UGR'16: A New Dataset for the Evaluation of Cyclostationarity-Based Network IDSs

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


Reference:
Gabriel Maciá Fernández, José Camacho, Roberto Magán-Carrión, Pedro García-Teodoro, Roberto Theron, Ugr'16: a new dataset for the evaluation of cyclostationarity-based network IDSs, In Computers & Security, 2017
Author paper version available for download by clicking here


June - Week #2 Date range: 06/06/2016 - 06/12/2016

# File Name File Type Description Upload time Download
1 june_week2_nfcapd Collected binary netflow 04/12/2017 05:30:52
2 june_week2_csv Collected CSV netflow flows (labeled) 04/04/2018 15:22:37

Attack execution timestamps (mins)


# File Name File Type Description Upload time Download
1 attack_ts_june_week2.csv Contains the timestamps (in mins) where the attacks were executed 11/30/2017 05:04:51

Flows per type of attack (labeled)


# File Name File Type Description Upload time Download
4 blacklist_june_week2_csv Extracted flows where the involved IPs are in the black lists 11/30/2017 04:43:19
5 spam_june_week2_csv Extracted flows for spam attacks 11/30/2017 05:04:50
6 sshscan_june_week2_csv Extracted flows for SSH scan attacks 11/30/2017 05:04:50
7 udpscan_june_week2_csv Extracted flows for UDP scan attacks 11/30/2017 05:04:50