# Enhancing Cloud Computing Analysis: A CCE-Based HTTP-GET Log Dataset
## 6 The Proposed HTTP-GET Log CCE Dataset Methodology
### Generating HTTP-GET Requests  
The protocol of the HTTP is a request-and-response protocol with a client and server architecture in which search engines, robots, and web browsers behave as HTTP clients and the WS works as a server. The server receives an HTTP request from an HTTP client as a request message that includes information such as the request method. The request method, such as GET or POST, denotes the manner used on the resource defined by the request Uniform Resource Identifier (URI). The HTTP-GET method is employed to obtain data through the provided URI of a WS. HTTP-GET requests should solely reclaim data and have no other influence on them. We can generate HTTP-GET requests (normal/abnormal) to build the dataset in various environments, such as traditional, virtual simulation software (CloudSim, CloudAnalyst, Greencloud, and iCanCloud) and CCEs. The traditional and virtual environments are the least complicated, but the simulation software is the simplest and fastest build environment because it does not require setting up physical or virtual machines. However, these environments cannot mimic the natural CCE behavior, as the requests may contain an unrealistic representation of CCEs and biased characteristics that do not reflect real-world network conditions and traffic patterns. \begin{table}
\begin{tabular}{p{42.7 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Features** & **Features’ Source** & **Event Records** & **Field** & **Description** \\ \hline Existing & Access log & (HTTP-GET) requests & Client\_IP & The IP address of requesting host \\ \cline{3-4}  & & & Client\_Identity & Determines the user’s identity \\ \cline{3-4}  & & & User\_ID & The HTTP authentication determines the username \\ \cline{3-4}  & & & Date & The date when the request was received \\ \cline{3-4}  & & & Time & The time when the request was received \\ \cline{3-4}  & & & Zone & The time zone \\ \cline{3-4}  & & & Method\_type & The request method of HTTP used in each request (GET/POST/etc.) \\ \cline{3-4}  & & & Request & The user’s request \\ \cline{3-4}  & & & HTTP\_Protocol & The request protocol used \\ \cline{3-4}  & & & Status\_Code & The status of request for user \\ \cline{3-4}  & & & Size\_of\_Response & The size of the response \\ \cline{3-4}  & & & Referrer & The page that linked to this Uniform Resource Locator (URL) \\ \cline{3-4}  & & & User\_Agent & Type of Internet browser and OS used to access the website \\ \hline New & CCE log & VM Activity & VM\_CPU & The number of CPUs allocated for the VM \\ \cline{3-4}  & & & VM\_RAM & The size of RAM allocated for the VM \\ \cline{3-4}  & & & VM\_vMotion & The motion (migration) of the VM over the hosts \\ \cline{3-4}  & & & VM\_clone & Number of instances of the VM \\ \hline \multicolumn{4}{c}{VM resources log} & VM central processing unit (CPU) & CPU\_usr & The CPU usage by a user’s processes \\ \cline{3-4}  & & & CPU\_sys & The CPU usage by system’s processes \\ \cline{3-4}  & & & CPU\_idl & The number of idle processes in the CPU (total usage) \\ \cline{3-4}  & & & CPU\_wai & The number of waiting processes in the CPU (total usage) \\ \cline{3-4}  & & & CPU\_stl & The CPU usage by CPU stl \\ \hline \multicolumn{4}{c}{VM random access memory (RAM)} & RAM\_used & The total usage of RAM \\ \cline{3-4}  & & & RAM\_free & The total nonusage of RAM \\ \cline{3-4}  & & & RAM\_buff & Memory used by kernel buffers \\ \cline{3-4}  & & & RAM\_cach & Memory used by the page cache and slabs \\ \hline \end{tabular}
\end{table} 
Table 2: Fields and descriptions of the proposed dataset. Thus, these environments do not appear viable for creating an effective dataset of HTTP-GET flood DDoS attacks on CCEs. Another option is to build up and install a full-fledged actual CCE, hosts, and network equipment. This option can provide the highest level of realism in creating the dataset. However, procuring and managing the entire CCE is prohibitively expensive.