2015 · 3.6K citations · 8 references
ComputingComputer ScienceCybersecurityComputer SecurityData MiningNetwork SecurityComputer IntrusionIntrusion DetectionNetwork Traffic AnalysisThreat Data CollectionAttack Traffic ClassificationNetwork Intrusion DetectionNetwork Traffic ModelingNetwork-based Intrusion Detection
One of the major research challenges in this field is the unavailability of a comprehensive network based data set which can reflect modern network traffic scenarios, vast varieties of low footprint intrusions and depth structured information about the network traffic. Evaluating network intrusion detection systems research efforts, KDD98, KDDCUP99 and NSLKDD benchmark data sets were generated a decade ago. However, numerous current studies showed that for the current network threat environment, these data sets do not inclusively reflect network traffic and modern low footprint attacks. Countering the unavailability of network benchmark data set challenges, this paper examines a UNSW-NB15 data set creation. This data set has a hybrid of the real modern normal and the contemporary synthesized attack activities of the network traffic. Existing and novel methods are utilised to generate the features of the UNSWNB15 data set. This data set is available for research purposes and can be accessed from the link.
8
A detailed analysis of the KDD CUP 99 data set
Mahbod Tavallaee, Ebrahim Bagheri, Wei Lu et al. · 2009 · 4.8K citations · Full text
Testing Intrusion detection systems
John McHugh · ACM Transactions on Information and System Security · 2000 · 1.3K citations · Full text
Intrusion Detection Systems: A Survey and Taxonomy
Stefan Axelsson · 2002 · 760 citations