UGR'16: A New Dataset for Network IDS Evaluation

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


July 1 week

(Click on each week to download the associated files)

Week #5

From 07/27/2016 to 07/31/2016

Attacks from 07/27/2016 to 07/31/2016

More Info