UGR'16: A New Dataset for Network IDS Evaluation

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


April 4 weeks

(Click on each week to download the associated files)

Week #2

From 04/06/2016 to 04/10/2016

More info

Week #3

From 04/11/2016 to 04/17/2016

More info

Week #4

From 04/18/2016 to 04/24/2016

More info

Week #5

From 04/25/2016 to 04/30/2016

More info