We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:


Current browse context:


Change to browse by:


References & Citations

DBLP - CS Bibliography


(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Computer Science > Cryptography and Security

Title: A Survey of Network-based Intrusion Detection Data Sets

Abstract: Labeled data sets are necessary to train and evaluate anomaly-based network intrusion detection systems. This work provides a focused literature survey of data sets for network-based intrusion detection and describes the underlying packet- and flow-based network data in detail. The paper identifies 15 different properties to assess the suitability of individual data sets for specific evaluation scenarios. These properties cover a wide range of criteria and are grouped into five categories such as data volume or recording environment for offering a structured search. Based on these properties, a comprehensive overview of existing data sets is given. This overview also highlights the peculiarities of each data set. Furthermore, this work briefly touches upon other sources for network-based data such as traffic generators and traffic repositories. Finally, we discuss our observations and provide some recommendations for the use and creation of network-based data sets.
Comments: submitted manuscript to Computer & Security
Subjects: Cryptography and Security (cs.CR)
Journal reference: Computer & Security 2019
DOI: 10.1016/j.cose.2019.06.005
Cite as: arXiv:1903.02460 [cs.CR]
  (or arXiv:1903.02460v2 [cs.CR] for this version)

Submission history

From: Markus Ring [view email]
[v1] Wed, 6 Mar 2019 15:58:44 GMT (197kb,D)
[v2] Sat, 6 Jul 2019 09:25:32 GMT (257kb,D)

Link back to: arXiv, form interface, contact.