UGR'16: A New Dataset for the Evaluation of Cyclostationarity-Based Network IDSs

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


Reference:
Gabriel Maciá Fernández, José Camacho, Roberto Magán-Carrión, Pedro García-Teodoro, Roberto Theron, Ugr'16: a new dataset for the evaluation of cyclostationarity-based network IDSs, In Computers & Security, 2017
Author paper version available for download by clicking here


March - Week #3 Date range: 18/03/2016 - 20/03/2016

# File Name File Type Description Upload time Download
1 march_week3_nfcapd Collected binary netflow 04/11/2017 22:20:02
2 march_week3_csv Collected CSV netflow flows (labeled) 04/04/2018 16:04:02

Attack execution timestamps (mins)


# File Name File Type Description Upload time Download
1 attack_ts_march_week3.csv Contains the timestamps (in mins) where the attacks were executed 11/30/2017 00:16:17

Flows per type of attack (labeled)


# File Name File Type Description Upload time Download
4 blacklist_march_week3_csv Extracted flows where the involved IPs are in the black lists 11/29/2017 23:45:07
5 spam_march_week3_csv Extracted flows for spam attacks 11/30/2017 00:16:16
6 sshscan_march_week3_csv Extracted flows for SSH scan attacks 11/30/2017 00:16:16
7 udpscan_march_week3_csv Extracted flows for UDP scan attacks 11/30/2017 00:16:16