UGR'16: A New Dataset for Network IDS Evaluation

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.

June 4 weeks

(Click on each week to download the associated files)

Week #1

From 06/01/2016 to 06/05/2016

More info

Week #2

From 06/06/2016 to 06/12/2016

More info

Week #3

From 06/13/2016 to 06/19/2016

More info

Week #4

From 06/20/2016 to 06/26/2016

More info