Differentially private transmission control protocol synchronise packet counts

Real Transmission Control Protocol synchronise (TCP SYN) packet counts availability will be of great benefit in anomaly detection. TCP SYN packet counts can be used for training intrusion detection system to detect a denial of service attack called TCP SYN ooding. However, there are privacy and legal issues that limit the direct release of such data to the public. This work aims at providing differentially private TCP SYN packet counts. Utility evaluation indicates that the differentially private counts can be used to make inferences at certain thresholds of the anomaly based detection algorithm with minimum information loss while preserving privacy. © 2019, International Journal of Network Security.