3
0

LabelManager.py 6.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169
  1. import os.path
  2. from datetime import datetime
  3. from xml.dom.minidom import *
  4. import ID2TLib.Label as Label
  5. class LabelManager:
  6. TAG_ROOT = 'LABELS'
  7. TAG_ATTACK = 'attack'
  8. TAG_ATTACK_NAME = 'attack_name'
  9. TAG_ATTACK_NOTE = 'attack_note'
  10. TAG_TIMESTAMP_START = 'timestamp_start'
  11. TAG_TIMESTAMP_END = 'timestamp_end'
  12. TAG_TIMESTAMP = 'timestamp'
  13. TAG_TIMESTAMP_HR = 'timestamp_hr'
  14. ATTR_VERSION = 'version_parser'
  15. # update this attribute if XML scheme was modified
  16. ATTR_VERSION_VALUE = '0.2'
  17. def __init__(self, filepath_pcap=None):
  18. """
  19. Creates a new LabelManager for managing the attack's labels.
  20. :param filepath_pcap: The path to the PCAP file associated to the labels.
  21. """
  22. self.labels = list()
  23. if filepath_pcap is not None:
  24. self.label_file_path = filepath_pcap.replace('.pcap', '_labels.xml')
  25. # only load labels if label file is existing
  26. if os.path.exists(self.label_file_path):
  27. self.load_labels()
  28. def add_labels(self, labels):
  29. """
  30. Adds a label to the internal list of labels.
  31. :param labels: The labels to be added
  32. """
  33. if isinstance(labels, list):
  34. self.labels = self.labels + [labels]
  35. elif isinstance(labels, tuple):
  36. for l in labels:
  37. self.labels.append(l)
  38. else:
  39. self.labels.append(labels)
  40. # sorts the labels ascending by their timestamp
  41. self.labels.sort()
  42. def write_label_file(self, filepath=None):
  43. """
  44. Writes previously added/loaded labels to a XML file. Uses the given filepath as destination path, if no path is
  45. given, uses the path in label_file_path.
  46. :param filepath: The path where the label file should be written to.
  47. """
  48. def get_subtree_timestamp(xml_tag_root, timestamp_entry):
  49. """
  50. Creates the subtree for a given timestamp, consisting of the unix time format (seconds) and a human-readable
  51. output.
  52. :param xml_tag_root: The tag name for the root of the subtree
  53. :param timestamp_entry: The timestamp as unix time
  54. :return: The root node of the XML subtree
  55. """
  56. timestamp_root = doc.createElement(xml_tag_root)
  57. # add timestamp in unix format
  58. timestamp = doc.createElement(self.TAG_TIMESTAMP)
  59. timestamp.appendChild(doc.createTextNode(str(timestamp_entry)))
  60. timestamp_root.appendChild(timestamp)
  61. # add timestamp in human-readable format
  62. timestamp_hr = doc.createElement(self.TAG_TIMESTAMP_HR)
  63. timestamp_hr_text = datetime.fromtimestamp(timestamp_entry).strftime('%Y-%m-%d %H:%M:%S.%f')
  64. timestamp_hr.appendChild(doc.createTextNode(timestamp_hr_text))
  65. timestamp_root.appendChild(timestamp_hr)
  66. return timestamp_root
  67. if filepath is not None:
  68. self.label_file_path = filepath.replace('.pcap', '_labels.xml')
  69. # Generate XML
  70. doc = Document()
  71. node = doc.createElement(self.TAG_ROOT)
  72. node.setAttribute(self.ATTR_VERSION, self.ATTR_VERSION_VALUE)
  73. for label in self.labels:
  74. xml_tree = doc.createElement(self.TAG_ATTACK)
  75. # add attack to XML tree
  76. attack_name = doc.createElement(self.TAG_ATTACK_NAME)
  77. attack_name.appendChild(doc.createTextNode(str(label.attack_name)))
  78. xml_tree.appendChild(attack_name)
  79. attack_note = doc.createElement(self.TAG_ATTACK_NOTE)
  80. attack_note.appendChild(doc.createTextNode(str(label.attack_note)))
  81. xml_tree.appendChild(attack_note)
  82. # add timestamp_start to XML tree
  83. xml_tree.appendChild(get_subtree_timestamp(self.TAG_TIMESTAMP_START, label.timestamp_start))
  84. # add timestamp_end to XML tree
  85. xml_tree.appendChild(get_subtree_timestamp(self.TAG_TIMESTAMP_END, label.timestamp_end))
  86. node.appendChild(xml_tree)
  87. doc.appendChild(node)
  88. # Write XML to file
  89. file = open(self.label_file_path, 'w')
  90. file.write(doc.toprettyxml())
  91. file.close()
  92. def load_labels(self):
  93. """
  94. Loads the labels from an already existing label XML file located at label_file_path (set by constructor).
  95. """
  96. def get_value_from_node(node, tag_name, *child_number):
  97. """
  98. Returns the value located in the tag specified by tag_name from a given node. Walks therefor the
  99. node's children along as indicated by child_number, e.g., childNumber = (1,2,) first goes to the 1st child, and
  100. then to the 2nd child of the first child -> elem.childNodes[1].childNodes[2].
  101. """
  102. elem = node.getElementsByTagName(tag_name)
  103. if len(elem) == 1:
  104. elem = elem[0]
  105. for c in child_number:
  106. if len(elem.childNodes) > 0:
  107. elem = elem.childNodes[c]
  108. else:
  109. return ""
  110. return elem.data
  111. else:
  112. return ""
  113. print("Label file found. Loading labels...")
  114. try:
  115. dom = parse(self.label_file_path)
  116. except Exception:
  117. print('ERROR: Provided label file could not be parsed. Ignoring label file')
  118. return
  119. # Check if version of parser and version of file match
  120. version = dom.getElementsByTagName(self.TAG_ROOT)
  121. if len(version) > 0:
  122. version = version[0].getAttribute(self.ATTR_VERSION)
  123. if version == [] or not version == self.ATTR_VERSION_VALUE:
  124. print(
  125. "The file " + self.label_file_path + " was created by another version of ID2TLib.LabelManager. Ignoring label file.")
  126. # Parse attacks from XML file
  127. attacks = dom.getElementsByTagName(self.TAG_ATTACK)
  128. count_labels = 0
  129. for a in attacks:
  130. attack_name = get_value_from_node(a, self.TAG_ATTACK_NAME, 0)
  131. attack_note = get_value_from_node(a, self.TAG_ATTACK_NOTE, 0)
  132. timestamp_start = get_value_from_node(a, self.TAG_TIMESTAMP_START, 1, 0)
  133. timestamp_end = get_value_from_node(a, self.TAG_TIMESTAMP_END, 1, 0)
  134. label = Label.Label(attack_name, float(timestamp_start), float(timestamp_end), attack_note)
  135. self.labels.append(label)
  136. count_labels += 1
  137. print("Read " + str(count_labels) + " label(s) successfully.")