Modern NetFlow network dataset with labeled attacks and detection methods

Mikołaj Komisarek, Marek Pawlicki, Tomi Simic, David Kavcnik, Rafał Kozik, Michał Choraś

202311 citationsDOI

Abstract

Network Intrusion Detection Systems are an important part of cyber-defensive inventory. Currently, Machine-Learning-Based Network Intrusion Detection Systems are being researched as an effective security measure. This paper introduces a novel NetFlow-based dataset geared for the training of machine-learning-based detection systems. The dataset incorporates common cyberattacks such as Denial-of-Service, Port Scanning, and brute-force attacks, which represent significant threats to network security. The efficacy of the dataset is evaluated with the use of four machine learning algorithms, with the detection metrics reported. The dataset is an attempt to fill the vacuum for current, realistic datasets in cybersecurity research. The traffic was collected in a real network in the BTC complex in Ljubljana. The dataset can significantly contribute to enhancing the effectiveness of machine learning-based Network Intrusion Detection Systems.

Topics & Concepts

NetFlowIntrusion detection systemComputer scienceDenial-of-service attackNetwork securityBotnetMachine learningData miningArtificial intelligenceAnomaly-based intrusion detection systemComputer securityThe InternetOperating systemNetwork Security and Intrusion DetectionAdvanced Malware Detection TechniquesInternet Traffic Analysis and Secure E-voting