A Survey of Network-based Intrusion Detection Data Sets
This page provides links to all referenced data sets and data repositories of the paper "A Survey of Network-based Intrusion Detection Data Sets" (submitted to Computer & Security).
Data sets
| Data Set | Link |
| AWID | http://icsdweb.aegean.gr/awid/index.html |
| Booters | https://www.simpleweb.org/wiki/index.php |
| Botnet | http://www.unb.ca/cic/datasets/botnet.html |
| CIC DoS | http://www.unb.ca/cic/datasets/dos-dataset.html |
| CICIDS | http://www.unb.ca/cic/datasets/ids-2017.html |
| CIDDS-001 | http://www.hs-coburg.de/cidds |
| CIDDS-002 | http://www.hs-coburg.de/cidds |
| CDX | https://www.usma.edu/crc/sitepages/datasets.aspx |
| CTU-13 | https://mcfp.weebly.com/the-ctu-13-dataset-a-labeled-dataset-with-botnet-normal-and-background-traffic.html |
| DARPA | https://www.ll.mit.edu/ideval/docs/index.html |
| DDoS 2016 | https://www.researchgate.net/publication/292967044_Dataset-_Detecting_Distributed_Denial_of_Service_Attacks_Using_Data_Mining_Techniques |
| IRSC | not publicly available |
| ISCX 2012 | http://www.unb.ca/cic/datasets/ids.html |
| ISOT | https://www.uvic.ca/engineering/ece/isot/datasets/ |
| KDD CUP 99 | http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html |
| Kent 2016 | https://csr.lanl.gov/data/cyber1/ |
| Kyoto 2006+ | https://csr.lanl.gov/data/cyber1/ |
| LBNL | http://icir.org/enterprise-tracing/ |
| NDSec-1 | http://www2.hs-fulda.de/NDSec/NDSec-1/ |
| NGIDS-DS | https://research.unsw.edu.au/people/professor-jiankun-hu |
| NSL-KDD | http://www.unb.ca/cic/datasets/nsl.html |
| PU-IDS | no link found |
| PUF | no link found |
| SANTA | not publicly available |
| SSENet-2011 | no link found |
| SSENet 2014 | no link found |
| SSHCure | https://www.simpleweb.org/wiki/index.php |
| TRAbID | https://secplab.ppgia.pucpr.br/trabid |
| TUIDS | http://agnigarh.tezu.ernet.in/~dkb/resources.html |
| Twente | https://www.simpleweb.org/wiki/index.php |
| UGR'16 | https://nesg.ugr.es/nesg-ugr16/index.php |
| UNIBS 2009 | http://netweb.ing.unibs.it/~ntw/tools/traces/ |
| Unified Host and Network Data Set | https://csr.lanl.gov/data/2017.html |
| UNSW-NB15 | https://www.unsw.adfa.edu.au/unsw-canberra-cyber/cybersecurity/ADFA-NB15-Datasets/ |
Data Repositories
| Data Repository | Link |
| AZSecure | https://www.azsecure-data.org/other-data.html |
| CAIDA | http://www.caida.org/data/overview/ |
| Contagiodump | http://contagiodump.blogspot.com/ |
| covert.io | http://www.covert.io |
| DEF CON CTF Archive | https://www.defcon.org/html/links/dc-ctf.html |
| IMPACT | https://www.impactcybertrust.org/ |
| Internet Traffic Archive | http://ita.ee.lbl.gov/html/traces.html |
| Kaggle | https://www.kaggle.com/ |
| Malware Traffic Analysis | http://malware-traffic-analysis.net/ |
| Mid-Atlantic CCDC | http://maccdc.org/ |
| MAWILab | http://www.fukuda-lab.org/mawilab/ |
| MWS | https://www.iwsec.org/mws/2018/en.html |
| NETRECSEC | http://www.netresec.com/?page=PcapFiles |
| OpenML | https://www.openml.org/home |
| RIPE Data Repository | https://labs.ripe.net/datarepository |
| SecRepo | http://www.secrepo.com/ |
| Simple Web | https://www.simpleweb.org/wiki/index.php/ |
| UMassTraceRepository | http://traces.cs.umass.edu/ |
| VAST Challenge | http://vacommunity.org/tiki-index.php |
| WITS: Waikato Internet Traffic Storage | https://wand.net.nz/wits/catalogue.php |
Traffic Generators
Please read the paper to get an overview of existing traffic generators.
