UGR'16: A New Dataset for the Evaluation of Cyclostationarity-Based Network IDSs

The dataset presented here is built with real traffic and up-to-date attacks. These data come from several netflow v9 collectors strategically located in the network of a spanish ISP. It is composed of two differentiated sets of data that are previously split in weeks:

The main advantage of this dataset over previous ones is its usefulness for evaluating IDSs that consider long-term evolution and traffic periodicity. Models that consider differences in daytime/night or labour weekdays/weekends can also be trained and evaluated with it.


Reference:
Gabriel Maciá Fernández, José Camacho, Roberto Magán-Carrión, Pedro García-Teodoro, Roberto Theron, Ugr'16: a new dataset for the evaluation of cyclostationarity-based network IDSs, In Computers & Security, 2017
Author paper version available for download by clicking here


May - Week #1 Date range: 05/01/2016

# File Name File Type Description Upload time Download
1 may_week1_nfcapd Collected binary netflow 04/12/2017 02:20:22
2 may_week1_csv Collected CSV netflow flows (labeled) 04/04/2018 16:35:52

Attack execution timestamps (mins)


# File Name File Type Description Upload time Download
1 attack_ts_may_week1.csv Contains the timestamps (in mins) where the attacks were executed 11/30/2017 02:52:58

Flows per type of attack (labeled)


# File Name File Type Description Upload time Download
4 blacklist_may_week1_csv Extracted flows where the involved IPs are in the black lists 11/30/2017 02:50:12
5 spam_may_week1_csv Extracted flows for spam attacks 11/30/2017 02:52:57
6 sshscan_may_week1_csv Extracted flows for SSH scan attacks 11/30/2017 02:52:57
7 udpscan_may_week1_csv Extracted flows for UDP scan attacks 11/30/2017 02:52:57