Packet and Flow Based Network Intrusion Dataset

• Published in: Contemporary Computing Vol. 306; pp. 322 - 334
• Main Authors: Gogoi, Prasanta, Bhuyan, Monowar H, Bhattacharyya, D. K, Kalita, J. K
• Format: Book Chapter
• Language: English
• Published: Berlin, Heidelberg Springer Berlin Heidelberg
• Series: Communications in Computer and Information Science
• Subjects: Anomaly; Dataset; Netflow; NIDS; Packet; Testbed
• ISBN: 9783642321283; 3642321283
• ISSN: 1865-0929; 1865-0937
• DOI: 10.1007/978-3-642-32129-0_34

With exponential growth in the number of computer applications and the size of networks, the potential damage that can be caused by attacks launched over the internet keeps increasing dramatically. A number of network intrusion detection methods have been developed with their respective strengths and weaknesses. The majority of research in the area of network intrusion detection is still based on the simulated datasets because of non-availability of real datasets. A simulated dataset cannot represent the real network intrusion scenario. It is important to generate real and timely datasets to ensure accurate and consistent evaluation of methods. We propose a new real dataset to ameliorate this crucial shortcoming. We have set up a testbed to launch network traffic of both attack as well as normal nature using attack tools. We capture the network traffic in packet and flow format. The captured traffic is filtered and preprocessed to generate a featured dataset. The dataset is made available for research purpose.