925148010254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.8994541168213 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00035881996154785156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 84 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.284892 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.285078 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.285078 +} +kpi_value { + floatVal: 0.999536276 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.285078 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.285078 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.285078 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.285078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995363}, "timestamp": {"timestamp": 1681824267.285078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.285078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.285078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.285078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043527841567993164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 248.94487071037292 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005197525024414062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 85 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.331249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.331862 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.331862 +} +kpi_value { + floatVal: 0.999511421 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.331862 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.331862 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.331862 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.331862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995114}, "timestamp": {"timestamp": 1681824267.331862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.331862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.331862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.331862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08482933044433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.03254508972168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006155967712402344 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 86 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.418811 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.419014 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.419014 +} +kpi_value { + floatVal: 0.999487162 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.419014 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.419014 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.419014 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.419014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948716}, "timestamp": {"timestamp": 1681824267.419014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.419014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.419014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.419014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09471511840820312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.13006401062012 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002785921096801758 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 87 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.518229 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.51859 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.51859 +} +kpi_value { + floatVal: 0.999493122 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.51859 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.51859 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.51859 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.51859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994931}, "timestamp": {"timestamp": 1681824267.51859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.51859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.51859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.51859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0601201057434082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.19521284103394 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 10185.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007658004760742188 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 88 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.582065 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.58266 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.58266 +} +kpi_value { + floatVal: 0.999498963 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.58266 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.58266 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.58266 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.58266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949896}, "timestamp": {"timestamp": 1681824267.58266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.58266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.58266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.58266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05406546592712402 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.2525613307953 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004754066467285156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 89 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.638563 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.6388741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.6388741 +} +kpi_value { + floatVal: 0.999504685 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.6388741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.6388741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.6388741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.638874}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995047}, "timestamp": {"timestamp": 1681824267.638874}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.638874}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.638874}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.638874}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.049224138259887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.3042869567871 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005028247833251953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 90 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.690000 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.6902349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.6902349 +} +kpi_value { + floatVal: 0.999483228 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.6902349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.6902349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.6902349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.690235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994832}, "timestamp": {"timestamp": 1681824267.690235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.690235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.690235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.690235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05066108703613281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.3569941520691 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.6262540817260742 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008409023284912109 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 91 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.848869 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.8491471 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.8491471 +} +kpi_value { + floatVal: 0.999462306 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.8491471 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.8491471 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.8491471 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.849147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994623}, "timestamp": {"timestamp": 1681824267.849147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.849147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.849147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.849147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03428292274475098 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.49962329864502 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004317760467529297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 92 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.885562 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.8860581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.8860581 +} +kpi_value { + floatVal: 0.999468207 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.8860581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.8860581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.8860581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.886058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994682}, "timestamp": {"timestamp": 1681824267.886058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.886058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.886058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.886058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04044079780578613 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.5437581539154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007293224334716797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 93 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:27.931358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824267.932363 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824267.932363 +} +kpi_value { + floatVal: 0.999450803 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824267.932363 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824267.932363 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824267.932363 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.932363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994508}, "timestamp": {"timestamp": 1681824267.932363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.932363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.932363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824267.932363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09119343757629395 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.63955640792847 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007550716400146484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 94 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.025719 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.026212 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.026212 +} +kpi_value { + floatVal: 0.999456704 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.026212 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.026212 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.026212 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.026212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994567}, "timestamp": {"timestamp": 1681824268.026212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.026212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.026212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.026212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03414273262023926 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.6763195991516 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009810924530029297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 95 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.072302 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.073262 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.073262 +} +kpi_value { + floatVal: 0.999462485 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.073262 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.073262 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.073262 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.073262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994625}, "timestamp": {"timestamp": 1681824268.073262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.073262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.073262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.073262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03570675849914551 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.7245421409607 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005674362182617188 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 96 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.111146 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.111474 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.111474 +} +kpi_value { + floatVal: 0.999441266 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.111474 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.111474 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.111474 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.111474}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99944127}, "timestamp": {"timestamp": 1681824268.111474}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.111474}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.111474}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.111474}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03560209274291992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.76299500465393 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005779266357421875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 97 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.171437 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.1718359 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.1718359 +} +kpi_value { + floatVal: 0.999447107 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.1718359 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.1718359 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.1718359 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.171836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994471}, "timestamp": {"timestamp": 1681824268.171836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.171836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.171836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.171836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03384757041931152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.82154035568237 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00032138824462890625 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 98 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.207200 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.2099559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.2099559 +} +kpi_value { + floatVal: 0.999452829 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.2099559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.2099559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.2099559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.209956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994528}, "timestamp": {"timestamp": 1681824268.209956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.209956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.209956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.209956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04384922981262207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.867285490036 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003991127014160156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 99 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.252693 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.252893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.252893 +} +kpi_value { + floatVal: 0.999458373 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.252893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.252893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.252893 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.252893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994584}, "timestamp": {"timestamp": 1681824268.252893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.252893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.252893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.252893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03398728370666504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.90292310714722 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003020763397216797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 100 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.288136 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.288317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.288317 +} +kpi_value { + floatVal: 0.999463856 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.288317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.288317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.288317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.288317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99946386}, "timestamp": {"timestamp": 1681824268.288317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.288317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.288317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.288317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023260116577148438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 249.92765164375305 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4651954174041748 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006080840969006393 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0022458066954055174 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025040702894330025 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.04700517654418945 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 101 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.365674 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.365989 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.365989 +} +kpi_value { + floatVal: 0.999469221 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.365989 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.365989 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.365989 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.365989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994692}, "timestamp": {"timestamp": 1681824268.365989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.365989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.365989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.365989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025017261505126953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.00740838050842 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 11583.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006050232725957518 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0022349824204491897 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025180898956023157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0056798458099365234 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 102 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.399512 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.400454 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.400454 +} +kpi_value { + floatVal: 0.999474466 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.400454 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.400454 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.400454 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.400454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99947447}, "timestamp": {"timestamp": 1681824268.400454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.400454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.400454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.400454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0362393856048584 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.05609440803528 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006008979692621138 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0022244967299481114 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025040702894330025 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004778385162353516 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 103 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.446979 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.4471941 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.4471941 +} +kpi_value { + floatVal: 0.999479651 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.4471941 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.4471941 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.4471941 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.447194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99947965}, "timestamp": {"timestamp": 1681824268.447194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.447194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.447194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.447194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0568842887878418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.12013506889343 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005970214691702635 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002214125759043345 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025030699907802045 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015349388122558594 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.506887 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.507107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.507107 +} +kpi_value { + floatVal: 0.999484658 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.507107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.507107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.507107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.507107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948466}, "timestamp": {"timestamp": 1681824268.507107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.507107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.507107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.507107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0450592041015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.16823840141296 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005934906358431493 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002203851253459698 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025020696921274066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016567707061767578 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 105 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.555082 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.5553141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.5553141 +} +kpi_value { + floatVal: 0.999489665 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.5553141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.5553141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.5553141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.555314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99948967}, "timestamp": {"timestamp": 1681824268.555314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.555314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.555314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.555314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03862309455871582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.21000266075134 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000589624393779679 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002193788843222625 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014767646789550781 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 106 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.596569 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.59679 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.59679 +} +kpi_value { + floatVal: 0.999494493 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.59679 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.59679 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.59679 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.59679}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994945}, "timestamp": {"timestamp": 1681824268.59679}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.59679}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.59679}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.59679}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029609203338623047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.24382710456848 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005860597544750112 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021838218335188623 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024822301929816604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002805471420288086 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 107 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.632823 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.6330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.6330919 +} +kpi_value { + floatVal: 0.999499261 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.6330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.6330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.6330919 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.633092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949926}, "timestamp": {"timestamp": 1681824268.633092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.633092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.633092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.633092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07126784324645996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.32184052467346 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000584020766028617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021737903584468365 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032494068145751953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 108 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.711821 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.7127891 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.7127891 +} +kpi_value { + floatVal: 0.99950397 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.7127891 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.7127891 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.7127891 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.712789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99950397}, "timestamp": {"timestamp": 1681824268.712789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.712789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.712789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.712789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0322420597076416 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.36166524887085 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005806193370884712 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002164084583378033 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024822301929816604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003052234649658203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 109 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.752080 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.7532041 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.7532041 +} +kpi_value { + floatVal: 0.99950856 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.7532041 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.7532041 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.7532041 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.753204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99950856}, "timestamp": {"timestamp": 1681824268.753204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.753204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.753204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.753204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04772019386291504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.41801929473877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005777663064443253 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021544312963286045 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004305362701416016 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 110 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.809089 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.81016 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.81016 +} +kpi_value { + floatVal: 0.99951303 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.81016 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.81016 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.81016 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.81016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99951303}, "timestamp": {"timestamp": 1681824268.81016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.81016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.81016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.81016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029221534729003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.45601296424866 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5231976509094238 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000574490177625505 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021449799204013528 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024822301929816604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001523733139038086 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 111 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.849404 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.8496349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.8496349 +} +kpi_value { + floatVal: 0.9995175 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.8496349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.8496349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.8496349 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.849635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995175}, "timestamp": {"timestamp": 1681824268.849635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.849635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.849635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.849635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05513811111450195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.5208501815796 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005735697564627376 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021354046651917203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018630027770996094 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 112 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.907928 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.9081659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.9081659 +} +kpi_value { + floatVal: 0.999521852 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.9081659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.9081659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.9081659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.908166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99952185}, "timestamp": {"timestamp": 1681824268.908166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.908166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.908166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.908166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0443730354309082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.56859135627747 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005709399094195229 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021261171462784345 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025020696921274066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016398429870605469 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 113 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.955326 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824268.9555509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824268.9555509 +} +kpi_value { + floatVal: 0.999526083 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824268.9555509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824268.9555509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824268.9555509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.955551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995261}, "timestamp": {"timestamp": 1681824268.955551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.955551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.955551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824268.955551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041930437088012695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.61352944374084 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000567481673338957 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021170907224248897 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012345314025878906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 114 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:28.999841 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.0000391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.0000391 +} +kpi_value { + floatVal: 0.999530315 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.0000391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.0000391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.0000391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.000039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995303}, "timestamp": {"timestamp": 1681824269.000039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.000039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.000039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.000039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04427027702331543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.66037797927856 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005661257542669773 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0021079155981518077 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025020696921274066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015645027160644531 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 115 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.046977 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.0471721 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.0471721 +} +kpi_value { + floatVal: 0.999534428 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.0471721 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.0471721 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.0471721 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.047172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995344}, "timestamp": {"timestamp": 1681824269.047172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.047172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.047172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.047172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05395364761352539 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.71888518333435 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005630784721218113 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002099064474936239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0037109851837158203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 116 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.109870 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.1110189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.1110189 +} +kpi_value { + floatVal: 0.999538481 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.1110189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.1110189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.1110189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.111019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995385}, "timestamp": {"timestamp": 1681824269.111019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.111019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.111019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.111019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04629373550415039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.77377653121948 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 14379.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005606205961826202 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.002090242500667568 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025020696921274066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002942800521850586 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 117 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.163454 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.164417 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.164417 +} +kpi_value { + floatVal: 0.999542415 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.164417 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.164417 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.164417 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.164417}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995424}, "timestamp": {"timestamp": 1681824269.164417}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.164417}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.164417}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.164417}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03621315956115723 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.8170986175537 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005573940402196751 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020816592833185483 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025017261505126953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 118 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.205922 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.20674 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.20674 +} +kpi_value { + floatVal: 0.999546349 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.20674 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.20674 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.20674 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.20674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99954635}, "timestamp": {"timestamp": 1681824269.20674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.20674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.20674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.20674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03688549995422363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.86038374900818 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 15777.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005548638883516381 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020730765634319193 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00025020696921274066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025599002838134766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 119 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.249482 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.2503271 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.2503271 +} +kpi_value { + floatVal: 0.999550164 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.2503271 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.2503271 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.2503271 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.250327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955016}, "timestamp": {"timestamp": 1681824269.250327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.250327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.250327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.250327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04849076271057129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.9142084121704 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005520040474948473 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020646563834238103 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002085447311401367 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 120 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.301505 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.301755 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.301755 +} +kpi_value { + floatVal: 0.999554 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.301755 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.301755 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.301755 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.301755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999554}, "timestamp": {"timestamp": 1681824269.301755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.301755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.301755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.301755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04260563850402832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 250.96038842201233 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4976372718811035 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005493246337345009 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020563165347493692 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024822301929816604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014269351959228516 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 121 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.352769 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.3530011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.3530011 +} +kpi_value { + floatVal: 0.999557674 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.3530011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.3530011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.3530011 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.353001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995577}, "timestamp": {"timestamp": 1681824269.353001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.353001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.353001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.353001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06082034111022949 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.0300624370575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005475743664199579 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020479621679765614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024921499425545335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021409988403320312 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 122 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.417648 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.4180391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.4180391 +} +kpi_value { + floatVal: 0.999561369 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.4180391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.4180391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.4180391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.418039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956137}, "timestamp": {"timestamp": 1681824269.418039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.418039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.418039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.418039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048979997634887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.0829107761383 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005447447864997496 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020398595698028978 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024822301929816604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014600753784179688 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 123 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.469615 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.4706559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.4706559 +} +kpi_value { + floatVal: 0.999564946 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.4706559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.4706559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.4706559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.470656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956495}, "timestamp": {"timestamp": 1681824269.470656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.470656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.470656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.470656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03049778938293457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.11633253097534 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005417477880274096 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020318895591596624 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024635152658447623 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013272762298583984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 124 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.502706 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.50295 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.50295 +} +kpi_value { + floatVal: 0.999568462 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.50295 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.50295 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.50295 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.50295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956846}, "timestamp": {"timestamp": 1681824269.50295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.50295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.50295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.50295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02396678924560547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.14294958114624 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000538651341572404 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020240393990180903 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024448003387078643 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013284683227539062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 125 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.529400 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.529618 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.529618 +} +kpi_value { + floatVal: 0.999572 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.529618 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.529618 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.529618 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.529618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999572}, "timestamp": {"timestamp": 1681824269.529618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.529618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.529618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.529618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06411862373352051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.2098650932312 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005356423946703592 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020162721629877925 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024440852575935423 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013284683227539062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 126 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.596285 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.5964971 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.5964971 +} +kpi_value { + floatVal: 0.999575377 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.5964971 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.5964971 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.5964971 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.596497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995754}, "timestamp": {"timestamp": 1681824269.596497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.596497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.596497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.596497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04926156997680664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.26193118095398 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005335482263636929 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00200845596327678 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024448003387078643 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019903182983398438 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 127 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.674121 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.674367 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.674367 +} +kpi_value { + floatVal: 0.999578774 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.674367 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.674367 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.674367 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.674367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995788}, "timestamp": {"timestamp": 1681824269.674367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.674367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.674367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.674367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06613516807556152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.35757660865784 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005311690601956798 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0020007747059002413 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024440852575935423 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025458335876464844 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 128 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.747790 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.7480929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.7480929 +} +kpi_value { + floatVal: 0.999582052 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.7480929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.7480929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.7480929 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.748093}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958205}, "timestamp": {"timestamp": 1681824269.748093}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.748093}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.748093}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.748093}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04773449897766113 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.4118173122406 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005283161994185327 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019932660167579046 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024433701764792204 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016281604766845703 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 129 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.798696 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.7989321 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.7989321 +} +kpi_value { + floatVal: 0.99958533 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.7989321 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.7989321 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.7989321 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.798932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958533}, "timestamp": {"timestamp": 1681824269.798932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.798932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.798932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.798932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030203819274902344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.44520807266235 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005255770905373188 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001985828513243363 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024418800603598356 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012559890747070312 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 130 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.831565 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.8317921 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.8317921 +} +kpi_value { + floatVal: 0.999588549 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.8317921 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.8317921 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.8317921 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.831792}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958855}, "timestamp": {"timestamp": 1681824269.831792}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.831792}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.831792}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.831792}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05859112739562988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.50639367103577 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5401434898376465 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005243447842965088 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001978284391128859 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024433701764792204 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002722024917602539 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 131 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:29.990196 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824269.9907911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824269.9907911 +} +kpi_value { + floatVal: 0.999591708 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824269.9907911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824269.9907911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824269.9907911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.990791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995917}, "timestamp": {"timestamp": 1681824269.990791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.990791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.990791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824269.990791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028583526611328125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.63523650169373 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005216279374012215 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019710219488443684 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024418800603598356 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018620491027832031 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 132 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.022701 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.023052 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.023052 +} +kpi_value { + floatVal: 0.999578536 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.023052 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.023052 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.023052 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.023052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957854}, "timestamp": {"timestamp": 1681824270.023052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.023052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.023052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.023052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030345916748046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.66949343681335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005191574113870642 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019638032496386835 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024403899442404509 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001817464828491211 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 133 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.056943 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.0572391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.0572391 +} +kpi_value { + floatVal: 0.999581695 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.0572391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.0572391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.0572391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.057239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995817}, "timestamp": {"timestamp": 1681824270.057239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.057239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.057239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.057239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04902029037475586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.7222125530243 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005169017666102902 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001956634834230199 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024298549396917224 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014500617980957031 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 134 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.108752 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.108978 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.108978 +} +kpi_value { + floatVal: 0.999584854 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.108978 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.108978 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.108978 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.108978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958485}, "timestamp": {"timestamp": 1681824270.108978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.108978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.108978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.108978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03079819679260254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.7562174797058 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000529115005068619 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019544945834495397 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024403899442404509 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038924217224121094 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 135 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.155440 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.1558559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.1558559 +} +kpi_value { + floatVal: 0.999587953 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.1558559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.1558559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.1558559 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.155856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958795}, "timestamp": {"timestamp": 1681824270.155856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.155856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.155856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.155856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02916240692138672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.80093455314636 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 19971.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000526554519584512 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001947522927253893 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024298549396917224 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014185905456542969 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 136 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.187554 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.187799 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.187799 +} +kpi_value { + floatVal: 0.999591 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.187799 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.187799 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.187799 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.187799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999591}, "timestamp": {"timestamp": 1681824270.187799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.187799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.187799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.187799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05335235595703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.85719680786133 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005243218518338118 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019405768425052965 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002419319935142994 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015454292297363281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 137 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.243981 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.2443161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.2443161 +} +kpi_value { + floatVal: 0.999594033 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.2443161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.2443161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.2443161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.244316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959403}, "timestamp": {"timestamp": 1681824270.244316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.244316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.244316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.244316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04239630699157715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.90322852134705 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005221799323065342 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019336955107402151 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023973998031578958 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002386331558227539 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 138 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.291496 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.2921031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.2921031 +} +kpi_value { + floatVal: 0.999597 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.2921031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.2921031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.2921031 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.292103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999597}, "timestamp": {"timestamp": 1681824270.292103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.292103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.292103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.292103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0254669189453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.934250831604 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005202892352826893 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019268552302149709 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002419319935142994 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002688169479370117 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 139 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.323477 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.3242381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.3242381 +} +kpi_value { + floatVal: 0.999599934 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.3242381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.3242381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.3242381 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.324238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959993}, "timestamp": {"timestamp": 1681824270.324238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.324238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.324238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.324238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024631738662719727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 251.96554517745972 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005185574908474726 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001920069826147654 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024298549396917224 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029778480529785156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 140 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.375692 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.3765631 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.3765631 +} +kpi_value { + floatVal: 0.999602795 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.3765631 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.3765631 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.3765631 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.376563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996028}, "timestamp": {"timestamp": 1681824270.376563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.376563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.376563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.376563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035776615142822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.02868247032166 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4277355670928955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005162589909204989 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019134422356101484 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002419319935142994 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018734931945800781 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 141 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.424446 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.4251311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.4251311 +} +kpi_value { + floatVal: 0.999605596 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.4251311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.4251311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.4251311 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.425131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996056}, "timestamp": {"timestamp": 1681824270.425131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.425131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.425131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.425131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.058617353439331055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.09937596321106 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005137404557284702 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001906927378079209 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023973998031578958 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002185344696044922 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 142 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.486919 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.4874439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.4874439 +} +kpi_value { + floatVal: 0.999608397 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.4874439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.4874439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.4874439 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.487444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996084}, "timestamp": {"timestamp": 1681824270.487444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.487444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.487444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.487444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02559494972229004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.1296157836914 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000511299963255732 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0019004706266513359 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023754796711727977 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017485618591308594 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 143 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.516932 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.517174 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.517174 +} +kpi_value { + floatVal: 0.999611199 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.517174 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.517174 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.517174 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.517174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996112}, "timestamp": {"timestamp": 1681824270.517174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.517174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.517174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.517174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06775569915771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.20099759101868 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005086555049476576 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00189412427240422 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023737299488857388 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013327598571777344 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 144 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.587592 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.5881121 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.5881121 +} +kpi_value { + floatVal: 0.999613881 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.5881121 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.5881121 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.5881121 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.588112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996139}, "timestamp": {"timestamp": 1681824270.588112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.588112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.588112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.588112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030408382415771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.23512196540833 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 14379.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000506085115244034 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018878335064668951 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000237198022659868 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0045697689056396484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 145 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.626390 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.627018 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.627018 +} +kpi_value { + floatVal: 0.999616563 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.627018 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.627018 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.627018 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.627018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961656}, "timestamp": {"timestamp": 1681824270.627018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.627018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.627018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.627018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.055642127990722656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.29832792282104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 15777.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005036312309317036 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001881589246762933 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023445000988431275 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006530284881591797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 146 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.689999 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.690208 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.690208 +} +kpi_value { + floatVal: 0.999619246 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.690208 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.690208 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.690208 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.690208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961925}, "timestamp": {"timestamp": 1681824270.690208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.690208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.690208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.690208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039638519287109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.34597325325012 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0005016065833038416 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001875337935340313 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002317019971087575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001417398452758789 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.732548 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.732765 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.732765 +} +kpi_value { + floatVal: 0.999621809 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.732765 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.732765 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.732765 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.732765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996218}, "timestamp": {"timestamp": 1681824270.732765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.732765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.732765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.732765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05755209922790527 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.406347990036 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 17175.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004994762078953303 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018691700684635554 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002310739946551621 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014612674713134766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 148 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.792877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.7930911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.7930911 +} +kpi_value { + floatVal: 0.999624431 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.7930911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.7930911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.7930911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.793091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962443}, "timestamp": {"timestamp": 1681824270.793091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.793091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.793091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.793091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03056621551513672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.4396779537201 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004973833940629441 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018630611007855308 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013928413391113281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 149 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.826113 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.8263581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.8263581 +} +kpi_value { + floatVal: 0.999626935 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.8263581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.8263581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.8263581 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.826358}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962693}, "timestamp": {"timestamp": 1681824270.826358}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.826358}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.826358}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.826358}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04459381103515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.486962556839 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004948556050658226 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001857096862136349 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002297304745297879 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011751651763916016 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 150 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.873127 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.8733389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.8733389 +} +kpi_value { + floatVal: 0.999629438 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.8733389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.8733389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.8733389 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.873339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962944}, "timestamp": {"timestamp": 1681824270.873339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.873339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.873339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.873339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042395830154418945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.53182578086853 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.49469923973083496 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004938890315616959 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018509751759344783 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018432140350341797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 151 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.925058 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.9252861 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.9252861 +} +kpi_value { + floatVal: 0.999631941 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.9252861 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.9252861 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.9252861 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.925286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963194}, "timestamp": {"timestamp": 1681824270.925286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.925286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.925286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.925286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04246044158935547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.5838143825531 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004920103471560747 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018450208286588854 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002297304745297879 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016901493072509766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 152 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:30.970685 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824270.970943 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824270.970943 +} +kpi_value { + floatVal: 0.999634326 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824270.970943 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824270.970943 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824270.970943 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.970943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996343}, "timestamp": {"timestamp": 1681824270.970943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.970943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.970943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824270.970943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04946088790893555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.6364724636078 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004908255346308103 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001839039477852969 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018024444580078125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 153 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.023390 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.023634 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.023634 +} +kpi_value { + floatVal: 0.999636769 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.023634 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.023634 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.023634 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.023634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963677}, "timestamp": {"timestamp": 1681824271.023634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.023634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.023634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.023634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03059840202331543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.6703588962555 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004890323363323152 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001833193037561639 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002297304745297879 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015215873718261719 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.057245 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.0574391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.0574391 +} +kpi_value { + floatVal: 0.999639153 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.0574391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.0574391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.0574391 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.057439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963915}, "timestamp": {"timestamp": 1681824271.057439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.057439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.057439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.057439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029074907302856445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.702556848526 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 18573.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00048693490192113864 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018274553142113722 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013451576232910156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.088931 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.089134 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.089134 +} +kpi_value { + floatVal: 0.999641478 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.089134 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.089134 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.089134 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.089134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996415}, "timestamp": {"timestamp": 1681824271.089134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.089134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.089134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.089134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02219367027282715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.72736144065857 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004845380690545799 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018218330669106109 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012025833129882812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 156 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.113560 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.1140759 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.1140759 +} +kpi_value { + floatVal: 0.999643803 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.1140759 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.1140759 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.1140759 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.114076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996438}, "timestamp": {"timestamp": 1681824271.114076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.114076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.114076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.114076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06614232063293457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.79600310325623 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 21369.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004836870876443424 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018160528859050738 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018322467803955078 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.182945 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.183177 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.183177 +} +kpi_value { + floatVal: 0.999646068 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.183177 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.183177 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.183177 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.183177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964607}, "timestamp": {"timestamp": 1681824271.183177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.183177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.183177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.183177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028650760650634766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.8280758857727 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00048147346691782526 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001810509232419468 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013506412506103516 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 158 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.214533 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.2147851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.2147851 +} +kpi_value { + floatVal: 0.999648333 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.2147851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.2147851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.2147851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.214785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964833}, "timestamp": {"timestamp": 1681824271.214785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.214785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.214785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.214785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0697183609008789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.9005422592163 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047988593600303776 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0018049171401702943 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014939308166503906 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 159 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.287081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.2873 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.2873 +} +kpi_value { + floatVal: 0.999650538 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.2873 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.2873 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.2873 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.2873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965054}, "timestamp": {"timestamp": 1681824271.2873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.2873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.2873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.2873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03672981262207031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 252.94005823135376 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004779366801813012 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017994358094235042 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013301372528076172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 160 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.326460 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.3266571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.3266571 +} +kpi_value { + floatVal: 0.999652743 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.3266571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.3266571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.3266571 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.326657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965274}, "timestamp": {"timestamp": 1681824271.326657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.326657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.326657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.326657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08028006553649902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.02305221557617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4850914478302002 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004765266449167538 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017939274606318606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001764535903930664 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 161 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.561175 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.56145 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.56145 +} +kpi_value { + floatVal: 0.999654889 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.56145 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.56145 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.56145 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.56145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996549}, "timestamp": {"timestamp": 1681824271.56145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.56145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.56145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.56145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03809976577758789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.21639752388 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047481267779122714 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017885143048667145 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021920204162597656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 162 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.604822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.6052351 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.6052351 +} +kpi_value { + floatVal: 0.999643803 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.6052351 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.6052351 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.6052351 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.605235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996438}, "timestamp": {"timestamp": 1681824271.605235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.605235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.605235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.605235}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0413358211517334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.26244473457336 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047306634844252214 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001783158160816002 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015666484832763672 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 163 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.649104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.649332 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.649332 +} +kpi_value { + floatVal: 0.999646 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.649332 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.649332 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.649332 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.649332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999646}, "timestamp": {"timestamp": 1681824271.649332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.649332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.649332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.649332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044135093688964844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.30954146385193 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 19971.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047114797443344555 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017778821007494122 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022826596978120506 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013918876647949219 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 164 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.696196 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.6964149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.6964149 +} +kpi_value { + floatVal: 0.999648154 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.6964149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.6964149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.6964149 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.696415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964815}, "timestamp": {"timestamp": 1681824271.696415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.696415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.696415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.696415}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029309988021850586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.34186434745789 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046906864136513884 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017726864028034274 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013267993927001953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 165 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.728333 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.7285459 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.7285459 +} +kpi_value { + floatVal: 0.9996503 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.7285459 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.7285459 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.7285459 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.728546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996503}, "timestamp": {"timestamp": 1681824271.728546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.728546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.728546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.728546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0680999755859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.41274547576904 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004673007520123284 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00176748481059966 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022710248595103621 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015137195587158203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 166 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.799342 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.799783 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.799783 +} +kpi_value { + floatVal: 0.999639511 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.799783 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.799783 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.799783 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.799783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996395}, "timestamp": {"timestamp": 1681824271.799783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.799783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.799783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.799783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04230999946594238 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.45800518989563 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004656821427292408 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017623083885371616 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015866756439208984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 167 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.844667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.8449509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.8449509 +} +kpi_value { + floatVal: 0.999641657 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.8449509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.8449509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.8449509 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.844951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964166}, "timestamp": {"timestamp": 1681824271.844951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.844951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.844951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.844951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0363154411315918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.49724411964417 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046405667741228606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017571811517535893 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001308441162109375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.883664 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.883909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.883909 +} +kpi_value { + floatVal: 0.999643803 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.883909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.883909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.883909 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.883909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996438}, "timestamp": {"timestamp": 1681824271.883909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.883909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.883909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.883909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03600716590881348 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.53635358810425 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00048152336571090056 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00176654170194305 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004934072494506836 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 169 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.927236 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.927438 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.927438 +} +kpi_value { + floatVal: 0.999645948 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.927438 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.927438 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.927438 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.927438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964595}, "timestamp": {"timestamp": 1681824271.927438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.927438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.927438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.927438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05680990219116211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.60035300254822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00048030380481470594 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017614096807266517 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022710248595103621 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00153350830078125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 170 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:31.987081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824271.987294 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824271.987294 +} +kpi_value { + floatVal: 0.999648035 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824271.987294 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824271.987294 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824271.987294 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.987294}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964803}, "timestamp": {"timestamp": 1681824271.987294}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.987294}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.987294}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824271.987294}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027461767196655273 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.63083958625793 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4566493034362793 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047997108657915166 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017562571659943118 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031554698944091797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 171 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.202118 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.2031331 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.2031331 +} +kpi_value { + floatVal: 0.999650121 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.2031331 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.2031331 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.2031331 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.203133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996501}, "timestamp": {"timestamp": 1681824272.203133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.203133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.203133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.203133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025369644165039062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.84378361701965 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004785015571965338 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017512497606586767 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016682147979736328 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 172 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.230728 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.231189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.231189 +} +kpi_value { + floatVal: 0.999652147 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.231189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.231189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.231189 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.231189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965215}, "timestamp": {"timestamp": 1681824272.231189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.231189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.231189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.231189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022014617919921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.86909294128418 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004767589701737972 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017463305573986575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012216567993164062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 173 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.255461 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.255693 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.255693 +} +kpi_value { + floatVal: 0.999654174 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.255693 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.255693 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.255693 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.255693}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996542}, "timestamp": {"timestamp": 1681824272.255693}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.255693}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.255693}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.255693}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022414684295654297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.89412260055542 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004750909300483549 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001741443344511826 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013852119445800781 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 174 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.280557 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.2807939 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.2807939 +} +kpi_value { + floatVal: 0.999641418 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.2807939 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.2807939 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.2807939 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.280794}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996414}, "timestamp": {"timestamp": 1681824272.280794}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.280794}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.280794}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.280794}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026403188705444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.92369937896729 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004744633476782058 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017364803967943282 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002435922622680664 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 175 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.311618 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.3121159 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.3121159 +} +kpi_value { + floatVal: 0.999643505 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.3121159 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.3121159 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.3121159 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.312116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996435}, "timestamp": {"timestamp": 1681824272.312116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.312116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.312116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.312116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028798818588256836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.9568362236023 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004724281412067781 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017317494850398007 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011987686157226562 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 176 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.343041 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.3432579 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.3432579 +} +kpi_value { + floatVal: 0.999631822 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.3432579 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.3432579 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.3432579 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.343258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996318}, "timestamp": {"timestamp": 1681824272.343258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.343258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.343258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.343258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03235363960266113 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 253.99166750907898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00047047971649158556 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017270440591611075 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011870861053466797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 177 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.378000 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.378267 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.378267 +} +kpi_value { + floatVal: 0.999621749 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.378267 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.378267 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.378267 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.378267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962175}, "timestamp": {"timestamp": 1681824272.378267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.378267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.378267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.378267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04030942916870117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.03458046913147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046879416194304906 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017223319715113682 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012576580047607422 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 178 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.421720 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.422188 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.422188 +} +kpi_value { + floatVal: 0.99960947 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.422188 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.422188 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.422188 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.422188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996095}, "timestamp": {"timestamp": 1681824272.422188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.422188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.422188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.422188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033590078353881836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.07160639762878 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004669907252439532 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001717682777524823 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012993812561035156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 179 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.457966 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.4581809 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.4581809 +} +kpi_value { + floatVal: 0.999598205 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.4581809 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.4581809 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.4581809 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.458181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995982}, "timestamp": {"timestamp": 1681824272.458181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.458181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.458181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.458181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05416417121887207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.12839031219482 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004656254821586319 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001713002177345213 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022613999317400157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014159679412841797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 180 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.514935 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.5151651 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.5151651 +} +kpi_value { + floatVal: 0.99958849 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.5151651 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.5151651 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.5151651 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.515165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995885}, "timestamp": {"timestamp": 1681824272.515165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.515165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.515165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.515165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04033493995666504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.17152285575867 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.358811616897583 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046413139670377194 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017083811774288495 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002259960165247321 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017743110656738281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 181 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.564583 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.564836 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.564836 +} +kpi_value { + floatVal: 0.999576628 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.564836 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.564836 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.564836 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.564836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995766}, "timestamp": {"timestamp": 1681824272.564836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.564836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.564836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.564836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03133130073547363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.21343398094177 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046309844973231 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0017037380351422875 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022613999317400157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002865314483642578 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.602571 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.603102 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.603102 +} +kpi_value { + floatVal: 0.999565721 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.603102 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.603102 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.603102 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.603102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995657}, "timestamp": {"timestamp": 1681824272.603102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.603102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.603102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.603102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033162832260131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.2520968914032 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004622930046323626 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016991113817184096 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.037944793701171875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 183 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.675525 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.6761141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.6761141 +} +kpi_value { + floatVal: 0.999568105 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.6761141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.6761141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.6761141 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.676114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995681}, "timestamp": {"timestamp": 1681824272.676114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.676114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.676114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.676114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03632497787475586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.3288540840149 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00046180306969250995 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001694500902392113 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002585887908935547 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 184 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.717156 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.717838 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.717838 +} +kpi_value { + floatVal: 0.999570429 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.717838 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.717838 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.717838 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.717838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995704}, "timestamp": {"timestamp": 1681824272.717838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.717838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.717838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.717838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03436851501464844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.36859893798828 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004608529560091729 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001689964108307881 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026903152465820312 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 185 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.773462 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.77412 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.77412 +} +kpi_value { + floatVal: 0.999572814 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.77412 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.77412 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.77412 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.77412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995728}, "timestamp": {"timestamp": 1681824272.77412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.77412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.77412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.77412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032448768615722656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.42219805717468 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004596071388517376 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016855002504939948 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004446506500244141 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 186 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.812207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.81299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.81299 +} +kpi_value { + floatVal: 0.999575078 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.81299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.81299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.81299 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.81299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995751}, "timestamp": {"timestamp": 1681824272.81299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.81299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.81299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.81299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0354921817779541 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.48652458190918 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045852654957197566 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001681052124025574 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002645254135131836 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 187 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.874664 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.8749161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.8749161 +} +kpi_value { + floatVal: 0.999577403 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.8749161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.8749161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.8749161 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.874916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995774}, "timestamp": {"timestamp": 1681824272.874916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.874916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.874916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.874916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.054863929748535156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.54631900787354 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004575426957787985 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016766292607479235 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002664804458618164 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 188 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.935018 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.935317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.935317 +} +kpi_value { + floatVal: 0.999579668 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.935317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.935317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.935317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.935317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957967}, "timestamp": {"timestamp": 1681824272.935317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.935317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.935317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.935317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04933571815490723 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.60188841819763 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004562737556327154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016722783644208632 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002580881118774414 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 189 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:32.990785 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824272.9910741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824272.9910741 +} +kpi_value { + floatVal: 0.999581873 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824272.9910741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824272.9910741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824272.9910741 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.991074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995819}, "timestamp": {"timestamp": 1681824272.991074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.991074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.991074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824272.991074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04260516166687012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.64980578422546 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004549791782138575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016679667800617436 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017359256744384766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 190 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.036844 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.0371411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.0371411 +} +kpi_value { + floatVal: 0.999584079 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.0371411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.0371411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.0371411 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.037141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995841}, "timestamp": {"timestamp": 1681824273.037141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.037141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.037141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.037141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033949851989746094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.68714308738708 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5101175308227539 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045385980565364214 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016636661957368554 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017743110656738281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 191 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.257230 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.257515 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.257515 +} +kpi_value { + floatVal: 0.999586284 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.257515 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.257515 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.257515 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.257515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995863}, "timestamp": {"timestamp": 1681824273.257515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.257515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.257515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.257515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034836530685424805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.90836906433105 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045300007726230734 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016593706147963573 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016736984252929688 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 192 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.295194 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.2954609 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.2954609 +} +kpi_value { + floatVal: 0.99958843 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.2954609 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.2954609 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.2954609 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.295461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99958843}, "timestamp": {"timestamp": 1681824273.295461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.295461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.295461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.295461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03690791130065918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 254.9483916759491 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045191397295705007 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016551345653002764 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017192363739013672 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 193 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.335411 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.3356531 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.3356531 +} +kpi_value { + floatVal: 0.999590576 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.3356531 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.3356531 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.3356531 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.335653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995906}, "timestamp": {"timestamp": 1681824273.335653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.335653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.335653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.335653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05043458938598633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.00218605995178 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004511106484473597 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016509009650488887 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022826596978120506 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017116069793701172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 194 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.389325 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.38957 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.38957 +} +kpi_value { + floatVal: 0.999592721 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.38957 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.38957 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.38957 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.38957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995927}, "timestamp": {"timestamp": 1681824273.38957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.38957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.38957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.38957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024690866470336914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.030277967453 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044963842956349256 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016467901164969319 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013623237609863281 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 195 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.416726 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.417026 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.417026 +} +kpi_value { + floatVal: 0.999583781 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.417026 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.417026 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.417026 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.417026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995838}, "timestamp": {"timestamp": 1681824273.417026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.417026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.417026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.417026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024276256561279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.0572805404663 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004482210241970891 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016427029967291786 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013461112976074219 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 196 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.443971 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.444273 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.444273 +} +kpi_value { + floatVal: 0.999572873 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.444273 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.444273 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.444273 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.444273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995729}, "timestamp": {"timestamp": 1681824273.444273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.444273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.444273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.444273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05033302307128906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.11053609848022 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044691939465937955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016386297242577284 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014643669128417969 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 197 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.497238 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.4974589 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.4974589 +} +kpi_value { + floatVal: 0.9995628 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.4974589 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.4974589 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.4974589 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.497459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995628}, "timestamp": {"timestamp": 1681824273.497459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.497459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.497459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.497459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032996416091918945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.146546125412 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044529916038924845 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016346447262974636 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018429756164550781 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 198 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.533704 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.534317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.534317 +} +kpi_value { + floatVal: 0.999565 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.534317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.534317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.534317 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.534317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999565}, "timestamp": {"timestamp": 1681824273.534317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.534317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.534317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.534317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06494522094726562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.2151756286621 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 21369.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004444249985206067 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016305788023005007 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002193450927734375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 199 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.602816 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.603107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.603107 +} +kpi_value { + floatVal: 0.999556422 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.603107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.603107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.603107 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.603107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995564}, "timestamp": {"timestamp": 1681824273.603107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.603107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.603107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.603107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029786109924316406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.24904036521912 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004430316184880212 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016266160132109553 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017321109771728516 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 200 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.636357 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.637274 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.637274 +} +kpi_value { + floatVal: 0.999558628 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.637274 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.637274 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.637274 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.637274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995586}, "timestamp": {"timestamp": 1681824273.637274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.637274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.637274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.637274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035034894943237305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.2876501083374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.41759395599365234 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004416630384442744 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016226800905696762 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014722347259521484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 201 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.679859 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.6801269 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.6801269 +} +kpi_value { + floatVal: 0.999548078 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.6801269 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.6801269 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.6801269 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.680127}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995481}, "timestamp": {"timestamp": 1681824273.680127}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.680127}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.680127}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.680127}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02836298942565918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.32450318336487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004404398945787239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016187514590687538 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015401840209960938 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 202 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.711203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.7114019 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.7114019 +} +kpi_value { + floatVal: 0.999550343 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.7114019 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.7114019 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.7114019 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.711402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955034}, "timestamp": {"timestamp": 1681824273.711402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.711402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.711402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.711402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06703519821166992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.3957531452179 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004561847128006148 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016301913341572741 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005499839782714844 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.787398 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.7876811 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.7876811 +} +kpi_value { + floatVal: 0.999552608 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.7876811 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.7876811 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.7876811 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.787681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995526}, "timestamp": {"timestamp": 1681824273.787681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.787681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.787681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.787681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05882620811462402 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.46292543411255 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045542851804901717 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016262265494608327 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027151107788085938 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 204 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.873906 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.874541 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.874541 +} +kpi_value { + floatVal: 0.999554813 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.874541 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.874541 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.874541 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.874541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995548}, "timestamp": {"timestamp": 1681824273.874541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.874541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.874541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.874541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030979156494140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.52153635025024 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004540134860179955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016223811859016632 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021321773529052734 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 205 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.910164 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.9106419 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.9106419 +} +kpi_value { + floatVal: 0.999556959 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.9106419 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.9106419 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.9106419 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.910642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955696}, "timestamp": {"timestamp": 1681824273.910642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.910642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.910642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.910642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06063508987426758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.5874662399292 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004527881926318938 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001618533658238842 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002252817153930664 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 206 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:33.975908 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824273.9763911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824273.9763911 +} +kpi_value { + floatVal: 0.999559104 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824273.9763911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824273.9763911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824273.9763911 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.976391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995591}, "timestamp": {"timestamp": 1681824273.976391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.976391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.976391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824273.976391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024903535842895508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.6186876296997 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000451284708738651 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016147636169352524 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002759218215942383 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.007662 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.008229 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.008229 +} +kpi_value { + floatVal: 0.99956125 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.008229 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.008229 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.008229 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.008229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956125}, "timestamp": {"timestamp": 1681824274.008229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.008229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.008229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.008229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06360006332397461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.68919229507446 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045042432555839274 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016109248584133546 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004169464111328125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 208 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.081066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.0823231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.0823231 +} +kpi_value { + floatVal: 0.999563396 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.0823231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.0823231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.0823231 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.082323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995634}, "timestamp": {"timestamp": 1681824274.082323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.082323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.082323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.082323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037384748458862305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.73570609092712 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004489977833476256 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016071980396700982 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023555755615234375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 209 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.123931 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.124727 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.124727 +} +kpi_value { + floatVal: 0.999565482 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.124727 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.124727 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.124727 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.124727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995655}, "timestamp": {"timestamp": 1681824274.124727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.124727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.124727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.124727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06781125068664551 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.81011652946472 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044859387950661284 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0016033774438040291 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004775285720825195 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 210 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.203947 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.20529 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.20529 +} +kpi_value { + floatVal: 0.999567568 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.20529 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.20529 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.20529 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.20529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956757}, "timestamp": {"timestamp": 1681824274.20529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.20529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.20529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.20529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041570186614990234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 255.8619360923767 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5689723491668701 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004476282734013388 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015996346623215535 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00397181510925293 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 211 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.346092 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.346369 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.346369 +} +kpi_value { + floatVal: 0.999569654 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.346369 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.346369 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.346369 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.346369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956965}, "timestamp": {"timestamp": 1681824274.346369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.346369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.346369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.346369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0390317440032959 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.00152683258057 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 8.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004469981117235532 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015958837313517114 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001714944839477539 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 212 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.388530 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.3888061 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.3888061 +} +kpi_value { + floatVal: 0.999571681 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.3888061 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.3888061 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.3888061 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.388806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995717}, "timestamp": {"timestamp": 1681824274.388806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.388806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.388806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.388806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026436567306518555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.0316963195801 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 8.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004459617450667169 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015922046242860873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004633903503417969 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 213 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.422316 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.4234951 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.4234951 +} +kpi_value { + floatVal: 0.999573708 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.4234951 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.4234951 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.4234951 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.423495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995737}, "timestamp": {"timestamp": 1681824274.423495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.423495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.423495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.423495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06230974197387695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.1014049053192 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044488575566281504 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015885577838436807 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022525787353515625 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 214 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.489611 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.4901659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.4901659 +} +kpi_value { + floatVal: 0.999575675 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.4901659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.4901659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.4901659 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.490166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995757}, "timestamp": {"timestamp": 1681824274.490166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.490166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.490166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.490166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03669881820678711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.14261746406555 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044345305447445014 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015849977328263698 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013680458068847656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 215 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.529159 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.5293889 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.5293889 +} +kpi_value { + floatVal: 0.999577641 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.5293889 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.5293889 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.5293889 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.529389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957764}, "timestamp": {"timestamp": 1681824274.529389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.529389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.529389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.529389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.051332950592041016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.1971936225891 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 22767.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004420403320519081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015814601698239392 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002262679918203503 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021255016326904297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 216 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.585561 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824274.5858309 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824274.5858309 +} +kpi_value { + floatVal: 0.999579608 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824274.5858309 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824274.5858309 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824274.5858309 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.585831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995796}, "timestamp": {"timestamp": 1681824274.585831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.585831}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.378348}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.585831}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.378348}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.585831}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04236602783203125 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52944:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '52944', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03804755210876465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -31,40 +28663,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975274801254272 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 736.8120934963226 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.24040937423706 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037508543212317957 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013569552639101628 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026459404034540057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032253265380859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044103623378575536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015778810545238066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022625201381742954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026857852935791016 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7425 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.428412 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.628998 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -74,10 +28706,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.428951 + timestamp: 1681824274.6295431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -86,10 +28718,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.428951 + timestamp: 1681824274.6295431 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999581575 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -98,10 +28730,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.428951 + timestamp: 1681824274.6295431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -110,10 +28742,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.428951 + timestamp: 1681824274.6295431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -122,31 +28754,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.428951 + timestamp: 1681824274.6295431 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.428951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.629543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.428951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995816}, "timestamp": {"timestamp": 1681824274.629543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.428951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.629543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.428951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.629543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.428951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.629543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04822707176208496 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05711841583251953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -166,40 +28798,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975278377532959 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 736.8683547973633 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.30334734916687 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000375062644155834 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013568653165070747 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026454852195456624 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002385377883911133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004400335492057845 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001574327191896098 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022612401517108083 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003139019012451172 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7426 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.483665 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 218 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.693211 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -209,10 +28841,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.4838779 + timestamp: 1681824274.694102 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -221,10 +28853,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.4838779 + timestamp: 1681824274.694102 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999573648 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -233,10 +28865,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.4838779 + timestamp: 1681824274.694102 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -245,10 +28877,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.4838779 + timestamp: 1681824274.694102 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -257,31 +28889,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.4838779 + timestamp: 1681824274.694102 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.483878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.694102}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.483878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957365}, "timestamp": {"timestamp": 1681824274.694102}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.483878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.694102}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.483878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.694102}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.483878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.694102}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02221226692199707 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03151082992553711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -301,40 +28933,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975281357765198 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 736.8975443840027 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.34114146232605 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003750286131047798 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013567771359669452 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002645030035637319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002225160598754883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000439276638096326 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015707684816687662 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022625201381742954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015931129455566406 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7427 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.511359 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 219 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.728088 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -344,10 +28976,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.511586 + timestamp: 1681824274.728334 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -356,10 +28988,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.511586 + timestamp: 1681824274.728334 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999563932 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -368,10 +29000,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.511586 + timestamp: 1681824274.728334 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -380,10 +29012,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.511586 + timestamp: 1681824274.728334 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -392,31 +29024,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.511586 + timestamp: 1681824274.728334 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.511586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.728334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.511586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956393}, "timestamp": {"timestamp": 1681824274.728334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.511586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.728334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.511586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.728334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.511586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.728334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06377553939819336 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05335831642150879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -436,40 +29068,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975284934043884 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 736.9667754173279 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.39898467063904 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003750124207764135 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013566865219961114 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004604816436767578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004381538805318996 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001567282561983439 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022612401517108083 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023093223571777344 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7428 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.583953 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 220 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.787230 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -479,10 +29111,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.5843151 + timestamp: 1681824274.7876329 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -491,10 +29123,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.5843151 + timestamp: 1681824274.7876329 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999554932 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -503,10 +29135,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.5843151 + timestamp: 1681824274.7876329 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -515,10 +29147,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.5843151 + timestamp: 1681824274.7876329 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -527,31 +29159,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.5843151 + timestamp: 1681824274.7876329 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.584315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.787633}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.584315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955493}, "timestamp": {"timestamp": 1681824274.787633}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.584315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.787633}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.584315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.787633}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.584315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.787633}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03940248489379883 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034826040267944336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -571,40 +29203,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975288510322571 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.0150806903839 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.4393877983093 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.48440074920654297 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003749882816674276 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013565968040207283 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026803016662597656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004374749036147617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015637650827074448 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022625201381742954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030837059020996094 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7429 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.629842 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 221 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.835968 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -614,10 +29248,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.6300881 + timestamp: 1681824274.836848 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -626,10 +29260,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.6300881 + timestamp: 1681824274.836848 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999556959 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -638,10 +29272,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.6300881 + timestamp: 1681824274.836848 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -650,10 +29284,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.6300881 + timestamp: 1681824274.836848 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -662,31 +29296,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.6300881 + timestamp: 1681824274.836848 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.630088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.836848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.630088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955696}, "timestamp": {"timestamp": 1681824274.836848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.630088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.836848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.630088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.836848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.630088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.836848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09805011749267578 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06028032302856445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -706,40 +29340,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997529149055481 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.1195316314697 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.51301169395447 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 532.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003749791653478997 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013565057366761281 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003282308578491211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043692840876787697 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015602602655692755 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002262679918203503 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.012415409088134766 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7430 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.737021 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.911107 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -749,10 +29383,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.737277 + timestamp: 1681824274.911422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -761,10 +29395,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.737277 + timestamp: 1681824274.911422 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999559 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -773,10 +29407,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.737277 + timestamp: 1681824274.911422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -785,10 +29419,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.737277 + timestamp: 1681824274.911422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -797,31 +29431,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.737277 + timestamp: 1681824274.911422 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.737277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.911422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.737277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999559}, "timestamp": {"timestamp": 1681824274.911422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.737277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.911422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.737277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.911422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.737277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.911422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03847861289978027 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023628711700439453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -841,40 +29475,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975295066833496 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.1671261787415 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.55120372772217 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 532.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003749596388826189 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013564155044455727 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030846595764160156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043584944731493236 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015568409980398943 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022625201381742954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004677295684814453 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7431 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.786129 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 223 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:34.941131 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -884,10 +29518,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.7864339 + timestamp: 1681824274.9413459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -896,10 +29530,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.7864339 + timestamp: 1681824274.9413459 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999560952 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -908,10 +29542,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.7864339 + timestamp: 1681824274.9413459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -920,10 +29554,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.7864339 + timestamp: 1681824274.9413459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -932,31 +29566,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.7864339 + timestamp: 1681824274.9413459 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.786434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.941346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.786434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956095}, "timestamp": {"timestamp": 1681824274.941346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.786434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.941346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.786434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.941346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.786434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824274.941346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02551126480102539 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05777120590209961 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -976,40 +29610,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975298643112183 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.2032861709595 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.615193605423 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 532.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037493949213548413 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013563253581901323 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446598349139094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003973484039306641 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004349606728542962 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015534187186547403 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002262679918203503 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018124580383300781 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7432 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.820330 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 224 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.003286 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1019,10 +29653,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.820919 + timestamp: 1681824275.003545 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1031,10 +29665,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.820919 + timestamp: 1681824275.003545 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999562919 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1043,10 +29677,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.820919 + timestamp: 1681824275.003545 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1055,10 +29689,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.820919 + timestamp: 1681824275.003545 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1067,31 +29701,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.820919 + timestamp: 1681824275.003545 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.820919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.003545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.820919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995629}, "timestamp": {"timestamp": 1681824275.003545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.820919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.003545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.820919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.003545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.820919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.003545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09114289283752441 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031267642974853516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1111,40 +29745,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975301623344421 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.3031227588654 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.6508860588074 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 532.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003749204378508179 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001356235113160558 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003102540969848633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043497091417925223 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015499628404875949 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002562999725341797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7433 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.918789 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 225 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.038899 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1154,10 +29788,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9192791 + timestamp: 1681824275.039257 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1166,10 +29800,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9192791 + timestamp: 1681824275.039257 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999564886 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1178,10 +29812,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9192791 + timestamp: 1681824275.039257 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1190,10 +29824,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9192791 + timestamp: 1681824275.039257 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1202,31 +29836,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9192791 + timestamp: 1681824275.039257 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.919279}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.039257}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.919279}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995649}, "timestamp": {"timestamp": 1681824275.039257}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.919279}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.039257}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.919279}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.039257}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.919279}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.039257}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030182838439941406 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05609536170959473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1246,40 +29880,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975305199623108 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.3406460285187 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.71135115623474 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 532.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003749072292916961 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013561443698191422 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446598349139094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026710033416748047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004344116978808842 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015465526658566527 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018768310546875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7434 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:20.956457 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 226 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.098655 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1289,10 +29923,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9566841 + timestamp: 1681824275.0988979 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1301,10 +29935,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9566841 + timestamp: 1681824275.0988979 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999566793 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1313,10 +29947,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9566841 + timestamp: 1681824275.0988979 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1325,10 +29959,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9566841 + timestamp: 1681824275.0988979 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1337,31 +29971,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725080.9566841 + timestamp: 1681824275.0988979 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.956684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.098898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725080.956684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995668}, "timestamp": {"timestamp": 1681824275.098898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.956684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.098898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.956684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.098898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725080.956684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.098898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04319596290588379 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05051064491271973 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1381,40 +30015,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975308775901794 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.391529083252 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.76542592048645 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 524.0}, {"feature": 7.0}, {"feature": 857.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003748897745157514 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001356054001838609 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004405498504638672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004342559238871157 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015431441791413198 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019421577453613281 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7435 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.009972 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 227 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.152821 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1424,10 +30058,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.010345 + timestamp: 1681824275.15307 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1436,10 +30070,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.010345 + timestamp: 1681824275.15307 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99956876 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1448,10 +30082,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.010345 + timestamp: 1681824275.15307 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1460,10 +30094,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.010345 + timestamp: 1681824275.15307 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1472,31 +30106,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.010345 + timestamp: 1681824275.15307 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.010345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.15307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.010345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956876}, "timestamp": {"timestamp": 1681824275.15307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.010345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.15307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.010345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.15307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.010345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.15307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02516484260559082 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.054018259048461914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1516,40 +30150,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975311756134033 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.426860332489 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.82426953315735 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41294:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41294", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 1723.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2027.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003748720421633273 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355963679145601 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644584747031331 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024716854095458984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043337959096677146 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015398129797656313 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020644664764404297 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7436 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.041834 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 228 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.221029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1559,10 +30193,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.042058 + timestamp: 1681824275.2246029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1571,10 +30205,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.042058 + timestamp: 1681824275.2246029 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999570668 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1583,10 +30217,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.042058 + timestamp: 1681824275.2246029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1595,10 +30229,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.042058 + timestamp: 1681824275.2246029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1607,31 +30241,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.042058 + timestamp: 1681824275.2246029 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.042058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.224603}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.042058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957067}, "timestamp": {"timestamp": 1681824275.224603}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.042058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.224603}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.042058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.224603}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.042058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.224603}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.051283836364746094 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41294:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41294', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07162141799926758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1651,40 +30285,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997531533241272 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.4847633838654 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.9092769622803 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41294:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41294", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 1723.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037487519140640434 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013558725399259845 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028128623962402344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043244243118562226 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015365124279397798 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002022981643676758 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7437 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.100205 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 229 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.296985 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1694,10 +30328,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.1004381 + timestamp: 1681824275.2974639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1706,10 +30340,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.1004381 + timestamp: 1681824275.2974639 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999572515 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1718,10 +30352,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.1004381 + timestamp: 1681824275.2974639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1730,10 +30364,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.1004381 + timestamp: 1681824275.2974639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1742,31 +30376,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.1004381 + timestamp: 1681824275.2974639 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.100438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.297464}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.100438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995725}, "timestamp": {"timestamp": 1681824275.297464}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.100438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.297464}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.100438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.297464}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.100438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.297464}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024719715118408203 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41294:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41294', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029450178146362305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1786,40 +30420,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975318908691406 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.5165696144104 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.94307565689087 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41294:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41294", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 1723.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003748525334072619 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355782799954048 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644584747031331 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002314329147338867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043128611616101924 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015332683962297788 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002056121826171875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7438 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.130843 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 230 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.330967 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1829,10 +30463,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.131048 + timestamp: 1681824275.331459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1841,10 +30475,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.131048 + timestamp: 1681824275.331459 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999574363 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1853,10 +30487,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.131048 + timestamp: 1681824275.331459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -1865,10 +30499,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.131048 + timestamp: 1681824275.331459 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -1877,31 +30511,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.131048 + timestamp: 1681824275.331459 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.131048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.331459}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.131048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957436}, "timestamp": {"timestamp": 1681824275.331459}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.131048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.331459}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.131048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.331459}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.131048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.331459}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07859992980957031 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41294:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41294', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04642772674560547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -1921,40 +30555,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975321888923645 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.6011502742767 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 256.99412178993225 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41294:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41294", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 1723.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5475978851318359 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037483999710551325 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013556921013335292 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032639503479003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043044620656178565 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015299990587682433 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002187013626098633 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7439 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.217441 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 231 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.389066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -1964,10 +30600,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.217716 + timestamp: 1681824275.38949 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -1976,10 +30612,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.217716 + timestamp: 1681824275.38949 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999576211 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -1988,10 +30624,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.217716 + timestamp: 1681824275.38949 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2000,10 +30636,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.217716 + timestamp: 1681824275.38949 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2012,31 +30648,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.217716 + timestamp: 1681824275.38949 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.217716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.38949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.217716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995762}, "timestamp": {"timestamp": 1681824275.38949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.217716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.38949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.217716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.38949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.217716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.38949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07285952568054199 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41294:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41294', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033814430236816406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2056,40 +30692,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975325465202332 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.6819558143616 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.0396194458008 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41294:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41294", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 9.0}, {"feature": 1746.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037482638662006277 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013556014982080155 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446598349139094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024695396423339844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004299156626702511 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015267193806279354 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020906925201416016 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7440 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.296549 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 232 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.427370 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2099,10 +30735,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.2967551 + timestamp: 1681824275.427901 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2111,10 +30747,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.2967551 + timestamp: 1681824275.427901 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999578059 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2123,10 +30759,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.2967551 + timestamp: 1681824275.427901 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2135,10 +30771,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.2967551 + timestamp: 1681824275.427901 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2147,31 +30783,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.2967551 + timestamp: 1681824275.427901 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.296755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.427901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.296755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957806}, "timestamp": {"timestamp": 1681824275.427901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.296755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.427901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.296755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.427901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.296755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.427901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027693510055541992 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41294:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41294', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07247591018676758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2191,40 +30827,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975329041481018 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.7158424854279 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.11955523490906 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42096:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42096", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 18.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003748049804434669 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355511662668694 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002269744873046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004291164150657412 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015234882753895605 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020716190338134766 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7441 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.330287 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 233 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.507888 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2234,10 +30870,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.330492 + timestamp: 1681824275.5081711 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2246,10 +30882,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.330492 + timestamp: 1681824275.5081711 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999579906 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2258,10 +30894,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.330492 + timestamp: 1681824275.5081711 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2270,10 +30906,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.330492 + timestamp: 1681824275.5081711 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2282,31 +30918,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.330492 + timestamp: 1681824275.5081711 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.330492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.508171}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.330492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995799}, "timestamp": {"timestamp": 1681824275.508171}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.330492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.508171}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.330492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.508171}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.330492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.508171}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0609278678894043 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42096:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42096', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038221120834350586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2326,40 +30962,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975332617759705 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.7828378677368 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.1624798774719 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42096:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42096", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 4593.0}, {"feature": 18.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 463.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003747896708467852 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355421231237711 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644584747031331 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025463104248046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004282315029328864 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015202894811184612 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017893314361572266 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7442 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.399365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 234 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.549621 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2369,10 +31005,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.399605 + timestamp: 1681824275.550118 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2381,10 +31017,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.399605 + timestamp: 1681824275.550118 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999581695 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2393,10 +31029,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.399605 + timestamp: 1681824275.550118 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2405,10 +31041,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.399605 + timestamp: 1681824275.550118 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2417,31 +31053,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.399605 + timestamp: 1681824275.550118 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.399605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.550118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.399605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995817}, "timestamp": {"timestamp": 1681824275.550118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.399605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.550118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.399605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.550118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.399605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.550118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031781911849975586 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42096:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42096', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04019904136657715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2461,40 +31097,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975335597991943 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.8231346607208 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.2060971260071 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037476643375484553 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355331657200299 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644549822434783 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003267049789428711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042740977740787127 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015171034494682037 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001903533935546875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7443 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.438712 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 235 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.593151 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2504,10 +31140,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.438942 + timestamp: 1681824275.593601 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2516,10 +31152,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.438942 + timestamp: 1681824275.593601 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999583483 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2528,10 +31164,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.438942 + timestamp: 1681824275.593601 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2540,10 +31176,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.438942 + timestamp: 1681824275.593601 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2552,31 +31188,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.438942 + timestamp: 1681824275.593601 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.438942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.593601}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.438942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995835}, "timestamp": {"timestamp": 1681824275.593601}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.438942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.593601}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.438942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.593601}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.438942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.593601}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06354856491088867 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03641104698181152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2596,40 +31232,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997533917427063 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.8952939510345 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.24596667289734 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 463.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037474333603147264 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001355242083976757 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026444598915986717 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003720998764038086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042644005823264813 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015139588188976187 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015187263488769531 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7444 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.512485 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 236 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.632622 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2639,10 +31275,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.513046 + timestamp: 1681824275.632992 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2651,10 +31287,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.513046 + timestamp: 1681824275.632992 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999585271 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2663,10 +31299,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.513046 + timestamp: 1681824275.632992 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2675,10 +31311,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.513046 + timestamp: 1681824275.632992 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2687,31 +31323,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.513046 + timestamp: 1681824275.632992 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.513046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.632992}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.513046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995853}, "timestamp": {"timestamp": 1681824275.632992}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.513046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.632992}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.513046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.632992}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.513046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.632992}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0639491081237793 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04855155944824219 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2731,40 +31367,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975342750549316 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 737.9680941104889 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.29748249053955 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 530.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037473116754607375 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013551514706787587 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644549822434783 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038917064666748047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042722570780617526 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015108096465985268 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021533966064453125 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.585490 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 237 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.685027 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2774,10 +31410,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.58653 + timestamp: 1681824275.685236 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2786,10 +31422,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.58653 + timestamp: 1681824275.685236 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999587 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2798,10 +31434,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.58653 + timestamp: 1681824275.685236 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2810,10 +31446,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.58653 + timestamp: 1681824275.685236 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2822,31 +31458,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.58653 + timestamp: 1681824275.685236 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.58653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.685236}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.58653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999587}, "timestamp": {"timestamp": 1681824275.685236}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.58653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.685236}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.58653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.685236}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.58653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.685236}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03218531608581543 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02142477035522461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -2866,40 +31502,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975345730781555 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.010707616806 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.32269859313965 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 562.0}, {"feature": 6.0}, {"feature": 893.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003747062199002218 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013550621787608104 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026444598915986717 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003691434860229492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004262214611155302 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015077116027074275 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014786720275878906 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7446 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.627733 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 238 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.709244 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -2909,10 +31545,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.6284161 + timestamp: 1681824275.7094419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -2921,10 +31557,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.6284161 + timestamp: 1681824275.7094419 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999588728 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -2933,10 +31569,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.6284161 + timestamp: 1681824275.7094419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -2945,10 +31581,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.6284161 + timestamp: 1681824275.7094419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -2957,31 +31593,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.6284161 + timestamp: 1681824275.7094419 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.628416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.709442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.628416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995887}, "timestamp": {"timestamp": 1681824275.709442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.628416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.709442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.628416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.709442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.628416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.709442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05566596984863281 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06708240509033203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3001,40 +31637,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975349307060242 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.0751059055328 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.39258909225464 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 849.0}, {"feature": 5.0}, {"feature": 981.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 562.0}, {"feature": 6.0}, {"feature": 893.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037467882722929844 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013549732570277122 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026443699607625604 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0046842098236083984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042550883983616487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001504594253324208 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015838146209716797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7447 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.693206 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.779309 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3044,10 +31680,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.694494 + timestamp: 1681824275.779532 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3056,10 +31692,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.694494 + timestamp: 1681824275.779532 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999590456 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3068,10 +31704,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.694494 + timestamp: 1681824275.779532 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3080,10 +31716,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.694494 + timestamp: 1681824275.779532 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3092,31 +31728,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.694494 + timestamp: 1681824275.779532 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.694494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.779532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.694494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959046}, "timestamp": {"timestamp": 1681824275.779532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.694494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.779532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.694494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.779532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.694494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.779532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03887677192687988 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025457143783569336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3136,40 +31772,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975352883338928 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.1253077983856 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.42110419273376 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 849.0}, {"feature": 5.0}, {"feature": 981.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 562.0}, {"feature": 6.0}, {"feature": 893.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746660620873323 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013548827395698465 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026444598915986717 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003027677536010742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000424881686194567 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0015014877138715167 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015375614166259766 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7448 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.742032 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 240 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.807785 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3179,10 +31815,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.7423229 + timestamp: 1681824275.8080139 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3191,10 +31827,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.7423229 + timestamp: 1681824275.8080139 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999592185 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3203,10 +31839,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.7423229 + timestamp: 1681824275.8080139 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3215,10 +31851,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.7423229 + timestamp: 1681824275.8080139 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3227,31 +31863,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.7423229 + timestamp: 1681824275.8080139 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.742323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.808014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.742323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995922}, "timestamp": {"timestamp": 1681824275.808014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.742323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.808014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.742323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.808014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.742323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.808014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07634115219116211 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026307344436645508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3271,40 +31907,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975355863571167 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.2112176418304 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.4504520893097 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 849.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.4491889476776123 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 562.0}, {"feature": 7.0}, {"feature": 1256.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746713831932491 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013547918704115978 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644549822434783 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005460500717163086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004244927042531027 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014983814736396874 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017046928405761719 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7449 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.831729 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 241 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.957049 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3314,10 +31952,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.832943 + timestamp: 1681824275.9572549 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3326,10 +31964,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.832943 + timestamp: 1681824275.9572549 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999593914 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3338,10 +31976,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.832943 + timestamp: 1681824275.9572549 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3350,10 +31988,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.832943 + timestamp: 1681824275.9572549 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3362,31 +32000,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.832943 + timestamp: 1681824275.9572549 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.832943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.957255}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.832943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995939}, "timestamp": {"timestamp": 1681824275.957255}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.832943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.957255}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.832943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.957255}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.832943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.957255}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04543018341064453 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03444385528564453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3406,40 +32044,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975359439849854 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.2701966762543 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.6080873012543 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60330:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60330", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 849.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037466877320587583 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013547009604597399 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644584747031331 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003590822219848633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004235965648111849 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014953471544489898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021774768829345703 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7450 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.887343 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 242 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:35.996035 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3449,10 +32087,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.8887191 + timestamp: 1681824275.9964931 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3461,10 +32099,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.8887191 + timestamp: 1681824275.9964931 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999595582 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3473,10 +32111,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.8887191 + timestamp: 1681824275.9964931 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3485,10 +32123,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.8887191 + timestamp: 1681824275.9964931 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3497,31 +32135,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.8887191 + timestamp: 1681824275.9964931 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.888719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.996493}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.888719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995956}, "timestamp": {"timestamp": 1681824275.996493}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.888719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.996493}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.888719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.996493}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.888719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824275.996493}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04587697982788086 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60330:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60330', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022994279861450195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3541,40 +32179,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975362420082092 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.325519323349 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.635559797287 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 8.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746572558580229 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013546104148522762 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002644619671627879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004166841506958008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042257483410476534 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014923517810646048 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002309083938598633 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7451 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.943671 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 243 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.023650 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3584,10 +32222,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.9444749 + timestamp: 1681824276.024143 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3596,10 +32234,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.9444749 + timestamp: 1681824276.024143 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999597251 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3608,10 +32246,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.9444749 + timestamp: 1681824276.024143 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3620,10 +32258,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.9444749 + timestamp: 1681824276.024143 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3632,31 +32270,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.9444749 + timestamp: 1681824276.024143 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.944475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.024143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.944475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959725}, "timestamp": {"timestamp": 1681824276.024143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.944475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.024143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.944475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.024143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.944475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.024143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04163622856140137 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05347800254821777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3676,40 +32314,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975365996360779 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.3784563541412 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.6936836242676 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 8.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037466293912964823 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013545196115894616 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446598349139094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0041713714599609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042150543332786954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001489383839678212 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017423629760742188 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7452 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:21.996909 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 244 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.081104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3719,10 +32357,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.997288 + timestamp: 1681824276.0815909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3731,10 +32369,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.997288 + timestamp: 1681824276.0815909 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99959892 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3743,10 +32381,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.997288 + timestamp: 1681824276.0815909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3755,10 +32393,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.997288 + timestamp: 1681824276.0815909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3767,31 +32405,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725081.997288 + timestamp: 1681824276.0815909 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.997288}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.081591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725081.997288}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995989}, "timestamp": {"timestamp": 1681824276.081591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.997288}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.081591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.997288}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.081591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725081.997288}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.081591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03710031509399414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02922654151916504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3811,40 +32449,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975369572639465 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.4259631633759 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.72694420814514 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746564840204643 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013544288524057308 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003921985626220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042036661916241354 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014864476194111423 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017542839050292969 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7453 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.044473 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 245 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.114303 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3854,10 +32492,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.04557 + timestamp: 1681824276.1148119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -3866,10 +32504,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.04557 + timestamp: 1681824276.1148119 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99960053 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -3878,10 +32516,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.04557 + timestamp: 1681824276.1148119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -3890,10 +32528,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.04557 + timestamp: 1681824276.1148119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -3902,31 +32540,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.04557 + timestamp: 1681824276.1148119 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.04557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.114812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.04557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996005}, "timestamp": {"timestamp": 1681824276.114812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.04557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.114812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.04557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.114812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.04557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.114812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.11488556861877441 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08997941017150879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -3946,40 +32584,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975372552871704 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.5510947704315 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.8206045627594 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 562.0}, {"feature": 7.0}, {"feature": 1256.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746575142790046 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013543379997935797 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003619670867919922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004279865597931259 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014882104241126534 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004488229751586914 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7454 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.168777 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.212615 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -3989,10 +32627,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.16927 + timestamp: 1681824276.2128811 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4001,10 +32639,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.16927 + timestamp: 1681824276.2128811 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999602199 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4013,10 +32651,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.16927 + timestamp: 1681824276.2128811 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4025,10 +32663,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.16927 + timestamp: 1681824276.2128811 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4037,31 +32675,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.16927 + timestamp: 1681824276.2128811 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.16927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.212881}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.16927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996022}, "timestamp": {"timestamp": 1681824276.212881}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.16927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.212881}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.16927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.212881}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.16927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.212881}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025696277618408203 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048662424087524414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4081,40 +32719,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975376129150391 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.5861308574677 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.8775165081024 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 9.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746341241368715 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001354248668202164 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0048177242279052734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004270952093595948 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014852605944996266 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014007091522216797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7455 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.203134 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 247 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.264029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4124,10 +32762,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.203789 + timestamp: 1681824276.264226 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4136,10 +32774,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.203789 + timestamp: 1681824276.264226 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999603808 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4148,10 +32786,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.203789 + timestamp: 1681824276.264226 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4160,10 +32798,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.203789 + timestamp: 1681824276.264226 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4172,31 +32810,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.203789 + timestamp: 1681824276.264226 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.203789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.264226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.203789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996038}, "timestamp": {"timestamp": 1681824276.264226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.203789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.264226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.203789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.264226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.203789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.264226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03687167167663574 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02283763885498047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4216,40 +32854,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975379705429077 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.6316959857941 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.903151512146 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 10.0}, {"feature": 524.0}, {"feature": 4.0}, {"feature": 656.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746288185878612 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013541579266084208 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003061532974243164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042578695443338686 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014824056881721256 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012545585632324219 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7456 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.247273 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 248 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.289501 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4259,10 +32897,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.247571 + timestamp: 1681824276.289717 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4271,10 +32909,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.247571 + timestamp: 1681824276.289717 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999605417 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4283,10 +32921,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.247571 + timestamp: 1681824276.289717 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4295,10 +32933,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.247571 + timestamp: 1681824276.289717 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4307,31 +32945,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.247571 + timestamp: 1681824276.289717 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.247571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.289717}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.247571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996054}, "timestamp": {"timestamp": 1681824276.289717}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.247571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.289717}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.247571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.289717}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.247571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.289717}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052098989486694336 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033031463623046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4351,40 +32989,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975382685661316 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.6914064884186 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 257.9401979446411 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003746115241207975 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013540679492692893 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003818035125732422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004259075090031039 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014794271933689458 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023832321166992188 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7457 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.308527 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.327906 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4394,10 +33032,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3089459 + timestamp: 1681824276.328172 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4406,10 +33044,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3089459 + timestamp: 1681824276.328172 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999606967 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4418,10 +33056,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3089459 + timestamp: 1681824276.328172 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4430,10 +33068,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3089459 + timestamp: 1681824276.328172 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4442,31 +33080,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3089459 + timestamp: 1681824276.328172 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.308946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.328172}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.308946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960697}, "timestamp": {"timestamp": 1681824276.328172}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.308946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.328172}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.308946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.328172}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.308946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.328172}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.062422990798950195 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06558656692504883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4486,40 +33124,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975386261940002 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.762672662735 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.00986528396606 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 22767.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037459830053140165 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013539776481917766 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029566287994384766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004249968831427395 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014765352965041274 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001802206039428711 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7458 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.377514 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 250 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.396809 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4529,10 +33167,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3779271 + timestamp: 1681824276.397043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4541,10 +33179,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3779271 + timestamp: 1681824276.397043 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.9996 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4553,10 +33191,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3779271 + timestamp: 1681824276.397043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4565,10 +33203,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3779271 + timestamp: 1681824276.397043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4577,31 +33215,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.3779271 + timestamp: 1681824276.397043 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.377927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.397043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.377927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996}, "timestamp": {"timestamp": 1681824276.397043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.377927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.397043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.377927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.397043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.377927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.397043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022769927978515625 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03575325012207031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4621,40 +33259,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975389838218689 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.7918953895569 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.04886388778687 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.478893518447876 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003745612553093582 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013538906636543777 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018999576568603516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004246232143428874 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014736028998742596 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018711090087890625 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7459 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.405715 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 251 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.442092 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4664,10 +33304,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.410059 + timestamp: 1681824276.44235 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4676,10 +33316,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.410059 + timestamp: 1681824276.44235 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999601603 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4688,10 +33328,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.410059 + timestamp: 1681824276.44235 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4700,10 +33340,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.410059 + timestamp: 1681824276.44235 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4712,31 +33352,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.410059 + timestamp: 1681824276.44235 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.410059}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.44235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.410059}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996016}, "timestamp": {"timestamp": 1681824276.44235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.410059}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.44235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.410059}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.44235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.410059}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.44235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03608298301696777 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05894064903259277 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4756,40 +33396,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975392818450928 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.8349227905273 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.1173400878906 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037454471693389196 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013538006707684122 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446598349139094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025463104248046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004239945666908863 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014707099019996993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001863718032836914 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7460 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.476250 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 252 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.504501 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4799,10 +33439,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.4766271 + timestamp: 1681824276.5047491 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4811,10 +33451,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.4766271 + timestamp: 1681824276.5047491 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999603212 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4823,10 +33463,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.4766271 + timestamp: 1681824276.5047491 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4835,10 +33475,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.4766271 + timestamp: 1681824276.5047491 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4847,31 +33487,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.4766271 + timestamp: 1681824276.5047491 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.476627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.504749}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.476627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996032}, "timestamp": {"timestamp": 1681824276.504749}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.476627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.504749}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.476627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.504749}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.476627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.504749}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04099726676940918 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05097460746765137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -4891,40 +33531,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975396394729614 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.909764289856 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.1724474430084 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037453654487600463 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001353710126591364 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026446999981999397 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033724308013916016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043511765538770044 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001478383062476773 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.013925552368164062 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7461 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.527558 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 253 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.572716 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -4934,10 +33574,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.5277989 + timestamp: 1681824276.573457 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -4946,10 +33586,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.5277989 + timestamp: 1681824276.573457 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999604762 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -4958,10 +33598,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.5277989 + timestamp: 1681824276.573457 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -4970,10 +33610,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.5277989 + timestamp: 1681824276.573457 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -4982,31 +33622,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.5277989 + timestamp: 1681824276.573457 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.527799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.573457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.527799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960476}, "timestamp": {"timestamp": 1681824276.573457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.527799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.573457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.527799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.573457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.527799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.573457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05908489227294922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03469395637512207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5026,40 +33666,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975399971008301 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 738.9784059524536 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.22391533851624 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 14379.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003745334581004571 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013536194428878246 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.011383771896362305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004344454244160511 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014755087324148251 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016355514526367188 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7462 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.602470 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.610860 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5069,10 +33709,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6027579 + timestamp: 1681824276.611084 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5081,10 +33721,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6027579 + timestamp: 1681824276.611084 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999606311 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5093,10 +33733,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6027579 + timestamp: 1681824276.611084 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5105,10 +33745,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6027579 + timestamp: 1681824276.611084 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5117,31 +33757,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6027579 + timestamp: 1681824276.611084 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.602758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.611084}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.602758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1681824276.611084}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.602758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.611084}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.602758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.611084}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.602758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.611084}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032053470611572266 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03523135185241699 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5161,40 +33801,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997540295124054 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.02663397789 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.26286220550537 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 790.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003745213461585336 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013535291555318233 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002645030035637319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029675960540771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004337770658928682 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014726512597787466 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021088123321533203 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7463 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.642893 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 255 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.652370 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5204,10 +33844,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6431749 + timestamp: 1681824276.6526351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5216,10 +33856,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6431749 + timestamp: 1681824276.6526351 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999607861 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5228,10 +33868,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6431749 + timestamp: 1681824276.6526351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5240,10 +33880,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6431749 + timestamp: 1681824276.6526351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5252,31 +33892,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.6431749 + timestamp: 1681824276.6526351 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.643175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.652635}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.643175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960786}, "timestamp": {"timestamp": 1681824276.652635}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.643175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.652635}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.643175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.652635}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.643175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.652635}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05556631088256836 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04578518867492676 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5296,40 +33936,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975406527519226 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.0901908874512 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.3148443698883 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 790.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037453106891437225 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013534387426288226 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026454852195456624 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003385782241821289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004331027337229898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014698116193485103 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022826596978120506 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002358675003051758 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7464 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.706489 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 256 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.702905 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5339,10 +33979,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.706754 + timestamp: 1681824276.7035489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5351,10 +33991,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.706754 + timestamp: 1681824276.7035489 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999609411 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5363,10 +34003,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.706754 + timestamp: 1681824276.7035489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5375,10 +34015,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.706754 + timestamp: 1681824276.7035489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5387,31 +34027,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.706754 + timestamp: 1681824276.7035489 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.706754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.703549}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.706754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996094}, "timestamp": {"timestamp": 1681824276.703549}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.706754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.703549}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.706754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.703549}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.706754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.703549}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042838335037231445 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031096220016479492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5431,40 +34071,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975410103797913 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.1409955024719 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.35056042671204 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 790.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 873.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 588.0}, {"feature": 3.0}, {"feature": 588.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037452256347864305 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013533482867910437 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026459404034540057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00606536865234375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043241264921855833 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001466990828703148 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002399444580078125 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7465 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.765636 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 257 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.738623 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5474,10 +34114,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.76644 + timestamp: 1681824276.73898 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5486,10 +34126,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.76644 + timestamp: 1681824276.73898 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99961096 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5498,10 +34138,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.76644 + timestamp: 1681824276.73898 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5510,10 +34150,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.76644 + timestamp: 1681824276.73898 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5522,31 +34162,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.76644 + timestamp: 1681824276.73898 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.76644}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.73898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.76644}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961096}, "timestamp": {"timestamp": 1681824276.73898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.76644}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.73898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.76644}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.73898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.76644}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.73898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04642343521118164 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06038069725036621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5566,40 +34206,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975413084030151 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.203773021698 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.41615629196167 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42102:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42102", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 15777.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037451917175857207 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013532576813914832 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003635406494140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004318440071299903 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014641734417397763 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018985271453857422 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7466 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.820350 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 258 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.803937 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5609,10 +34249,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.8205659 + timestamp: 1681824276.80414 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5621,10 +34261,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.8205659 + timestamp: 1681824276.80414 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999612451 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5633,10 +34273,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.8205659 + timestamp: 1681824276.80414 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5645,10 +34285,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.8205659 + timestamp: 1681824276.80414 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5657,31 +34297,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.8205659 + timestamp: 1681824276.80414 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.820566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.80414}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.820566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961245}, "timestamp": {"timestamp": 1681824276.80414}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.820566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.80414}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.820566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.80414}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.820566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.80414}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06209921836853027 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42102:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42102', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033896446228027344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5701,40 +34341,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975416660308838 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.2741656303406 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.45407152175903 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42102:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42102", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037451415513145103 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00135316713189602 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003144502639770508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004311786828792751 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001461383193357232 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002505779266357422 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7467 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.892046 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 259 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.873970 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5744,10 +34384,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.892303 + timestamp: 1681824276.874198 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5756,10 +34396,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.892303 + timestamp: 1681824276.874198 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999613941 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5768,10 +34408,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.892303 + timestamp: 1681824276.874198 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5780,10 +34420,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.892303 + timestamp: 1681824276.874198 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5792,31 +34432,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.892303 + timestamp: 1681824276.874198 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.892303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.874198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.892303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961394}, "timestamp": {"timestamp": 1681824276.874198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.892303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.874198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.892303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.874198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.892303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.874198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03746223449707031 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42102:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42102', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027891874313354492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5836,40 +34476,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975419640541077 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.3212263584137 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.518381357193 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42102:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42102", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003745115520050984 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001353076549868206 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031545162200927734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043041018809442626 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014586225680145168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022903550416231155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001836538314819336 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7468 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.937004 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 260 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.905876 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -5879,10 +34519,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.9373009 + timestamp: 1681824276.90652 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -5891,10 +34531,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.9373009 + timestamp: 1681824276.90652 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999615431 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -5903,10 +34543,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.9373009 + timestamp: 1681824276.90652 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -5915,10 +34555,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.9373009 + timestamp: 1681824276.90652 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -5927,31 +34567,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.9373009 + timestamp: 1681824276.90652 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.937301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.90652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.937301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961543}, "timestamp": {"timestamp": 1681824276.90652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.937301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.90652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.937301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.90652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.937301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.90652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03387737274169922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42102:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42102', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023715972900390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -5971,40 +34611,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975423216819763 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.3625888824463 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.54624223709106 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41964:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.49188804626464844 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003745082577782505 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013529859972869621 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031867027282714844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043001264321235975 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014558397027476075 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030374526977539062 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7469 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:22.983661 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 261 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:36.975229 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6014,10 +34656,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.98393 + timestamp: 1681824276.97612 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6026,10 +34668,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.98393 + timestamp: 1681824276.97612 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999616921 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6038,10 +34680,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.98393 + timestamp: 1681824276.97612 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6050,10 +34692,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.98393 + timestamp: 1681824276.97612 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6062,31 +34704,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725082.98393 + timestamp: 1681824276.97612 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.98393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.97612}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725082.98393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996169}, "timestamp": {"timestamp": 1681824276.97612}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.98393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.97612}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.98393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.97612}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725082.98393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824276.97612}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03157973289489746 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41964:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026417255401611328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6106,40 +34748,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997542679309845 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.406888961792 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.6200442314148 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41964:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003744994643003427 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013528956463909456 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003019571304321289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042933020194217507 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014531005530770194 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.007142543792724609 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7470 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.022140 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 262 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.013910 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6149,10 +34791,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.0224259 + timestamp: 1681824277.0147181 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6161,10 +34803,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.0224259 + timestamp: 1681824277.0147181 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999618411 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6173,10 +34815,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.0224259 + timestamp: 1681824277.0147181 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6185,10 +34827,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.0224259 + timestamp: 1681824277.0147181 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6197,31 +34839,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.0224259 + timestamp: 1681824277.0147181 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.022426}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.014718}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.022426}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996184}, "timestamp": {"timestamp": 1681824277.014718}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.022426}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.014718}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.022426}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.014718}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.022426}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.014718}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09490060806274414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41964:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030782222747802734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6241,40 +34883,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975429773330688 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.5087492465973 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.66186475753784 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41964:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037451152701566343 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013528055019580384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004134416580200195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042856635327518213 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014503880733747455 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002793550491333008 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7471 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.128011 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 263 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.051270 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6284,10 +34926,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.128298 + timestamp: 1681824277.0520489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6296,10 +34938,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.128298 + timestamp: 1681824277.0520489 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999619842 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6308,10 +34950,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.128298 + timestamp: 1681824277.0520489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6320,10 +34962,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.128298 + timestamp: 1681824277.0520489 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6332,31 +34974,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.128298 + timestamp: 1681824277.0520489 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.128298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.052049}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.128298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961984}, "timestamp": {"timestamp": 1681824277.052049}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.128298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.052049}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.128298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.052049}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.128298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.052049}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05276203155517578 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41964:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025620460510253906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6376,40 +35018,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975433349609375 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.5724337100983 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.69429779052734 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:41964:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "41964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 588.0}, {"feature": 3.0}, {"feature": 588.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037449621350833014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001352715621512985 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0035750865936279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004309465867029785 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014481530700089784 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029108524322509766 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7472 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.188655 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 264 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.083332 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6419,10 +35061,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.189074 + timestamp: 1681824277.08357 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6431,10 +35073,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.189074 + timestamp: 1681824277.08357 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999621272 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6443,10 +35085,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.189074 + timestamp: 1681824277.08357 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6455,10 +35097,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.189074 + timestamp: 1681824277.08357 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6467,31 +35109,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.189074 + timestamp: 1681824277.08357 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.189074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.08357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.189074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996213}, "timestamp": {"timestamp": 1681824277.08357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.189074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.08357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.189074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.08357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.189074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.08357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03807353973388672 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:41964:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '41964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023403167724609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6511,40 +35153,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975436925888062 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.6185088157654 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.72299242019653 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26984:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26984", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374485651057557 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013526254197664192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004912137985229492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042975116191642745 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014455486215958517 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012087821960449219 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7473 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.236792 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 265 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.109221 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6554,10 +35196,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.2378321 + timestamp: 1681824277.109422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6566,10 +35208,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.2378321 + timestamp: 1681824277.109422 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999622703 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6578,10 +35220,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.2378321 + timestamp: 1681824277.109422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6590,10 +35232,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.2378321 + timestamp: 1681824277.109422 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6602,31 +35244,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.2378321 + timestamp: 1681824277.109422 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.237832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.109422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.237832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996227}, "timestamp": {"timestamp": 1681824277.109422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.237832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.109422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.237832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.109422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.237832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.109422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039269447326660156 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26984:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '26984', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020949125289916992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6646,40 +35288,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.99754399061203 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.667783498764 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.7464940547943 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26984:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26984", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374464688967235 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013525361419243864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033435821533203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004287162927833659 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0001024029916152358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001442927212466205 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022903550416231155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016558170318603516 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7474 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.283641 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 266 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.133660 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6689,10 +35331,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.283895 + timestamp: 1681824277.1340311 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6701,10 +35343,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.283895 + timestamp: 1681824277.1340311 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999624133 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6713,10 +35355,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.283895 + timestamp: 1681824277.1340311 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6725,10 +35367,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.283895 + timestamp: 1681824277.1340311 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6737,31 +35379,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.283895 + timestamp: 1681824277.1340311 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.283895}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.134031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.283895}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962413}, "timestamp": {"timestamp": 1681824277.134031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.283895}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.134031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.283895}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.134031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.283895}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.134031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029442310333251953 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26984:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '26984', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04875612258911133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6781,40 +35423,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975443482398987 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.7047779560089 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.7992653846741 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26984:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26984", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003744478338946243 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013524464532439638 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003014802932739258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042747454639273076 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014403649524659607 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013616085052490234 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7475 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.320981 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 267 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.185862 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6824,10 +35466,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.321239 + timestamp: 1681824277.18608 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6836,10 +35478,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.321239 + timestamp: 1681824277.18608 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999625564 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6848,10 +35490,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.321239 + timestamp: 1681824277.18608 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6860,10 +35502,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.321239 + timestamp: 1681824277.18608 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -6872,31 +35514,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.321239 + timestamp: 1681824277.18608 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.321239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.18608}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.321239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962556}, "timestamp": {"timestamp": 1681824277.18608}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.321239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.18608}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.321239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.18608}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.321239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.18608}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05560731887817383 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26984:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '26984', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039647817611694336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -6916,40 +35558,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975446462631226 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.7682571411133 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.8417956829071 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26984:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26984", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 11.0}, {"feature": 8.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037442973399197973 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013523569030781653 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006214141845703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042647126811876226 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014377686580089922 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022887595696374774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013921260833740234 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.387225 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 268 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.228404 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -6959,10 +35601,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.3875811 + timestamp: 1681824277.22865 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -6971,10 +35613,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.3875811 + timestamp: 1681824277.22865 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999627 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -6983,10 +35625,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.3875811 + timestamp: 1681824277.22865 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -6995,10 +35637,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.3875811 + timestamp: 1681824277.22865 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7007,31 +35649,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.3875811 + timestamp: 1681824277.22865 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.387581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.22865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.387581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999627}, "timestamp": {"timestamp": 1681824277.22865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.387581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.22865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.387581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.22865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.387581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.22865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04198789596557617 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26984:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '26984', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0251162052154541 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7051,40 +35693,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975450038909912 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.8212671279907 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.88717341423035 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26984:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26984", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 9.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037441456123254324 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013522671019596658 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031256675720214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004254925609168122 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014351831741230483 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013883113861083984 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7477 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.437213 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 269 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.273656 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7094,10 +35736,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.437705 + timestamp: 1681824277.2740641 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7106,10 +35748,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.437705 + timestamp: 1681824277.2740641 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999628365 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7118,10 +35760,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.437705 + timestamp: 1681824277.2740641 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7130,10 +35772,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.437705 + timestamp: 1681824277.2740641 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7142,31 +35784,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.437705 + timestamp: 1681824277.2740641 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.437705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.274064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.437705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962837}, "timestamp": {"timestamp": 1681824277.274064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.437705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.274064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.437705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.274064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.437705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.274064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.054611921310424805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26984:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '26984', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027019739151000977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7186,40 +35828,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975453615188599 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.8836150169373 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.9169807434082 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14004:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14004", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037439268886576963 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001352178005256793 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005770206451416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042462068851347324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001432594332066648 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002285874797962606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014836788177490234 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7478 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.504168 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 270 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.303626 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7229,10 +35871,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.5055721 + timestamp: 1681824277.303858 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7241,10 +35883,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.5055721 + timestamp: 1681824277.303858 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999629736 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7253,10 +35895,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.5055721 + timestamp: 1681824277.303858 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7265,10 +35907,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.5055721 + timestamp: 1681824277.303858 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7277,31 +35919,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.5055721 + timestamp: 1681824277.303858 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.505572}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.303858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.505572}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962974}, "timestamp": {"timestamp": 1681824277.303858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.505572}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.303858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.505572}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.303858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.505572}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.303858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053069114685058594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14004:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14004', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02788257598876953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7321,40 +35963,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975456595420837 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 739.9512143135071 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 258.94777941703796 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14004:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14004", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.3615536689758301 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003743805392916266 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013520880121189172 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005804777145385742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004240292911864542 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001429981745475674 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024652481079101562 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7479 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.570855 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 271 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.374882 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7364,10 +36008,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.571496 + timestamp: 1681824277.375169 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7376,10 +36020,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.571496 + timestamp: 1681824277.375169 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999631107 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7388,10 +36032,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.571496 + timestamp: 1681824277.375169 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7400,10 +36044,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.571496 + timestamp: 1681824277.375169 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7412,31 +36056,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.571496 + timestamp: 1681824277.375169 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.571496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.375169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.571496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996311}, "timestamp": {"timestamp": 1681824277.375169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.571496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.375169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.571496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.375169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.571496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.375169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04500627517700195 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14004:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14004', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04524660110473633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7456,40 +36100,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975460171699524 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.0082232952118 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.0363914966583 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14004:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14004", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:22015:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "22015", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374361067422962 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013519986775867362 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005547046661376953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042318675717551205 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014274180686302635 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002285874797962606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003931999206542969 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7480 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.628289 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 272 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.425460 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7499,10 +36143,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.630698 + timestamp: 1681824277.425689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7511,10 +36155,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.630698 + timestamp: 1681824277.425689 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999632478 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7523,10 +36167,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.630698 + timestamp: 1681824277.425689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7535,10 +36179,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.630698 + timestamp: 1681824277.425689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7547,31 +36191,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.630698 + timestamp: 1681824277.425689 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.630698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.425689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.630698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996325}, "timestamp": {"timestamp": 1681824277.425689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.630698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.425689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.630698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.425689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.630698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.425689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06663322448730469 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14004:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14004', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0737147331237793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:22015:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '22015', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7591,40 +36235,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997546374797821 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.0882096290588 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.1154968738556 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14004:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14004", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003743594998374652 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013519083192022499 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003968715667724609 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042242822689328327 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014248562702936 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002284380025230348 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001837015151977539 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7481 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.705989 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 273 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.502841 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7634,10 +36278,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.7063041 + timestamp: 1681824277.5034029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7646,10 +36290,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.7063041 + timestamp: 1681824277.5034029 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999633849 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7658,10 +36302,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.7063041 + timestamp: 1681824277.5034029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7670,10 +36314,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.7063041 + timestamp: 1681824277.5034029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7682,31 +36326,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.7063041 + timestamp: 1681824277.5034029 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.706304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.503403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.706304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963385}, "timestamp": {"timestamp": 1681824277.503403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.706304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.503403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.706304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.503403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.706304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.503403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03515052795410156 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14004:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14004', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06799745559692383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7726,40 +36370,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975466728210449 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.133546590805 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.1871016025543 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42090:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42090", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037434471107544357 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013518185773029924 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006236553192138672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042166487193992703 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001422309715152306 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022811649250797927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001772165298461914 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7482 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.754994 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 274 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.574146 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7769,10 +36413,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.756722 + timestamp: 1681824277.5743639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7781,10 +36425,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.756722 + timestamp: 1681824277.5743639 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99963516 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7793,10 +36437,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.756722 + timestamp: 1681824277.5743639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7805,10 +36449,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.756722 + timestamp: 1681824277.5743639 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7817,31 +36461,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.756722 + timestamp: 1681824277.5743639 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.756722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.574364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.756722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963516}, "timestamp": {"timestamp": 1681824277.574364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.756722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.574364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.756722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.574364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.756722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.574364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04907822608947754 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42090:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42090', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03848147392272949 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7861,40 +36505,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975470304489136 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.2010045051575 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.2289562225342 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21494:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21494", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 9.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 528.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 588.0}, {"feature": 3.0}, {"feature": 588.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037433758549345925 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013517283888279865 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0037217140197753906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042091053042730145 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014197762514738003 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016298294067382812 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7483 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.818856 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 275 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.616046 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -7904,10 +36548,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8195 + timestamp: 1681824277.616297 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -7916,10 +36560,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8195 + timestamp: 1681824277.616297 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999636471 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -7928,10 +36572,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8195 + timestamp: 1681824277.616297 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -7940,10 +36584,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8195 + timestamp: 1681824277.616297 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -7952,31 +36596,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8195 + timestamp: 1681824277.616297 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.8195}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.616297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.8195}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996365}, "timestamp": {"timestamp": 1681824277.616297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.8195}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.616297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.8195}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.616297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.8195}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.616297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03548550605773926 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21494:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21494', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05569767951965332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -7996,40 +36640,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975473284721375 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.2467148303986 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.288024187088 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21494:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21494", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 9.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 528.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037435172224161724 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013516386311310407 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005984783172607422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004202144414918713 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001417248869377825 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022811649250797927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016307830810546875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7484 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.867695 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 276 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.674841 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8039,10 +36683,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8713789 + timestamp: 1681824277.6750579 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8051,10 +36695,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8713789 + timestamp: 1681824277.6750579 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999637842 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8063,10 +36707,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8713789 + timestamp: 1681824277.6750579 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8075,10 +36719,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8713789 + timestamp: 1681824277.6750579 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8087,31 +36731,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.8713789 + timestamp: 1681824277.6750579 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.871379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.675058}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.871379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963784}, "timestamp": {"timestamp": 1681824277.675058}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.871379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.675058}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.871379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.675058}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.871379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.675058}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03982877731323242 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21494:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21494', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03540492057800293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8131,40 +36775,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975476861000061 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.2994360923767 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.3265001773834 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21494:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21494", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 9.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 528.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003743504922160146 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013515483424823332 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004422187805175781 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041946290197045905 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014147434405573191 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015516281127929688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7485 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.917650 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 277 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.713161 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8174,10 +36818,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.9188449 + timestamp: 1681824277.713388 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8186,10 +36830,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.9188449 + timestamp: 1681824277.713388 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999639153 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8198,10 +36842,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.9188449 + timestamp: 1681824277.713388 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8210,10 +36854,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.9188449 + timestamp: 1681824277.713388 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8222,31 +36866,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.9188449 + timestamp: 1681824277.713388 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.918845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.713388}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.918845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963915}, "timestamp": {"timestamp": 1681824277.713388}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.918845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.713388}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.918845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.713388}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.918845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.713388}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06904292106628418 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21494:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21494', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031017065048217773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8266,40 +36910,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975480437278748 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.3800251483917 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.36079001426697 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21494:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21494", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 10.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 528.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29542:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29542", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037434863855561175 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013514580772526212 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004013776779174805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041899243817771886 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014122183528130123 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022811649250797927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016922950744628906 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7486 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:23.998524 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 278 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.772878 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8309,10 +36953,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.998935 + timestamp: 1681824277.7731061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8321,10 +36965,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.998935 + timestamp: 1681824277.7731061 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999640405 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8333,10 +36977,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.998935 + timestamp: 1681824277.7731061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8345,10 +36989,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.998935 + timestamp: 1681824277.7731061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8357,31 +37001,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725083.998935 + timestamp: 1681824277.7731061 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.998935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.773106}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725083.998935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996404}, "timestamp": {"timestamp": 1681824277.773106}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.998935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.773106}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.998935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.773106}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725083.998935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.773106}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02906513214111328 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21494:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21494', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04196429252624512 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29542:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29542', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8401,40 +37045,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975483417510986 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.4198627471924 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.43112444877625 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21494:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21494", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 14.0}, {"feature": 11.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 528.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 588.0}, {"feature": 3.0}, {"feature": 588.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037434948794556183 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013513678225922396 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.01213526725769043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041822457997342006 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014097433597648093 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015015602111816406 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7487 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.044950 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 279 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.817990 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8444,10 +37088,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.0452139 + timestamp: 1681824277.81822 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8456,10 +37100,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.0452139 + timestamp: 1681824277.81822 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999641716 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8468,10 +37112,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.0452139 + timestamp: 1681824277.81822 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8480,10 +37124,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.0452139 + timestamp: 1681824277.81822 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8492,31 +37136,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.0452139 + timestamp: 1681824277.81822 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.045214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.81822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.045214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996417}, "timestamp": {"timestamp": 1681824277.81822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.045214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.81822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.045214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.81822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.045214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.81822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04754447937011719 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21494:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21494', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052959442138671875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8536,40 +37180,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975486993789673 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.4857566356659 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.4872281551361 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15205:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15205", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037433425363543263 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013512782269665775 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003448009490966797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041768535655657094 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014072525325345513 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022811649250797927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018944740295410156 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7488 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.102710 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 280 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.874334 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8579,10 +37223,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.103241 + timestamp: 1681824277.8745611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8591,10 +37235,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.103241 + timestamp: 1681824277.8745611 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999643 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8603,10 +37247,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.103241 + timestamp: 1681824277.8745611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8615,10 +37259,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.103241 + timestamp: 1681824277.8745611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8627,31 +37271,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.103241 + timestamp: 1681824277.8745611 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.103241}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.874561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.103241}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999643}, "timestamp": {"timestamp": 1681824277.874561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.103241}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.874561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.103241}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.874561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.103241}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.874561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032521963119506836 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15205:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15205', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03466224670410156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8671,40 +37315,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975489974021912 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.5269014835358 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.5252916812897 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15205:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15205", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.5386717319488525 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374328181629652 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013511881085813526 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0050334930419921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041711081073742055 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014047791911024642 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002284380025230348 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015461444854736328 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7489 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.144998 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 281 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.917418 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8714,10 +37360,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.146018 + timestamp: 1681824277.9176631 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8726,10 +37372,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.146018 + timestamp: 1681824277.9176631 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999644279 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8738,10 +37384,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.146018 + timestamp: 1681824277.9176631 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8750,10 +37396,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.146018 + timestamp: 1681824277.9176631 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8762,31 +37408,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.146018 + timestamp: 1681824277.9176631 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.146018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.917663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.146018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996443}, "timestamp": {"timestamp": 1681824277.917663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.146018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.917663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.146018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.917663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.146018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.917663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042333126068115234 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15205:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15205', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03283214569091797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8806,40 +37452,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975493550300598 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.5798466205597 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.59099793434143 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15205:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15205", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 14.0}, {"feature": 11.0}, {"feature": 849.0}, {"feature": 5.0}, {"feature": 981.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003743068896155078 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00135109916253309 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002652883529663086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004167349425768678 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014023003907828078 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002285874797962606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00409245491027832 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7490 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.195463 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 282 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:37.980883 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8849,10 +37495,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.1957321 + timestamp: 1681824277.98119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8861,10 +37507,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.1957321 + timestamp: 1681824277.98119 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999645531 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -8873,10 +37519,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.1957321 + timestamp: 1681824277.98119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -8885,10 +37531,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.1957321 + timestamp: 1681824277.98119 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -8897,31 +37543,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.1957321 + timestamp: 1681824277.98119 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.195732}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.98119}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.195732}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964553}, "timestamp": {"timestamp": 1681824277.98119}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.195732}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.98119}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.195732}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.98119}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.195732}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824277.98119}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0467371940612793 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15205:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15205', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05888867378234863 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -8941,40 +37587,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975497126579285 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.6344311237335 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.6561360359192 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15205:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15205", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003742926007544739 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013510095439918188 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00792694091796875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044056282966157466 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014558875112492056 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.008727312088012695 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7491 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.257259 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 283 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.050168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -8984,10 +37630,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.25877 + timestamp: 1681824278.0503991 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -8996,10 +37642,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.25877 + timestamp: 1681824278.0503991 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999646783 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9008,10 +37654,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.25877 + timestamp: 1681824278.0503991 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9020,10 +37666,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.25877 + timestamp: 1681824278.0503991 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9032,31 +37678,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.25877 + timestamp: 1681824278.0503991 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.25877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.050399}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.25877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996468}, "timestamp": {"timestamp": 1681824278.050399}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.25877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.050399}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.25877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.050399}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.25877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.050399}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06876111030578613 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15205:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15205', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03823447227478027 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9076,40 +37722,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975500106811523 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.7178790569305 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.7048921585083 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59224:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59224", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1489.0}, {"feature": 5.0}, {"feature": 1489.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 3552.0}, {"feature": 7.0}, {"feature": 3552.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 14.0}, {"feature": 11.0}, {"feature": 849.0}, {"feature": 5.0}, {"feature": 981.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037430714886338195 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013509199643100527 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004292964935302734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004402088021046259 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014533342717152127 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022876347065903246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024428367614746094 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7492 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.335620 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 284 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.093361 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9119,10 +37765,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.3364921 + timestamp: 1681824278.093689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9131,10 +37777,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.3364921 + timestamp: 1681824278.093689 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999648035 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9143,10 +37789,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.3364921 + timestamp: 1681824278.093689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9155,10 +37801,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.3364921 + timestamp: 1681824278.093689 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9167,31 +37813,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.3364921 + timestamp: 1681824278.093689 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.336492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.093689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.336492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964803}, "timestamp": {"timestamp": 1681824278.093689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.336492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.093689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.336492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.093689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.336492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.093689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0575101375579834 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999995827674866, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59224:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59224', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03288865089416504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9211,40 +37857,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997550368309021 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9999995827674866 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.7853901386261 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.74248003959656 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59224:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59224", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1489.0}, {"feature": 5.0}, {"feature": 1489.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 3644.0}, {"feature": 8.0}, {"feature": 3644.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 6.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003742838198741423 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013508313250769712 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005113124847412109 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000439207416779378 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014508804682274465 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00806570053100586 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7493 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.403679 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 285 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.135607 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9254,10 +37900,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.40423 + timestamp: 1681824278.1358261 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9266,10 +37912,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.40423 + timestamp: 1681824278.1358261 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999649286 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9278,10 +37924,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.40423 + timestamp: 1681824278.1358261 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9290,10 +37936,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.40423 + timestamp: 1681824278.1358261 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9302,31 +37948,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.40423 + timestamp: 1681824278.1358261 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.40423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.135826}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.40423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996493}, "timestamp": {"timestamp": 1681824278.135826}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.40423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.135826}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.40423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.135826}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.40423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.135826}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0422210693359375 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999995827674866, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59224:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59224', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05321860313415527 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9346,40 +37992,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997550368309021 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9999995827674866 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.8375720977783 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.80520963668823 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59224:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59224", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 1489.0}, {"feature": 5.0}, {"feature": 1489.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 3644.0}, {"feature": 8.0}, {"feature": 3644.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003742715199207049 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001350741614170559 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025222301483154297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004386514994328829 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001448372148832832 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022876347065903246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001550436019897461 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7494 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.452402 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 286 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.192029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9389,10 +38035,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.4526379 + timestamp: 1681824278.1922469 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9401,10 +38047,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.4526379 + timestamp: 1681824278.1922469 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999650538 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9413,10 +38059,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.4526379 + timestamp: 1681824278.1922469 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9425,10 +38071,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.4526379 + timestamp: 1681824278.1922469 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9437,31 +38083,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.4526379 + timestamp: 1681824278.1922469 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.452638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.192247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.452638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965054}, "timestamp": {"timestamp": 1681824278.192247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.452638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.192247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.452638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.192247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.452638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.192247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052217960357666016 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999995827674866, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59224:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59224', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04390692710876465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9481,40 +38127,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997550368309021 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9999995827674866 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.8963150978088 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.8542392253876 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42104:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42104", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 15.0}, {"feature": 12.0}, {"feature": 849.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037425492451854893 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013506522656902766 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026035308837890625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004381437450063249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014458721492383896 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022878998424857855 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004014015197753906 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7495 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.511395 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 287 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.245834 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9524,10 +38170,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.5116451 + timestamp: 1681824278.2466481 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9536,10 +38182,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.5116451 + timestamp: 1681824278.2466481 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99965173 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9548,10 +38194,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.5116451 + timestamp: 1681824278.2466481 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9560,10 +38206,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.5116451 + timestamp: 1681824278.2466481 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9572,31 +38218,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.5116451 + timestamp: 1681824278.2466481 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.511645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.246648}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.511645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965173}, "timestamp": {"timestamp": 1681824278.246648}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.511645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.246648}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.511645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.246648}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.511645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.246648}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0668189525604248 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42104:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42104', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.060491323471069336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9616,40 +38262,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997550368309021 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 740.9699139595032 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 259.9232454299927 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42104:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42104", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 15.0}, {"feature": 12.0}, {"feature": 849.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037424119747603627 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013505626940068262 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028688907623291016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043775454792517447 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014433748313812402 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022890247055329382 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002507925033569336 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7496 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.594220 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 288 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.311837 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9659,10 +38305,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.594481 + timestamp: 1681824278.3126371 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9671,10 +38317,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.594481 + timestamp: 1681824278.3126371 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999653 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9683,10 +38329,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.594481 + timestamp: 1681824278.3126371 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9695,10 +38341,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.594481 + timestamp: 1681824278.3126371 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9707,31 +38353,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.594481 + timestamp: 1681824278.3126371 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.594481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.312637}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.594481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999653}, "timestamp": {"timestamp": 1681824278.312637}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.594481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.312637}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.594481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.312637}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.594481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.312637}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05774974822998047 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42104:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42104', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0762944221496582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9751,40 +38397,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975506663322449 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.0451452732086 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.0062804222107 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42104:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42104", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037422698363562387 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013504731781683987 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646499779075384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002554655075073242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004373667294410892 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014408905102494308 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003228902816772461 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.660640 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 289 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.397141 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9794,10 +38440,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.6608591 + timestamp: 1681824278.398351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9806,10 +38452,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.6608591 + timestamp: 1681824278.398351 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999654174 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9818,10 +38464,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.6608591 + timestamp: 1681824278.398351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9830,10 +38476,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.6608591 + timestamp: 1681824278.398351 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9842,31 +38488,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.6608591 + timestamp: 1681824278.398351 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.660859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.398351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.660859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996542}, "timestamp": {"timestamp": 1681824278.398351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.660859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.398351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.660859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.398351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.660859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.398351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03920769691467285 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42104:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42104', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053316593170166016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -9886,40 +38532,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975510239601135 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.091605424881 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.0668611526489 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63655:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63655", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1043.0}, {"feature": 7.0}, {"feature": 2019.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1597.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003742205432535314 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013503832347448658 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646819921210408 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.012952804565429688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004366540614965147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014384550924881 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022903550416231155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028727054595947266 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7498 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.717992 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 290 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.455696 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -9929,10 +38575,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.7187631 + timestamp: 1681824278.471313 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -9941,10 +38587,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.7187631 + timestamp: 1681824278.471313 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999655366 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -9953,10 +38599,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.7187631 + timestamp: 1681824278.471313 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -9965,10 +38611,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.7187631 + timestamp: 1681824278.471313 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -9977,31 +38623,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.7187631 + timestamp: 1681824278.471313 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.718763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.471313}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.718763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965537}, "timestamp": {"timestamp": 1681824278.471313}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.718763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.471313}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.718763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.471313}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.718763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.471313}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07028627395629883 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63655:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63655', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08029508590698242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10021,40 +38667,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975513815879822 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.1803958415985 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.1524350643158 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63655:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63655", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 1043.0}, {"feature": 7.0}, {"feature": 2019.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1597.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.6224055290222168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 7.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374204105391623 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013502939443904688 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646499779075384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002146005630493164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004359789101064487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014360274203647294 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002044200897216797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7499 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.796182 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 291 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.549561 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10064,10 +38712,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.796428 + timestamp: 1681824278.549809 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10076,10 +38724,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.796428 + timestamp: 1681824278.549809 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999656558 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10088,10 +38736,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.796428 + timestamp: 1681824278.549809 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10100,10 +38748,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.796428 + timestamp: 1681824278.549809 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10112,31 +38760,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.796428 + timestamp: 1681824278.549809 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.796428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.549809}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.796428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965656}, "timestamp": {"timestamp": 1681824278.549809}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.796428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.549809}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.796428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.549809}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.796428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.549809}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03128790855407715 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63655:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63655', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08744025230407715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10156,40 +38804,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997551679611206 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.2191429138184 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.253301858902 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42092:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42092", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 8.0}, {"feature": 432.0}, {"feature": 3.0}, {"feature": 764.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037418140217972297 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013502053531516468 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002956390380859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004353090269133857 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014336119049778249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015478134155273438 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7500 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.834280 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 292 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.640408 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10199,10 +38847,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.834573 + timestamp: 1681824278.64061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10211,10 +38859,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.834573 + timestamp: 1681824278.64061 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99965775 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10223,10 +38871,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.834573 + timestamp: 1681824278.64061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10235,10 +38883,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.834573 + timestamp: 1681824278.64061 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10247,31 +38895,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.834573 + timestamp: 1681824278.64061 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.834573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.64061}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.834573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965775}, "timestamp": {"timestamp": 1681824278.64061}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.834573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.64061}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.834573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.64061}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.834573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.64061}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037624359130859375 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42092:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42092', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08993148803710938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10291,40 +38939,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975520372390747 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.2638623714447 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.34686493873596 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 12.0}, {"feature": 8.0}, {"feature": 432.0}, {"feature": 3.0}, {"feature": 764.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003741549244565213 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001350117295710205 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025522708892822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004458148972093169 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014423791523942027 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.008302450180053711 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7501 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.878996 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 293 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.740623 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10334,10 +38982,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.879282 + timestamp: 1681824278.740869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10346,10 +38994,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.879282 + timestamp: 1681824278.740869 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999658883 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10358,10 +39006,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.879282 + timestamp: 1681824278.740869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10370,10 +39018,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.879282 + timestamp: 1681824278.740869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10382,31 +39030,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.879282 + timestamp: 1681824278.740869 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.879282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.740869}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.879282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996589}, "timestamp": {"timestamp": 1681824278.740869}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.879282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.740869}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.879282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.740869}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.879282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.740869}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0910639762878418 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07125377655029297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10426,40 +39074,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975523352622986 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.3617346286774 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.4281952381134 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003741387322548652 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00135002803726781 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003168821334838867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004451170575180959 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014399735824000717 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016372203826904297 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7502 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:24.978725 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 294 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.815056 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10469,10 +39117,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.9789629 + timestamp: 1681824278.8153059 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10481,10 +39129,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.9789629 + timestamp: 1681824278.8153059 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999660075 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10493,10 +39141,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.9789629 + timestamp: 1681824278.8153059 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10505,10 +39153,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.9789629 + timestamp: 1681824278.8153059 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10517,31 +39165,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725084.9789629 + timestamp: 1681824278.8153059 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.978963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.815306}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725084.978963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996601}, "timestamp": {"timestamp": 1681824278.815306}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.978963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.815306}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.978963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.815306}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725084.978963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.815306}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06751513481140137 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035489559173583984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10561,40 +39209,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975526928901672 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.4379298686981 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.4668161869049 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374135151056442 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013499381040232331 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004343271255493164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004443725454621017 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014375875580443858 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014643669128417969 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7503 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.057540 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 295 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.853376 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10604,10 +39252,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.057786 + timestamp: 1681824278.8535869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10616,10 +39264,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.057786 + timestamp: 1681824278.8535869 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999661207 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10628,10 +39276,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.057786 + timestamp: 1681824278.8535869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10640,10 +39288,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.057786 + timestamp: 1681824278.8535869 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10652,31 +39300,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.057786 + timestamp: 1681824278.8535869 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.057786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.853587}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.057786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996612}, "timestamp": {"timestamp": 1681824278.853587}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.057786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.853587}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.057786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.853587}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.057786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.853587}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05711984634399414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.056179046630859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10696,40 +39344,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975529909133911 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.5067148208618 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.5258779525757 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30677:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30677", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 621.0}, {"feature": 7.0}, {"feature": 1019.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 9.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 1096.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374122831603956 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013498485749212947 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004431247711181641 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045272293878165454 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014423058308207387 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004338502883911133 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7504 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.129381 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 296 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.915327 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10739,10 +39387,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.1299281 + timestamp: 1681824278.91556 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10751,10 +39399,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.1299281 + timestamp: 1681824278.91556 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999662399 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10763,10 +39411,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.1299281 + timestamp: 1681824278.91556 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10775,10 +39423,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.1299281 + timestamp: 1681824278.91556 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10787,31 +39435,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.1299281 + timestamp: 1681824278.91556 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.129928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.91556}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.129928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996624}, "timestamp": {"timestamp": 1681824278.91556}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.129928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.91556}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.129928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.91556}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.129928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.91556}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06844496726989746 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30677:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30677', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029070615768432617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10831,40 +39479,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975533485412598 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.5895373821259 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.5607180595398 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30677:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30677", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 621.0}, {"feature": 7.0}, {"feature": 1019.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 19971.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374110276934298 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013497590801180904 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646499779075384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003641366958618164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004518623126714619 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014399517889309608 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016036033630371094 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7505 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.208840 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 297 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.947499 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -10874,10 +39522,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2090671 + timestamp: 1681824278.947705 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -10886,10 +39534,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2090671 + timestamp: 1681824278.947705 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999663532 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -10898,10 +39546,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2090671 + timestamp: 1681824278.947705 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -10910,10 +39558,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2090671 + timestamp: 1681824278.947705 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -10922,31 +39570,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2090671 + timestamp: 1681824278.947705 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.209067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.947705}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.209067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966353}, "timestamp": {"timestamp": 1681824278.947705}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.209067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.947705}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.209067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.947705}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.209067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.947705}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047472476959228516 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30677:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30677', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03314638137817383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -10966,40 +39614,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975537061691284 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.6480083465576 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.5981352329254 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38723:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38723", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003740906969611497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013496702310164224 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002683877944946289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045107160038596034 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014375983177529758 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003291606903076172 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7506 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.263374 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 298 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:38.988087 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11009,10 +39657,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2636321 + timestamp: 1681824278.989006 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11021,10 +39669,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2636321 + timestamp: 1681824278.989006 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999664664 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11033,10 +39681,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2636321 + timestamp: 1681824278.989006 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11045,10 +39693,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2636321 + timestamp: 1681824278.989006 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11057,31 +39705,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.2636321 + timestamp: 1681824278.989006 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.263632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.989006}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.263632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966466}, "timestamp": {"timestamp": 1681824278.989006}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.263632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.989006}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.263632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.989006}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.263632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824278.989006}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0439298152923584 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38723:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38723', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03680419921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11101,40 +39749,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975540041923523 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.6995627880096 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.6425230503082 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38723:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38723", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 977.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037407160881647213 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013495813471361172 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029811859130859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004503459529094647 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014352469600274595 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003626108169555664 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7507 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.314689 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 299 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.032719 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11144,10 +39792,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.314898 + timestamp: 1681824279.0335889 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11156,10 +39804,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.314898 + timestamp: 1681824279.0335889 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999665797 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11168,10 +39816,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.314898 + timestamp: 1681824279.0335889 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11180,10 +39828,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.314898 + timestamp: 1681824279.0335889 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11192,31 +39840,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.314898 + timestamp: 1681824279.0335889 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.314898}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.033589}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.314898}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996658}, "timestamp": {"timestamp": 1681824279.033589}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.314898}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.033589}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.314898}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.033589}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.314898}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.033589}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04022812843322754 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38723:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38723', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05726790428161621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11236,40 +39884,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997554361820221 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.7466127872467 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.7073140144348 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14005:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14005", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 9.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 1096.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003740545878257279 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013494922737372712 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029723644256591797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004498917830642313 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001432874406551885 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016019344329833984 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7508 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.362299 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 300 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.095324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11279,10 +39927,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.3705831 + timestamp: 1681824279.095531 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11291,10 +39939,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.3705831 + timestamp: 1681824279.095531 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99966687 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11303,10 +39951,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.3705831 + timestamp: 1681824279.095531 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11315,10 +39963,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.3705831 + timestamp: 1681824279.095531 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11327,31 +39975,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.3705831 + timestamp: 1681824279.095531 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.370583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.095531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.370583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966687}, "timestamp": {"timestamp": 1681824279.095531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.370583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.095531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.370583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.095531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.370583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.095531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03914690017700195 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14005:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14005', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.057170867919921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11371,40 +40019,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975546598434448 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.7939233779907 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.76904106140137 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14005:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14005", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.6092455387115479 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 977.0}, {"feature": 5.0}, {"feature": 1366.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000374024582292896 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013494049171200611 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032868385314941406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004496493684653923 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014304983983244712 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001644134521484375 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7509 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.409889 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 301 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.171912 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11414,10 +40064,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4105711 + timestamp: 1681824279.172111 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11426,10 +40076,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4105711 + timestamp: 1681824279.172111 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999668 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11438,10 +40088,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4105711 + timestamp: 1681824279.172111 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11450,10 +40100,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4105711 + timestamp: 1681824279.172111 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11462,31 +40112,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4105711 + timestamp: 1681824279.172111 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.410571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.172111}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.410571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999668}, "timestamp": {"timestamp": 1681824279.172111}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.410571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.172111}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.410571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.172111}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.410571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.172111}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0611722469329834 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14005:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14005', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0549771785736084 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11506,40 +40156,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975550174713135 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.8631310462952 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.84319162368774 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14005:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14005", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 13.0}, {"feature": 9.0}, {"feature": 432.0}, {"feature": 4.0}, {"feature": 1096.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037400739912480643 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001349315895159707 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030434131622314453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004489916091127975 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001428173652487459 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023056950885802507 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015895366668701172 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7510 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.488375 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 302 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.229959 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11549,10 +40199,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4888439 + timestamp: 1681824279.2302029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11561,10 +40211,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4888439 + timestamp: 1681824279.2302029 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999669075 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11573,10 +40223,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4888439 + timestamp: 1681824279.2302029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11585,10 +40235,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4888439 + timestamp: 1681824279.2302029 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11597,31 +40247,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.4888439 + timestamp: 1681824279.2302029 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.488844}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.230203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.488844}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996691}, "timestamp": {"timestamp": 1681824279.230203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.488844}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.230203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.488844}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.230203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.488844}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.230203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03671979904174805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14005:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14005', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06894087791442871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11641,40 +40291,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975553154945374 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.9167461395264 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.9151577949524 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14005:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14005", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 977.0}, {"feature": 5.0}, {"feature": 1366.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003739840286815989 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013492275895701721 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026586055755615234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044817237276430227 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014258860583205735 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016658306121826172 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7511 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.531914 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 303 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.302241 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11684,10 +40334,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.5321529 + timestamp: 1681824279.3024421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11696,10 +40346,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.5321529 + timestamp: 1681824279.3024421 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999670208 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11708,10 +40358,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.5321529 + timestamp: 1681824279.3024421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11720,10 +40370,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.5321529 + timestamp: 1681824279.3024421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11732,31 +40382,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.5321529 + timestamp: 1681824279.3024421 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.532153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.302442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.532153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996702}, "timestamp": {"timestamp": 1681824279.302442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.532153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.302442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.532153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.302442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.532153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.302442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0460050106048584 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14005:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14005', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03599953651428223 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11776,40 +40426,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997555673122406 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 741.9695558547974 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 260.9544951915741 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42080:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42080", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681724900.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 977.0}, {"feature": 6.0}, {"feature": 1755.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037397003652934823 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013491383267428153 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003001689910888672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044769858198522245 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014235628090033374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023056950885802507 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015418529510498047 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7512 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.587002 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 304 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.341051 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11819,10 +40469,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.587275 + timestamp: 1681824279.3412671 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11831,10 +40481,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.587275 + timestamp: 1681824279.3412671 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99967128 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11843,10 +40493,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.587275 + timestamp: 1681824279.3412671 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11855,10 +40505,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.587275 + timestamp: 1681824279.3412671 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -11867,31 +40517,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.587275 + timestamp: 1681824279.3412671 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.587275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.341267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.587275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996713}, "timestamp": {"timestamp": 1681824279.341267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.587275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.341267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.587275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.341267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.587275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.341267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06568288803100586 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42080:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42080', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06855463981628418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -11911,40 +40561,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681724928.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975560307502747 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.0444192886353 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.025919675827 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 977.0}, {"feature": 6.0}, {"feature": 1755.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037394988918437727 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013490496669736388 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002627849578857422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045573836379516567 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001428123484451303 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023069302551448345 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004339933395385742 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7513 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.659579 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 305 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.415336 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -11954,10 +40604,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.659816 + timestamp: 1681824279.415591 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -11966,10 +40616,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.659816 + timestamp: 1681824279.415591 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999672353 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -11978,10 +40628,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.659816 + timestamp: 1681824279.415591 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -11990,10 +40640,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.659816 + timestamp: 1681824279.415591 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12002,31 +40652,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.659816 + timestamp: 1681824279.415591 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.659816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.415591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.659816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967235}, "timestamp": {"timestamp": 1681824279.415591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.659816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.415591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.659816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.415591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.659816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.415591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03230762481689453 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02674579620361328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12046,40 +40696,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975563287734985 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.0835876464844 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.0583481788635 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003739347967049858 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013489605292268526 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030736923217773438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000454896911666759 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014258637687323765 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023056950885802507 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015130043029785156 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7514 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:25.958625 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 306 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.444984 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12089,10 +40739,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.9589131 + timestamp: 1681824279.4453781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12101,10 +40751,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.9589131 + timestamp: 1681824279.4453781 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999673426 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12113,10 +40763,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.9589131 + timestamp: 1681824279.4453781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12125,10 +40775,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.9589131 + timestamp: 1681824279.4453781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12137,31 +40787,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725085.9589131 + timestamp: 1681824279.4453781 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.958913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.445378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725085.958913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996734}, "timestamp": {"timestamp": 1681824279.445378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.958913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.445378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.958913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.445378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725085.958913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.445378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05261516571044922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '17/04/2023 09:51:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04059100151062012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12181,40 +40831,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975566864013672 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.4029774665833 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.10186314582825 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037395546898426747 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001348871965316571 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028121471405029297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045405563834678464 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014236156858004685 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014772415161132812 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7515 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.021278 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 307 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.488448 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12224,10 +40874,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.0215371 + timestamp: 1681824279.488673 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12236,10 +40886,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.0215371 + timestamp: 1681824279.488673 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999674499 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12248,10 +40898,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.0215371 + timestamp: 1681824279.488673 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12260,10 +40910,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.0215371 + timestamp: 1681824279.488673 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12272,31 +40922,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.0215371 + timestamp: 1681824279.488673 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.021537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.488673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.021537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996745}, "timestamp": {"timestamp": 1681824279.488673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.021537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.488673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.021537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.488673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.021537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.488673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047949790954589844 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021654605865478516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12316,40 +40966,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975569844245911 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.460874080658 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.1263680458069 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003739448398592802 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00134878254370526 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00395655632019043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045306927599345466 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014214078124545923 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013685226440429688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7516 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.079099 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 308 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.512839 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12359,10 +41009,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.079556 + timestamp: 1681824279.513031 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12371,10 +41021,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.079556 + timestamp: 1681824279.513031 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999675572 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12383,10 +41033,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.079556 + timestamp: 1681824279.513031 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12395,10 +41045,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.079556 + timestamp: 1681824279.513031 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12407,31 +41057,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.079556 + timestamp: 1681824279.513031 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.079556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.513031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.079556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996756}, "timestamp": {"timestamp": 1681824279.513031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.079556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.513031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.079556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.513031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.079556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.513031}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031320810317993164 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0843203067779541 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12451,40 +41101,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975573420524597 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.502897977829 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.2135980129242 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003739289226276445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013486935311978656 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005128622055053711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045250029462121403 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014191410674387422 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00376129150390625 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.127499 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 309 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.603466 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12494,10 +41144,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.12773 + timestamp: 1681824279.60431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12506,10 +41156,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.12773 + timestamp: 1681824279.60431 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999676645 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12518,10 +41168,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.12773 + timestamp: 1681824279.60431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12530,10 +41180,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.12773 + timestamp: 1681824279.60431 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12542,31 +41192,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.12773 + timestamp: 1681824279.60431 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.12773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.60431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.12773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967664}, "timestamp": {"timestamp": 1681824279.60431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.12773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.60431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.12773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.60431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.12773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.60431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07750988006591797 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04053854942321777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12586,40 +41236,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975576400756836 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.5966894626617 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.261212348938 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 14379.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037390777140550554 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001348605077398914 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028934478759765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045206212596366965 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014168712168614699 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023056950885802507 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026531219482421875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7518 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.211846 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 310 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.649676 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12629,10 +41279,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.212148 + timestamp: 1681824279.6503839 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12641,10 +41291,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.212148 + timestamp: 1681824279.6503839 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999677658 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12653,10 +41303,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.212148 + timestamp: 1681824279.6503839 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12665,10 +41315,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.212148 + timestamp: 1681824279.6503839 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12677,31 +41327,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.212148 + timestamp: 1681824279.6503839 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.212148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.650384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.212148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967766}, "timestamp": {"timestamp": 1681824279.650384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.212148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.650384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.212148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.650384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.212148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.650384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06821775436401367 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.049365997314453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12721,40 +41371,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975579977035522 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.6720635890961 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.31537556648254 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.535874605178833 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 15777.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003738909586920342 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013485161825384103 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026459404034540057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038940906524658203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045129407734020204 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014146560898413774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018415451049804688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7519 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.295079 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 311 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.708119 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12764,10 +41416,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.295701 + timestamp: 1681824279.708364 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12776,10 +41428,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.295701 + timestamp: 1681824279.708364 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999678731 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12788,10 +41440,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.295701 + timestamp: 1681824279.708364 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12800,10 +41452,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.295701 + timestamp: 1681824279.708364 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12812,31 +41464,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.295701 + timestamp: 1681824279.708364 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.295701}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.708364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.295701}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967873}, "timestamp": {"timestamp": 1681824279.708364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.295701}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.708364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.295701}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.708364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.295701}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.708364}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026861906051635742 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02909708023071289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12856,40 +41508,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975583553314209 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.7137312889099 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.35349559783936 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 5991.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003738574386126005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013484296502308342 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026454852195456624 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027294158935546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00045048693610647787 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001412458917315912 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016410350799560547 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7520 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.370738 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 312 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.740464 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -12899,10 +41551,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.3711741 + timestamp: 1681824279.740752 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -12911,10 +41563,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.3711741 + timestamp: 1681824279.740752 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999679744 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -12923,10 +41575,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.3711741 + timestamp: 1681824279.740752 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -12935,10 +41587,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.3711741 + timestamp: 1681824279.740752 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -12947,31 +41599,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.3711741 + timestamp: 1681824279.740752 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.371174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.740752}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.371174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967974}, "timestamp": {"timestamp": 1681824279.740752}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.371174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.740752}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.371174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.740752}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.371174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.740752}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02918720245361328 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029139280319213867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -12991,40 +41643,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975586533546448 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.7917449474335 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.3860399723053 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 7389.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 782.0}, {"feature": 3.0}, {"feature": 782.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003738389799743222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013483409530848536 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002645030035637319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004061222076416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000449684054476206 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014102720956880776 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017516613006591797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7521 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.408917 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 313 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.773216 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13034,10 +41686,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.409204 + timestamp: 1681824279.7739191 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13046,10 +41698,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.409204 + timestamp: 1681824279.7739191 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999680758 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13058,10 +41710,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.409204 + timestamp: 1681824279.7739191 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13070,10 +41722,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.409204 + timestamp: 1681824279.7739191 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13082,31 +41734,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.409204 + timestamp: 1681824279.7739191 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.409204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.773919}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.409204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968076}, "timestamp": {"timestamp": 1681824279.773919}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.409204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.773919}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.409204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.773919}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.409204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.773919}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024341821670532227 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030676841735839844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13126,40 +41778,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975590109825134 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.8249912261963 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.42109513282776 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 8787.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037382030262964923 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013482522965954427 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026448650169186294 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003731966018676758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044888017845939204 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014080964729477538 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021734237670898438 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7522 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.478511 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 314 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.809593 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13169,10 +41821,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.478821 + timestamp: 1681824279.8111379 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13181,10 +41833,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.478821 + timestamp: 1681824279.8111379 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999681771 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13193,10 +41845,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.478821 + timestamp: 1681824279.8111379 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13205,10 +41857,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.478821 + timestamp: 1681824279.8111379 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13217,31 +41869,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.478821 + timestamp: 1681824279.8111379 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.478821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.811138}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.478821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996818}, "timestamp": {"timestamp": 1681824279.811138}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.478821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.811138}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.478821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.811138}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.478821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.811138}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043547630310058594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06575369834899902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13261,40 +41913,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975593090057373 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.9139022827148 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.49165964126587 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 10185.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 782.0}, {"feature": 4.0}, {"feature": 1132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003738210928325161 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013481626866729132 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002645030035637319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003677845001220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004488040286574572 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014058602700744085 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020287036895751953 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7523 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.531253 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 315 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.878823 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13304,10 +41956,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.5315559 + timestamp: 1681824279.879082 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13316,10 +41968,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.5315559 + timestamp: 1681824279.879082 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999682784 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13328,10 +41980,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.5315559 + timestamp: 1681824279.879082 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13340,10 +41992,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.5315559 + timestamp: 1681824279.879082 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13352,31 +42004,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.5315559 + timestamp: 1681824279.879082 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.531556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.879082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.531556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996828}, "timestamp": {"timestamp": 1681824279.879082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.531556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.879082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.531556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.879082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.531556}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.879082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06407546997070312 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02390599250793457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13396,40 +42048,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997559666633606 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 742.9871060848236 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.5189745426178 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 11583.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003738133607642425 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013480732596905477 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026454852195456624 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038492679595947266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044773291789814595 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014037627737108144 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013751983642578125 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7524 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.603557 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 316 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.905488 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13439,10 +42091,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6039491 + timestamp: 1681824279.9057 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13451,10 +42103,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6039491 + timestamp: 1681824279.9057 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999683797 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13463,10 +42115,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6039491 + timestamp: 1681824279.9057 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13475,10 +42127,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6039491 + timestamp: 1681824279.9057 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13487,31 +42139,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6039491 + timestamp: 1681824279.9057 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.603949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.9057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.603949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996838}, "timestamp": {"timestamp": 1681824279.9057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.603949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.9057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.603949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.9057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.603949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.9057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02600884437561035 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06525993347167969 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13531,40 +42183,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975599646568298 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.0213723182678 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.5870542526245 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037378022410872815 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013479867481796292 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002645030035637319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.040727853775024414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000447176211390186 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0014015818258066562 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00142669677734375 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7525 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.674152 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 317 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:39.973613 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13574,10 +42226,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6747479 + timestamp: 1681824279.9739251 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13586,10 +42238,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6747479 + timestamp: 1681824279.9739251 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999684811 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13598,10 +42250,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6747479 + timestamp: 1681824279.9739251 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13610,10 +42262,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6747479 + timestamp: 1681824279.9739251 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13622,31 +42274,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.6747479 + timestamp: 1681824279.9739251 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.674748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.973925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.674748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996848}, "timestamp": {"timestamp": 1681824279.973925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.674748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.973925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.674748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.973925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.674748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824279.973925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03516745567321777 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02816295623779297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13666,40 +42318,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975603222846985 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.1013243198395 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.6180763244629 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737660104154807 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013478977538206281 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026454852195456624 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036699771881103516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044621892457201185 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013994801373035156 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013685226440429688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7526 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.718340 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 318 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.004427 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13709,10 +42361,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.718703 + timestamp: 1681824280.004626 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13721,10 +42373,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.718703 + timestamp: 1681824280.004626 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999685824 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13733,10 +42385,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.718703 + timestamp: 1681824280.004626 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13745,10 +42397,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.718703 + timestamp: 1681824280.004626 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13757,31 +42409,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.718703 + timestamp: 1681824280.004626 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.718703}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.004626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.718703}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996858}, "timestamp": {"timestamp": 1681824280.004626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.718703}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.004626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.718703}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.004626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.718703}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.004626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0837550163269043 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06665444374084473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13801,40 +42453,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975606203079224 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.1941120624542 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.68732237815857 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 432.0}, {"feature": 2.0}, {"feature": 432.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737726312475775 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001347808335717214 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026459404034540057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005310773849487305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044541695935441456 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013973580562697278 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016980171203613281 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7527 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.817823 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 319 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.074149 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13844,10 +42496,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8182271 + timestamp: 1681824280.0743721 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13856,10 +42508,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8182271 + timestamp: 1681824280.0743721 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999686778 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -13868,10 +42520,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8182271 + timestamp: 1681824280.0743721 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -13880,10 +42532,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8182271 + timestamp: 1681824280.0743721 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -13892,31 +42544,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8182271 + timestamp: 1681824280.0743721 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.818227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.074372}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.818227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996868}, "timestamp": {"timestamp": 1681824280.074372}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.818227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.074372}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.818227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.074372}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.818227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.074372}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034902095794677734 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028203964233398438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -13936,40 +42588,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997560977935791 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.2446978092194 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.71865940093994 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 14379.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 782.0}, {"feature": 5.0}, {"feature": 1482.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737590656776375 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001347719326950081 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003062725067138672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044516668767755616 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013951801365678456 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016443729400634766 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7528 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.860971 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 320 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.105344 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -13979,10 +42631,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8613031 + timestamp: 1681824280.1055541 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -13991,10 +42643,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8613031 + timestamp: 1681824280.1055541 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999687791 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14003,10 +42655,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8613031 + timestamp: 1681824280.1055541 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14015,10 +42667,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8613031 + timestamp: 1681824280.1055541 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14027,31 +42679,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.8613031 + timestamp: 1681824280.1055541 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.861303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.105554}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.861303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996878}, "timestamp": {"timestamp": 1681824280.105554}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.861303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.105554}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.861303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.105554}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.861303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.105554}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040178775787353516 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02785515785217285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9900000095367432, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14071,40 +42723,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975613355636597 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.2928037643433 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9900000095367432 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.7494764328003 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42118:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42118", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 15777.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.42848777770996094 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 782.0}, {"feature": 5.0}, {"feature": 1482.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037374569722137697 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013476303212587022 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026311874389648438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044534008749078877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013930087171731248 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002524852752685547 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7529 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.908354 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 321 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.260715 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14114,10 +42768,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.908622 + timestamp: 1681824280.2610421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14126,10 +42780,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.908622 + timestamp: 1681824280.2610421 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999657512 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14138,10 +42792,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.908622 + timestamp: 1681824280.2610421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14150,10 +42804,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.908622 + timestamp: 1681824280.2610421 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14162,31 +42816,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.908622 + timestamp: 1681824280.2610421 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.908622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.261042}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.908622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996575}, "timestamp": {"timestamp": 1681824280.261042}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.908622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.261042}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.908622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.261042}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.908622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.261042}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024234533309936523 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42118:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42118', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02736830711364746 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14206,40 +42860,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975616335868835 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.324371099472 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.90451669692993 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 266.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 21369.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737500960648599 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013475408882583188 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.03471231460571289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044477579830306933 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013908807228232743 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017180442810058594 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7530 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:26.971172 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 322 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.291765 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14249,10 +42903,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.971421 + timestamp: 1681824280.292043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14261,10 +42915,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.971421 + timestamp: 1681824280.292043 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999658585 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14273,10 +42927,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.971421 + timestamp: 1681824280.292043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14285,10 +42939,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.971421 + timestamp: 1681824280.292043 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14297,31 +42951,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725086.971421 + timestamp: 1681824280.292043 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.971421}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.292043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725086.971421}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996586}, "timestamp": {"timestamp": 1681824280.292043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.971421}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.292043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.971421}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.292043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725086.971421}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.292043}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06070756912231445 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026690006256103516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14341,40 +42995,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975619912147522 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.4235284328461 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.93485832214355 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 266.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037373478002427013 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013474520744807283 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004130363464355469 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044413002809054063 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013887743333352211 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002304459922015667 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020122528076171875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7531 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.041714 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 323 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.322147 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14384,10 +43038,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.043376 + timestamp: 1681824280.322505 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14396,10 +43050,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.043376 + timestamp: 1681824280.322505 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999659598 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14408,10 +43062,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.043376 + timestamp: 1681824280.322505 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14420,10 +43074,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.043376 + timestamp: 1681824280.322505 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14432,31 +43086,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.043376 + timestamp: 1681824280.322505 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.043376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.322505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.043376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996596}, "timestamp": {"timestamp": 1681824280.322505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.043376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.322505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.043376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.322505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.043376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.322505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.050766944885253906 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048825740814208984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14476,40 +43130,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975622892379761 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.4842581748962 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 261.9872934818268 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 266.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037371801132892927 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001347363408864609 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003867626190185547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004433684973017439 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013866970492233423 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018646717071533203 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7532 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.100983 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.374476 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14519,10 +43173,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.101306 + timestamp: 1681824280.3747571 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14531,10 +43185,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.101306 + timestamp: 1681824280.3747571 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999660671 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14543,10 +43197,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.101306 + timestamp: 1681824280.3747571 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14555,10 +43209,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.101306 + timestamp: 1681824280.3747571 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14567,31 +43221,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.101306 + timestamp: 1681824280.3747571 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.101306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.374757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.101306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996607}, "timestamp": {"timestamp": 1681824280.374757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.101306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.374757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.101306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.374757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.101306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.374757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04351305961608887 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04480290412902832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14611,40 +43265,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975626468658447 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.5361700057983 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.0356240272522 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 655.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737019647328712 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013472746949284072 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026459404034540057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003319263458251953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044262205268471287 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013846272165432964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018126964569091797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7533 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.152095 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 325 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.422619 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14654,10 +43308,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.152365 + timestamp: 1681824280.4228981 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14666,10 +43320,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.152365 + timestamp: 1681824280.4228981 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999655128 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14678,10 +43332,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.152365 + timestamp: 1681824280.4228981 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14690,10 +43344,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.152365 + timestamp: 1681824280.4228981 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14702,31 +43356,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.152365 + timestamp: 1681824280.4228981 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.152365}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.422898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.152365}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996551}, "timestamp": {"timestamp": 1681824280.422898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.152365}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.422898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.152365}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.422898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.152365}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.422898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04453682899475098 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05275845527648926 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14746,40 +43400,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975629448890686 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.5883841514587 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.09167289733887 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 655.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003736888172735643 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001347185762261945 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030868053436279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044201723349200666 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001382544920481181 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022978847846388817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018706321716308594 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7534 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.206789 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 326 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.478756 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14789,10 +43443,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2083621 + timestamp: 1681824280.4790781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14801,10 +43455,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2083621 + timestamp: 1681824280.4790781 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.9996562 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14813,10 +43467,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2083621 + timestamp: 1681824280.4790781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14825,10 +43479,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2083621 + timestamp: 1681824280.4790781 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14837,31 +43491,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2083621 + timestamp: 1681824280.4790781 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.208362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.479078}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.208362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996562}, "timestamp": {"timestamp": 1681824280.479078}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.208362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.479078}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.208362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.479078}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.208362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.479078}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06412529945373535 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02214503288269043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -14881,40 +43535,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975633025169373 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.6626441478729 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.11728262901306 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 655.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003737003451019189 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013470967357030854 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033540725708007812 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004411559268570183 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013805169129283781 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022913096472620964 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001348733901977539 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7535 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.279436 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 327 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.503890 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -14924,10 +43578,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2796991 + timestamp: 1681824280.5040879 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -14936,10 +43590,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2796991 + timestamp: 1681824280.5040879 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999657273 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -14948,10 +43602,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2796991 + timestamp: 1681824280.5040879 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -14960,10 +43614,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2796991 + timestamp: 1681824280.5040879 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -14972,31 +43626,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.2796991 + timestamp: 1681824280.5040879 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.279699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.504088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.279699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996573}, "timestamp": {"timestamp": 1681824280.504088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.279699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.504088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.279699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.504088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.279699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.504088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03451895713806152 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024790287017822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15016,40 +43670,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975636005401611 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.7056684494019 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.1449544429779 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 588.0}, {"feature": 4.0}, {"feature": 655.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003736802781804147 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013470084815759705 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003106355667114258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00044044465583993305 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001378470866679761 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017452239990234375 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7536 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.321204 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 328 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.572788 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15059,10 +43713,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.321708 + timestamp: 1681824280.573077 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15071,10 +43725,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.321708 + timestamp: 1681824280.573077 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999650478 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15083,10 +43737,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.321708 + timestamp: 1681824280.573077 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15095,10 +43749,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.321708 + timestamp: 1681824280.573077 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15107,31 +43761,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.321708 + timestamp: 1681824280.573077 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.321708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.573077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.321708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996505}, "timestamp": {"timestamp": 1681824280.573077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.321708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.573077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.321708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.573077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.321708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.573077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.065155029296875 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02837204933166504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15151,40 +43805,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975639581680298 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.7780430316925 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.2174127101898 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 977.0}, {"feature": 5.0}, {"feature": 1044.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037366863863073864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013469194978897546 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026509761810302734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043969431033607083 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013764414158780878 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015599727630615234 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7537 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.393291 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 329 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.604179 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15194,10 +43848,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.3935211 + timestamp: 1681824280.604419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15206,10 +43860,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.3935211 + timestamp: 1681824280.604419 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999651551 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15218,10 +43872,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.3935211 + timestamp: 1681824280.604419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15230,10 +43884,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.3935211 + timestamp: 1681824280.604419 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15242,31 +43896,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.3935211 + timestamp: 1681824280.604419 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.393521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.604419}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.393521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965155}, "timestamp": {"timestamp": 1681824280.604419}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.393521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.604419}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.393521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.604419}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.393521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.604419}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030178308486938477 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02307748794555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15286,40 +43940,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975642561912537 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.8151438236237 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.24361753463745 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 977.0}, {"feature": 6.0}, {"feature": 1433.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 782.0}, {"feature": 5.0}, {"feature": 1482.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037365319227789147 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001346830820545685 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646145294420421 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027582645416259766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004392368487914968 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013743793642088534 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002085447311401367 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7538 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.430271 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 330 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.631045 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15329,10 +43983,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.4305141 + timestamp: 1681824280.6313021 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15341,10 +43995,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.4305141 + timestamp: 1681824280.6313021 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999652624 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15353,10 +44007,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.4305141 + timestamp: 1681824280.6313021 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15365,10 +44019,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.4305141 + timestamp: 1681824280.6313021 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15377,31 +44031,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.4305141 + timestamp: 1681824280.6313021 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.430514}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.631302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.430514}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996526}, "timestamp": {"timestamp": 1681824280.631302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.430514}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.631302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.430514}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.631302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.430514}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.631302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.060011863708496094 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07168436050415039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15421,40 +44075,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975646138191223 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.8819608688354 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.3189880847931 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 1822.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.44648265838623047 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42016:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 19971.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037364422501702147 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013467417183889773 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027844905853271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004385260244679505 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013723624424456114 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016772747039794922 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7539 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.497021 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 331 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.778101 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15464,10 +44120,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.49729 + timestamp: 1681824280.7783239 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15476,10 +44132,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.49729 + timestamp: 1681824280.7783239 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999653697 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15488,10 +44144,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.49729 + timestamp: 1681824280.7783239 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15500,10 +44156,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.49729 + timestamp: 1681824280.7783239 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15512,31 +44168,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.49729 + timestamp: 1681824280.7783239 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.49729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.778324}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.49729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996537}, "timestamp": {"timestamp": 1681824280.778324}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.49729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.778324}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.49729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.778324}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.49729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.778324}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0232999324798584 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024129390716552734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42016:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15556,40 +44212,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975649118423462 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.9119410514832 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.41853165626526 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1449:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1449", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 977.0}, {"feature": 8.0}, {"feature": 2211.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037363205283858 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001346652823677059 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027844905853271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004376724370438269 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013703820695371985 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022903550416231155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015404224395751953 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7540 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.526701 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 332 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.805169 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15599,10 +44255,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.526921 + timestamp: 1681824280.80539 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15611,10 +44267,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.526921 + timestamp: 1681824280.80539 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.99965471 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15623,10 +44279,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.526921 + timestamp: 1681824280.80539 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15635,10 +44291,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.526921 + timestamp: 1681824280.80539 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15647,31 +44303,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.526921 + timestamp: 1681824280.80539 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.526921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.80539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.526921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996547}, "timestamp": {"timestamp": 1681824280.80539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.526921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.80539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.526921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.80539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.526921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.80539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07540130615234375 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1449:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1449', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03193354606628418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15691,40 +44347,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975652694702148 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 743.9944920539856 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.4534149169922 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 8.0}, {"feature": 1182.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003736141773532079 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013465644265760047 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003546476364135742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043744859481426154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013683289702966605 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017917156219482422 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7541 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.614094 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 333 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.873817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15734,10 +44390,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.6144929 + timestamp: 1681824280.874074 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15746,10 +44402,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.6144929 + timestamp: 1681824280.874074 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999649346 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15758,10 +44414,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.6144929 + timestamp: 1681824280.874074 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15770,10 +44426,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.6144929 + timestamp: 1681824280.874074 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15782,31 +44438,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.6144929 + timestamp: 1681824280.874074 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.614493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.874074}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.614493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964935}, "timestamp": {"timestamp": 1681824280.874074}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.614493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.874074}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.614493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.874074}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.614493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.874074}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041167497634887695 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04432511329650879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15826,40 +44482,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975655674934387 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.0472147464752 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.53440403938293 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 8.0}, {"feature": 1182.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 782.0}, {"feature": 5.0}, {"feature": 1482.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 775.0}, {"feature": 2.0}, {"feature": 775.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003736013182707119 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013464756156148663 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.011611700057983398 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004368682486398291 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00136632008143129 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022909350809641182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015048980712890625 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7542 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.671350 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 334 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.921016 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -15869,10 +44525,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.67168 + timestamp: 1681824280.921221 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -15881,10 +44537,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.67168 + timestamp: 1681824280.921221 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999650359 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -15893,10 +44549,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.67168 + timestamp: 1681824280.921221 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -15905,10 +44561,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.67168 + timestamp: 1681824280.921221 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -15917,31 +44573,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.67168 + timestamp: 1681824280.921221 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.67168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.921221}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.67168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965036}, "timestamp": {"timestamp": 1681824280.921221}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.67168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.921221}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.67168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.921221}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.67168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.921221}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028548717498779297 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023410797119140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -15961,40 +44617,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975659251213074 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.0918242931366 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.56067061424255 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23513:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23513", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 524.0}, {"feature": 8.0}, {"feature": 1182.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037357955871624755 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013463876854660915 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024747848510742188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043623251944724747 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013643287444772628 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000229056051466614 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015892982482910156 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7543 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.706764 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 335 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:40.947277 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16004,10 +44660,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.70724 + timestamp: 1681824280.9475009 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16016,10 +44672,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.70724 + timestamp: 1681824280.9475009 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999651432 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16028,10 +44684,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.70724 + timestamp: 1681824280.9475009 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16040,10 +44696,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.70724 + timestamp: 1681824280.9475009 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16052,31 +44708,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.70724 + timestamp: 1681824280.9475009 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.70724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.947501}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.70724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965143}, "timestamp": {"timestamp": 1681824280.947501}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.70724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.947501}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.70724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.947501}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.70724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824280.947501}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027972936630249023 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23513:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23513', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05132794380187988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16096,40 +44752,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975662231445312 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.1264035701752 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.6149036884308 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 524.0}, {"feature": 7.0}, {"feature": 1115.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 581.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003735872061801793 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013462986106809324 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004416465759277344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000435508931592007 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013623613552250838 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022903550416231155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014088153839111328 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7544 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.775594 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 336 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.001414 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16139,10 +44795,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.776062 + timestamp: 1681824281.00161 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16151,10 +44807,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.776062 + timestamp: 1681824281.00161 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999652505 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16163,10 +44819,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.776062 + timestamp: 1681824281.00161 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16175,10 +44831,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.776062 + timestamp: 1681824281.00161 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16187,31 +44843,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.776062 + timestamp: 1681824281.00161 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.776062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.00161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.776062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996525}, "timestamp": {"timestamp": 1681824281.00161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.776062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.00161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.776062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.00161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.776062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.00161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027698040008544922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02331089973449707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16231,40 +44887,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975665807723999 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.1959912776947 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.6409823894501 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 524.0}, {"feature": 7.0}, {"feature": 1115.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 581.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000373563391707018 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00134621097885316 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463501853868365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0035886764526367188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004345529585957903 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013604514046828915 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002290149568580091 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011553764343261719 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7545 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.813550 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 337 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.027183 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16274,10 +44930,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.8144529 + timestamp: 1681824281.02737 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16286,10 +44942,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.8144529 + timestamp: 1681824281.02737 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999653518 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16298,10 +44954,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.8144529 + timestamp: 1681824281.02737 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16310,10 +44966,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.8144529 + timestamp: 1681824281.02737 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16322,31 +44978,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.8144529 + timestamp: 1681824281.02737 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.814453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.02737}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.814453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996535}, "timestamp": {"timestamp": 1681824281.02737}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.814453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.02737}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.814453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.02737}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.814453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.02737}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0678873062133789 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05815720558166504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16366,40 +45022,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975669384002686 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.2737617492676 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.7016098499298 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 17.0}, {"feature": 15.0}, {"feature": 849.0}, {"feature": 8.0}, {"feature": 1440.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 581.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037355074521562434 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013461222238078492 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646355133038014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00486445426940918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004337715445163511 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013585131493031876 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022890247055329382 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018239021301269531 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7546 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.892606 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 338 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.088653 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16409,10 +45065,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.89346 + timestamp: 1681824281.0888989 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16421,10 +45077,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.89346 + timestamp: 1681824281.0888989 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999654531 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16433,10 +45089,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.89346 + timestamp: 1681824281.0888989 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16445,10 +45101,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.89346 + timestamp: 1681824281.0888989 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16457,31 +45113,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.89346 + timestamp: 1681824281.0888989 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.89346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.088899}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.89346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965453}, "timestamp": {"timestamp": 1681824281.088899}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.89346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.088899}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.89346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.088899}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.89346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.088899}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041249990463256836 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023023605346679688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16501,40 +45157,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975672364234924 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.3262321949005 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.72794914245605 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57748:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57748", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 17.0}, {"feature": 15.0}, {"feature": 849.0}, {"feature": 8.0}, {"feature": 1440.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 581.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 200.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003735549177729384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013460330870512613 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030667781829833984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004327926078363484 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013566273490380975 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022878998424857855 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023174285888671875 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7547 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:27.944065 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.115249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16544,10 +45200,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.944351 + timestamp: 1681824281.115443 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16556,10 +45212,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.944351 + timestamp: 1681824281.115443 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999655545 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16568,10 +45224,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.944351 + timestamp: 1681824281.115443 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16580,10 +45236,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.944351 + timestamp: 1681824281.115443 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16592,31 +45248,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725087.944351 + timestamp: 1681824281.115443 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.944351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.115443}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725087.944351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965554}, "timestamp": {"timestamp": 1681824281.115443}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.944351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.115443}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.944351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.115443}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725087.944351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.115443}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05317974090576172 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57748:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57748', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05565071105957031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16636,40 +45292,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975675940513611 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.3888986110687 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.7871615886688 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42110:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42110", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003735472255501902 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013459440851042522 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004483222961425781 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000431998453260509 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013547097522849066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022876347065903246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016582012176513672 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7548 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.016636 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 340 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.173976 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16679,10 +45335,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.016891 + timestamp: 1681824281.174185 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16691,10 +45347,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.016891 + timestamp: 1681824281.174185 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999656558 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16703,10 +45359,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.016891 + timestamp: 1681824281.174185 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16715,10 +45371,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.016891 + timestamp: 1681824281.174185 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16727,31 +45383,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.016891 + timestamp: 1681824281.174185 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.016891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.174185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.016891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965656}, "timestamp": {"timestamp": 1681824281.174185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.016891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.174185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.016891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.174185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.016891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.174185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028089284896850586 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42110:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42110', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031584978103637695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16771,40 +45427,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.997567892074585 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.4369237422943 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.82187604904175 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42110:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42110", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.43073248863220215 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003735224007772461 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013458566630944807 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646360080689192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002638101577758789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004313923756501848 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013527680784364202 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015516281127929688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7549 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.051935 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 341 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.301700 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16814,10 +45472,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.052192 + timestamp: 1681824281.3086171 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16826,10 +45484,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.052192 + timestamp: 1681824281.3086171 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999657571 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16838,10 +45496,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.052192 + timestamp: 1681824281.3086171 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16850,10 +45508,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.052192 + timestamp: 1681824281.3086171 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16862,31 +45520,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.052192 + timestamp: 1681824281.3086171 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.052192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.308617}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.052192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996576}, "timestamp": {"timestamp": 1681824281.308617}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.052192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.308617}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.052192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.308617}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.052192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.308617}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04395937919616699 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42110:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42110', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03632807731628418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -16906,40 +45564,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975682497024536 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.487578868866 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.9543356895447 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1016.0}, {"feature": 8.0}, {"feature": 2324.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037351127608296837 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013457678776713359 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028235912322998047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00043113800313743103 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013507970667520801 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022876347065903246 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018978118896484375 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7550 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.102781 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 342 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.341379 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -16949,10 +45607,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.103332 + timestamp: 1681824281.3415909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -16961,10 +45619,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.103332 + timestamp: 1681824281.3415909 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999652326 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -16973,10 +45631,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.103332 + timestamp: 1681824281.3415909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -16985,10 +45643,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.103332 + timestamp: 1681824281.3415909 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -16997,31 +45655,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.103332 + timestamp: 1681824281.3415909 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.103332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.341591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.103332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996523}, "timestamp": {"timestamp": 1681824281.341591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.103332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.341591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.103332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.341591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.103332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.341591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03193926811218262 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03361058235168457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17041,40 +45699,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975685477256775 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.5264086723328 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 262.9912214279175 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1016.0}, {"feature": 8.0}, {"feature": 2324.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003735008116015616 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013456790700159254 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031890869140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004303355104936173 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001348908178649801 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013604164123535156 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7551 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.143256 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 343 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.377627 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17084,10 +45742,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.143873 + timestamp: 1681824281.378036 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17096,10 +45754,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.143873 + timestamp: 1681824281.378036 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999645889 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17108,10 +45766,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.143873 + timestamp: 1681824281.378036 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17120,10 +45778,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.143873 + timestamp: 1681824281.378036 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17132,31 +45790,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.143873 + timestamp: 1681824281.378036 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.143873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.378036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.143873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996459}, "timestamp": {"timestamp": 1681824281.378036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.143873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.378036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.143873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.378036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.143873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.378036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.055737972259521484 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030396223068237305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17176,40 +45834,175 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975689053535461 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.5904595851898 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.024263381958 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042961164852089876 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013470128429959771 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002285874797962606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017099380493164062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 344 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.411187 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824281.4113851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824281.4113851 +} +kpi_value { + floatVal: 0.999646902 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824281.4113851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824281.4113851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824281.4113851 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.411385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996469}, "timestamp": {"timestamp": 1681824281.411385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.411385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.411385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.411385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05975151062011719 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 + +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.0872251987457 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1016.0}, {"feature": 8.0}, {"feature": 2324.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003734791700742913 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001345591286975266 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463702670298517 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023920536041259766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004290319422421896 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013451022068266688 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022873695706948638 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017688274383544922 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7552 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.205319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 345 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.474119 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17219,10 +46012,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.2055571 + timestamp: 1681824281.4745519 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17231,10 +46024,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.2055571 + timestamp: 1681824281.4745519 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999640942 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17243,10 +46036,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.2055571 + timestamp: 1681824281.4745519 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17255,10 +46048,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.2055571 + timestamp: 1681824281.4745519 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17267,31 +46060,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.2055571 + timestamp: 1681824281.4745519 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.205557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.474552}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.205557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964094}, "timestamp": {"timestamp": 1681824281.474552}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.205557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.474552}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.205557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.474552}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.205557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.474552}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02657008171081543 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030011653900146484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17311,40 +46104,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.99756920337677 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.6236083507538 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.1203498840332 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 2754.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003734699383509472 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013455024465891252 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027408599853515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004283697776714437 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013432133209487715 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002285874797962606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013699531555175781 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7553 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.270633 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 346 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.506753 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17354,10 +46147,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.27119 + timestamp: 1681824281.5069611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17366,10 +46159,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.27119 + timestamp: 1681824281.5069611 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999642 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17378,10 +46171,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.27119 + timestamp: 1681824281.5069611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17390,10 +46183,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.27119 + timestamp: 1681824281.5069611 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17402,31 +46195,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.27119 + timestamp: 1681824281.5069611 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.27119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.506961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.27119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999642}, "timestamp": {"timestamp": 1681824281.506961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.27119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.506961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.27119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.506961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.27119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.506961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03657388687133789 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0293731689453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17446,40 +46239,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975695610046387 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.6992394924164 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.15237975120544 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 27.0}, {"feature": 24.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 2754.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003734612007392879 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013454135990013012 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0037436485290527344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004276820521879544 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013413374612015751 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002284380025230348 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.03424358367919922 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7554 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.316163 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 347 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.571665 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17489,10 +46282,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.3168941 + timestamp: 1681824281.5719249 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17501,10 +46294,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.3168941 + timestamp: 1681824281.5719249 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999643 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17513,10 +46306,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.3168941 + timestamp: 1681824281.5719249 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17525,10 +46318,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.3168941 + timestamp: 1681824281.5719249 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17537,31 +46330,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.3168941 + timestamp: 1681824281.5719249 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.316894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.571925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.316894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999643}, "timestamp": {"timestamp": 1681824281.571925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.316894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.571925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.316894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.571925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.316894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.571925}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030429363250732422 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022797346115112305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17581,40 +46374,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975698590278625 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.7385454177856 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.21074533462524 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 27.0}, {"feature": 24.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1446.0}, {"feature": 10.0}, {"feature": 3184.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037345588595552766 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013453246340873269 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646499779075384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033588409423828125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004270739141509108 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001339456770948045 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022811649250797927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012905597686767578 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7555 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.374052 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 348 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.597085 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17624,10 +46417,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.37452 + timestamp: 1681824281.5974569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17636,10 +46429,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.37452 + timestamp: 1681824281.5974569 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999644101 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17648,10 +46441,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.37452 + timestamp: 1681824281.5974569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17660,10 +46453,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.37452 + timestamp: 1681824281.5974569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17672,31 +46465,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.37452 + timestamp: 1681824281.5974569 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.37452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.597457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.37452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996441}, "timestamp": {"timestamp": 1681824281.597457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.37452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.597457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.37452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.597457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.37452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.597457}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041022300720214844 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025613784790039062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17716,40 +46509,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975702166557312 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.8075139522552 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.23896312713623 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 28.0}, {"feature": 25.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1446.0}, {"feature": 10.0}, {"feature": 3184.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003734277426418634 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013452378316520643 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026483535766601562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004263197568533435 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001337610388844429 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022779498249292374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013878345489501953 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7556 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.423523 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 349 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.625339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17759,10 +46552,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.4241719 + timestamp: 1681824281.6255441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17771,10 +46564,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.4241719 + timestamp: 1681824281.6255441 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999645114 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17783,10 +46576,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.4241719 + timestamp: 1681824281.6255441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17795,10 +46588,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.4241719 + timestamp: 1681824281.6255441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17807,31 +46600,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.4241719 + timestamp: 1681824281.6255441 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.424172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.625544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.424172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996451}, "timestamp": {"timestamp": 1681824281.625544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.424172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.625544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.424172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.625544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.424172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.625544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04720616340637207 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05849194526672363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17851,40 +46644,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975705146789551 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.8624036312103 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.3000931739807 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 28.0}, {"feature": 25.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1446.0}, {"feature": 11.0}, {"feature": 3614.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037339875445056267 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013451511827481245 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004272937774658203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000425661540357396 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013357547498679377 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016169548034667969 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7557 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.479741 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 350 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.687006 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -17894,10 +46687,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.48048 + timestamp: 1681824281.687223 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -17906,10 +46699,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.48048 + timestamp: 1681824281.687223 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999646127 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -17918,10 +46711,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.48048 + timestamp: 1681824281.687223 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -17930,10 +46723,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.48048 + timestamp: 1681824281.687223 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -17942,31 +46735,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.48048 + timestamp: 1681824281.687223 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.48048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.687223}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.48048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996461}, "timestamp": {"timestamp": 1681824281.687223}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.48048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.687223}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.48048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.687223}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.48048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.687223}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03978538513183594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05412459373474121 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -17986,40 +46779,42 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975708723068237 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.911235332489 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.3575665950775 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 29.0}, {"feature": 26.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1446.0}, {"feature": 11.0}, {"feature": 3614.0}]} +DEBUG:root:Metrics: 10 +DEBUG:root:Batch time: 0.44285082817077637 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 300.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037339186999103 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013450623243796552 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038607120513916016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004250633849051285 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013338975490232987 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016868114471435547 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7558 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.527630 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 351 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.750888 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18029,10 +46824,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.528327 + timestamp: 1681824281.7511389 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18041,10 +46836,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.528327 + timestamp: 1681824281.7511389 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999647141 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18053,10 +46848,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.528327 + timestamp: 1681824281.7511389 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18065,10 +46860,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.528327 + timestamp: 1681824281.7511389 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18077,31 +46872,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.528327 + timestamp: 1681824281.7511389 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.528327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.751139}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.528327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964714}, "timestamp": {"timestamp": 1681824281.751139}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.528327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.751139}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.528327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.751139}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.528327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.751139}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06412315368652344 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06547427177429199 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18121,40 +46916,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975711703300476 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 744.9848291873932 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.4326765537262 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 29.0}, {"feature": 26.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 27.0}, {"feature": 27.0}, {"feature": 1469.0}, {"feature": 12.0}, {"feature": 3637.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037337067131011474 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001344974613163151 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026463804533705115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004483461380004883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042456092639688654 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001332034724033922 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022750350763089955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018725395202636719 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7559 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.603884 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 352 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.819960 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18164,10 +46959,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6047421 + timestamp: 1681824281.82024 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18176,10 +46971,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6047421 + timestamp: 1681824281.82024 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999648154 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18188,10 +46983,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6047421 + timestamp: 1681824281.82024 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18200,10 +46995,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6047421 + timestamp: 1681824281.82024 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18212,31 +47007,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6047421 + timestamp: 1681824281.82024 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.604742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.82024}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.604742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964815}, "timestamp": {"timestamp": 1681824281.82024}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.604742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.82024}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.604742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.82024}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.604742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.82024}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04144477844238281 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037108659744262695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18256,40 +47051,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975715279579163 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.0379407405853 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.47334027290344 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 29.0}, {"feature": 26.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2393.0}, {"feature": 28.0}, {"feature": 28.0}, {"feature": 1469.0}, {"feature": 13.0}, {"feature": 3660.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037336171130100313 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013448858824878468 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646440116222948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003987550735473633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042386813614934304 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013302101559508935 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022721203276887536 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001966714859008789 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7560 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.655853 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 353 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.860645 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18299,10 +47094,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6568279 + timestamp: 1681824281.860873 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18311,10 +47106,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6568279 + timestamp: 1681824281.860873 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999649107 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18323,10 +47118,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6568279 + timestamp: 1681824281.860873 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18335,10 +47130,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6568279 + timestamp: 1681824281.860873 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18347,31 +47142,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.6568279 + timestamp: 1681824281.860873 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.656828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.860873}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.656828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996491}, "timestamp": {"timestamp": 1681824281.860873}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.656828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.860873}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.656828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.860873}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.656828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.860873}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04855990409851074 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04790306091308594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18391,40 +47186,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975718259811401 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.0968668460846 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.52482438087463 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38007:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38007", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 30.0}, {"feature": 27.0}, {"feature": 1384.0}, {"feature": 10.0}, {"feature": 2416.0}, {"feature": 28.0}, {"feature": 28.0}, {"feature": 1469.0}, {"feature": 13.0}, {"feature": 3660.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037334870525408274 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013447974193047897 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646499779075384 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028612613677978516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000423224525470918 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013283850390334254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022681101108901203 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015821456909179688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7561 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.712547 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 354 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.911741 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18434,10 +47229,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.7128451 + timestamp: 1681824281.9120569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18446,10 +47241,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.7128451 + timestamp: 1681824281.9120569 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999650121 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18458,10 +47253,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.7128451 + timestamp: 1681824281.9120569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18470,10 +47265,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.7128451 + timestamp: 1681824281.9120569 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18482,31 +47277,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.7128451 + timestamp: 1681824281.9120569 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.712845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.912057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.712845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996501}, "timestamp": {"timestamp": 1681824281.912057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.712845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.912057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.712845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.912057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.712845}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.912057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.058348655700683594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38007:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38007', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03890872001647949 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18526,40 +47321,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975721836090088 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.1629989147186 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.5669605731964 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30677:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30677", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 621.0}, {"feature": 7.0}, {"feature": 1019.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037336174654952945 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013447089764081607 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002646819921210408 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004462480545043945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042260602824914625 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001326563796903065 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002264099894091487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019652843475341797 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7562 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.781057 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 355 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.954069 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18569,10 +47364,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.78203 + timestamp: 1681824281.9542651 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18581,10 +47376,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.78203 + timestamp: 1681824281.9542651 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999651134 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18593,10 +47388,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.78203 + timestamp: 1681824281.9542651 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18605,10 +47400,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.78203 + timestamp: 1681824281.9542651 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18617,31 +47412,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.78203 + timestamp: 1681824281.9542651 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.78203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.954265}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.78203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965113}, "timestamp": {"timestamp": 1681824281.954265}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.78203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.954265}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.78203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.954265}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.78203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.954265}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037203311920166016 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30677:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30677', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03554940223693848 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18661,40 +47456,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975724816322327 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.2110939025879 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.60590982437134 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30677:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30677", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 621.0}, {"feature": 7.0}, {"feature": 1019.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 300.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037336375319407437 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013446200842910621 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026471400633454323 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00529026985168457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042195669100672176 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013247558305801207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022634697961620986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021071434020996094 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7563 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.831332 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 356 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:41.993262 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18704,10 +47499,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.8323209 + timestamp: 1681824281.9935441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18716,10 +47511,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.8323209 + timestamp: 1681824281.9935441 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999652088 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18728,10 +47523,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.8323209 + timestamp: 1681824281.9935441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18740,10 +47535,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.8323209 + timestamp: 1681824281.9935441 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18752,31 +47547,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.8323209 + timestamp: 1681824281.9935441 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.832321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.993544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.832321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996521}, "timestamp": {"timestamp": 1681824281.993544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.832321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.993544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.832321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.993544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.832321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824281.993544}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0722494125366211 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30677:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30677', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04039740562438965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18796,40 +47591,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975728392601013 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.2959084510803 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.6500747203827 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38366:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38366", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 10.0}, {"feature": 588.0}, {"feature": 5.0}, {"feature": 787.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 300.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037335550679502903 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013445313897403948 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002647259971126914 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003926515579223633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0004213857506884455 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013229429890202434 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022628396982327104 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018160343170166016 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7564 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.913640 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 357 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:42.037194 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18839,10 +47634,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.914381 + timestamp: 1681824282.037401 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18851,10 +47646,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.914381 + timestamp: 1681824282.037401 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999653041 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18863,10 +47658,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.914381 + timestamp: 1681824282.037401 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -18875,10 +47670,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.914381 + timestamp: 1681824282.037401 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -18887,31 +47682,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.914381 + timestamp: 1681824282.037401 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.914381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.037401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.914381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965304}, "timestamp": {"timestamp": 1681824282.037401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.914381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.037401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.914381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.037401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.914381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.037401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038193702697753906 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38366:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38366', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038915157318115234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -18931,40 +47726,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975731372833252 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.3446867465973 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.6924977302551 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38366:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38366", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 13.0}, {"feature": 10.0}, {"feature": 588.0}, {"feature": 5.0}, {"feature": 787.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 300.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0003733491305226764 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013444426359133115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002647379878908396 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002865314483642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042080933240492045 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013211389035710707 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002262679918203503 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00177001953125 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7565 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:28.961428 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 358 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:42.079472 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -18974,10 +47769,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.96197 + timestamp: 1681824282.07971 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -18986,10 +47781,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.96197 + timestamp: 1681824282.07971 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999654055 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -18998,10 +47793,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.96197 + timestamp: 1681824282.07971 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -19010,10 +47805,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.96197 + timestamp: 1681824282.07971 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -19022,31 +47817,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725088.96197 + timestamp: 1681824282.07971 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.96197}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.07971}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725088.96197}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965405}, "timestamp": {"timestamp": 1681824282.07971}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.96197}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.07971}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.96197}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.07971}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725088.96197}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.07971}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047766685485839844 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38366:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38366', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03743553161621094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23076:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '23076', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -19066,40 +47861,40 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975734949111938 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.4017434120178 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.7331705093384 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:38366:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "38366", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "0de0f403-7963-468b-b32d-dc4a358696cd"}}, "time_end": 1681725000.0, "time_start": 1681725000.0}, "features": [{"feature": 14.0}, {"feature": 11.0}, {"feature": 588.0}, {"feature": 5.0}, {"feature": 787.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42018:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42018", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} INFO:root:Performing inference... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00037334568522136416 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.035609282029327005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.599799523130059e-05 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001344353818725568 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00026474351761862636 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038442611694335938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00042015125065092467 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013193563511912471 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022625201381742954 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015635490417480469 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7566 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-17 09:51:29.018985 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-17 09:50:43.865222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-17 09:51:43.865222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 359 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:42.120081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server @@ -19109,10 +47904,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725089.019727 + timestamp: 1681824282.1202829 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { @@ -19121,10 +47916,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725089.019727 + timestamp: 1681824282.1202829 } kpi_value { - floatVal: 0.999999583 + floatVal: 0.999655 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { @@ -19133,10 +47928,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725089.019727 + timestamp: 1681824282.1202829 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { @@ -19145,10 +47940,10 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725089.019727 + timestamp: 1681824282.1202829 } kpi_value { - int32Val: 1 + int32Val: 0 } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { @@ -19157,31 +47952,31 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe } } timestamp { - timestamp: 1681725089.019727 + timestamp: 1681824282.1202829 } kpi_value { - int32Val: 1 + int32Val: 0 } -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725089.019727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.120283}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9999996}, "timestamp": {"timestamp": 1681725089.019727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999655}, "timestamp": {"timestamp": 1681824282.120283}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725089.019727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.120283}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725089.019727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.120283}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1681725089.019727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.120283}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05720353126525879 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '17/04/2023 09:51:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:38366:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '38366', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06833910942077637 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '18/04/2023 13:24:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42018:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42018', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "0de0f403-7963-468b-b32d-dc4a358696cd" + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" } , 'endpoint_id': topology_id { context_id { @@ -19201,14 +47996,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1681725056.0, 'time_end': 1681725056.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 6 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.9975737929344177 +, 'time_start': 1681824256.0, 'time_end': 1681824256.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 1.0 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 745.4683232307434 +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 263.80482292175293 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23076:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23076", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "24b32c06-89b1-403b-8370-d7fefb69acac"}}, "time_end": 1681824300.0, "time_start": 1681824300.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 300.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +INFO:root:Performing inference... +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00041951932216761635 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.022069397033192217 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 9.717000648379326e-05 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0013175770418212497 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00022612401517108083 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014600753784179688 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 360 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-18 13:24:42.191579 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-18 13:24:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-18 13:25:22.318010 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "24b32c06-89b1-403b-8370-d7fefb69acac" +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { + kpi_id { + uuid: "17" + } +} +timestamp { + timestamp: 1681824282.1919191 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { + kpi_id { + uuid: "18" + } +} +timestamp { + timestamp: 1681824282.1919191 +} +kpi_value { + floatVal: 0.999655962 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { + kpi_id { + uuid: "19" + } +} +timestamp { + timestamp: 1681824282.1919191 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { + kpi_id { + uuid: "20" + } +} +timestamp { + timestamp: 1681824282.1919191 +} +kpi_value { + int32Val: 0 +} + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { + kpi_id { + uuid: "21" + } +} +timestamp { + timestamp: 1681824282.1919191 +} +kpi_value { + int32Val: 0 +} + +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1681824282.191919}} diff --git a/proto/l3_centralizedattackdetector.proto b/proto/l3_centralizedattackdetector.proto index ed99435aa..4d404869e 100644 --- a/proto/l3_centralizedattackdetector.proto +++ b/proto/l3_centralizedattackdetector.proto @@ -25,6 +25,9 @@ service L3Centralizedattackdetector { // Get the list of features used by the ML model in the CAD component rpc GetFeaturesIds (Empty) returns (AutoFeatures) {} + + // Get Scalability Config from the DAD component + rpc GetScalabilityConfig (L3ScalabilityConfig) returns (Empty) {} } message Feature { @@ -63,6 +66,12 @@ message L3CentralizedattackdetectorBatchInput { repeated L3CentralizedattackdetectorMetrics metrics = 1; } +// Exp2 - Scalability Config +message L3ScalabilityConfig { + float time_to_stabilize = 1; + float max_connection_time = 2; +} + message Empty { string message = 1; } diff --git a/scalability_accuracy.csv b/scalability_accuracy.csv index 043ac2d1d..4140d7cd3 100644 --- a/scalability_accuracy.csv +++ b/scalability_accuracy.csv @@ -1,2 +1,4 @@ TIME_CONS OVERALL_ACCURACY CRYPTO_ACCURACY TOTAL_PREDICTIONS TOTAL_POSITIVES F_POSITIVES T_NEGATIVES F_NEGATIVES CONFIDENCE TIMESTAMP TIME_TO_STABILIZE 60 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 |18/04/2023 09:11:32| 2 +60 0.998019814491272 1.0 3536.0 3.0 0.0 3533.0 7.0 1.0 |18/04/2023 10:20:22| 5 +60.0 0.997032642364502 1.0 5056.0 5.0 0.0 5051.0 15.0 1.0 |18/04/2023 13:29:22| 5.0 diff --git a/src/l3_centralizedattackdetector/client/l3_centralizedattackdetectorClient.py b/src/l3_centralizedattackdetector/client/l3_centralizedattackdetectorClient.py index 2ef33438e..6e05aa986 100644 --- a/src/l3_centralizedattackdetector/client/l3_centralizedattackdetectorClient.py +++ b/src/l3_centralizedattackdetector/client/l3_centralizedattackdetectorClient.py @@ -22,6 +22,7 @@ from common.proto.l3_centralizedattackdetector_pb2 import ( Empty, L3CentralizedattackdetectorBatchInput, L3CentralizedattackdetectorMetrics, + L3ScalabilityConfig, ModelInput, ModelOutput ) @@ -70,5 +71,12 @@ class l3_centralizedattackdetectorClient: response = self.stub.GetOutput(request) LOGGER.debug('GetFeaturesIds result: {}'.format(response)) return response + + @RETRY_DECORATOR + def GetScalabilityConfig(self, request: L3ScalabilityConfig) -> Empty: + LOGGER.debug('GetScalabilityConfig request: {}'.format(request)) + response = self.stub.GetOutput(request) + LOGGER.debug('GetScalabilityConfig result: {}'.format(response)) + return response diff --git a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py index c8a16535e..d2bb04db4 100644 --- a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py +++ b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py @@ -52,11 +52,7 @@ current_dir = os.path.dirname(os.path.abspath(__file__)) # Demo constants DEMO_MODE = True ATTACK_IPS = ["37.187.95.110", "91.121.140.167", "94.23.23.52", "94.23.247.226", "149.202.83.171"] - -TIME_TO_STABILIZE = 2 # minutes TIME_START = time.time() -MAX_CONNECTION_TIME = 60 - METRICS_POOL = MetricsPool('l3_centralizedattackdetector', 'RPC') @@ -197,9 +193,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto self.confidence = Value('f', 0) self.calculated_csv = False - # Start process to generate accuracy scalability csv asynchronically - p = Process(target=self.generate_accuracy_scalability_csv) - p.start() + self.max_connection_time = 60 + self.time_to_stabilize = 5 """ Create a monitored KPI for a specific service and add it to the Monitoring Client @@ -662,11 +657,11 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto f.close() def generate_accuracy_scalability_csv(self): - LOGGER.debug("Starting async prediction accuracy analysis 2") + LOGGER.debug("Starting async prediction accuracy analysis") LOGGER.debug("Correct csv load: {}".format(os.path.exists("/var/teraflow/scalability_accuracy.csv"))) # Wait for the system to stabilize - time.sleep(TIME_TO_STABILIZE * 60) + time.sleep(self.time_to_stabilize * 60) LOGGER.debug("Scalability csv started") with open("/var/teraflow/scalability_accuracy.csv", 'a', newline='') as f: spamwriter = csv.writer(f, delimiter=' ', quotechar='|', quoting=csv.QUOTE_MINIMAL) @@ -674,12 +669,25 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto 'TOTAL_PREDICTIONS', 'TOTAL_POSITIVES', 'F_POSITIVES', 'T_NEGATIVES', 'F_NEGATIVES', 'CONFIDENCE', 'TIMESTAMP', 'TIME_TO_STABILIZE'])''' - spamwriter.writerow([MAX_CONNECTION_TIME, self.overall_detection_acc.value, self.cryptomining_attack_detection_acc.value, + spamwriter.writerow([self.max_connection_time, self.overall_detection_acc.value, self.cryptomining_attack_detection_acc.value, self.total_predictions.value, self.attack_connections_len.value, self.false_positives.value, self.total_predictions.value - self.attack_connections_len.value, self.false_negatives.value, - self.confidence.value, datetime.now().strftime("%d/%m/%Y %H:%M:%S"), TIME_TO_STABILIZE]) + self.confidence.value, datetime.now().strftime("%d/%m/%Y %H:%M:%S"), self.time_to_stabilize]) f.close() + + @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) + def GetScalabilityConfig(self, request, context): + LOGGER.info("Received scalability config request") + + self.max_connection_time = request.max_connection_time + self.time_to_stabilize = request.time_to_stabilize + + # Start process to generate accuracy scalability csv asynchronically + p = Process(target=self.generate_accuracy_scalability_csv) + p.start() + + return Empty(message="CSV generated") def AnalyzeBatchConnectionStatistics(self, request, context): batch_time_start = time.time() -- GitLab