UGR'16: A New Dataset for Network IDS Evaluation

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


August 5 weeks

(Click on each week to download the associated files)

Week #1

From 08/01/2016 to 08/07/2016

Attacks from 08/01/2016 to 08/07/2016

More info

Week #2

From 08/08/2016 to 08/14/2016

Attacks from 08/08/2016 to 08/09/2016

More info

Week #3

From 08/15/2016 to 08/21/2016

More info

Week #4

From 08/22/2016 to 08/28/2016

More info

Week #5

08/29/2016

More info