UGR'16: A New Dataset for the Evaluation of Cyclostationarity-Based Network IDSs

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


Reference:
Gabriel Maciá Fernández, José Camacho, Roberto Magán-Carrión, Pedro García-Teodoro, Roberto Theron, Ugr'16: a new dataset for the evaluation of cyclostationarity-based network IDSs, In Computers & Security, 2017
Author paper version available for download by clicking here


March - Week #4 Date range: 21/03/2016 - 27/03/2016

# File Name File Type Description Upload time Download
1 march_week4_nfcapd Collected binary netflow 04/11/2017 22:38:16
2 march_week4_csv Collected CSV netflow flows (labeled) 04/04/2018 16:21:40

Attack execution timestamps (mins)


# File Name File Type Description Upload time Download
1 attack_ts_march_week4.csv Contains the timestamps (in mins) where the attacks were executed 11/30/2017 00:36:43

Flows per type of attack (labeled)


# File Name File Type Description Upload time Download
4 blacklist_march_week4_csv Extracted flows where the involved IPs are in the black lists 11/30/2017 00:16:20
5 spam_march_week4_csv Extracted flows for spam attacks 11/30/2017 00:36:41
6 sshscan_march_week4_csv Extracted flows for SSH scan attacks 11/30/2017 00:36:42
7 udpscan_march_week4_csv Extracted flows for UDP scan attacks 11/30/2017 00:36:42