Skip to content
Research Article Open access CC BY 4.0

A Detailed Analysis of Benchmark Datasets for Network Intrusion Detection System

Mossa Ghurab, Ghaleb Gaphari, Faisal Alshami, Reem Alshamy, Suad Othman

Asian Journal of Research in Computer Science · pp. 14–33 · Published 14 Apr 2021

10.9734/ajrcos/2021/v7i430185

Abstract

The enormous increase in the use of the Internet in daily life has provided an opportunity for the intruder attempt to compromise the security principles of availability, confidentiality, and integrity. As a result, organizations are working to increase the level of security by using attack detection techniques such as Network Intrusion Detection System (NIDS), which monitors and analyzes network flow and attacks detection. There are a lot of researches proposed to develop the NIDS and depend on the dataset for the evaluation. Datasets allow evaluating the ability in detecting intrusion behavior. This paper introduces a detailed analysis of benchmark and recent datasets for NIDS. Specifically, we describe eight well-known datasets that include: KDD99, NSL-KDD, KYOTO 2006+, ISCX2012, UNSW-NB 15, CIDDS-001, CICIDS2017, and CSE-CIC-IDS2018. For each dataset, we provide a detailed analysis of its instances, features, classes, and the nature of the features. The main objective of this paper is to offer overviews of the datasets are available for the NIDS and what each dataset is comprised of. Furthermore, some recommendations were made to use network-based datasets.

KDD99 NSL-KDD KYOTO 2006 ISCX2012 UNSW-NB 15 CIDDS-001 CICIDS2017 CSE-CIC-IDS2018

Cited by 101

Contrast Duality of Adversarial Learningin Network Intrusion: A Review

Shalini Saini, Anitha Chennamaneni, B. Sawyerr · IEEE Transactions on Artificial Intelligence · 2026

Intrusion Detection and Attack Classification in IoT Networks Using Machine Learning

F. Hassan, Ghazlan Al-Zarrouq, Rabia EmhamedAl Mamlook · 2026 2nd International Conference on Computational Intelligence Approaches and Applications (ICCIAA) · 2026

Blockchain-based Internet of Things Security: A Survey

Reem Alshamy, M. Akcayol · El-Cezeri Fen ve Mühendislik Dergisi · 2026

Attacks Detection Model Based on a Machine Learning Algorithm

Essra Abd Wazkool, Abdulrahman A. Alsabri, Uad Mohammed Othman · مجلة جامعة صنعاء للعلوم التطبيقية والتكنولوجيا · 2026

INTRUSION DETECTION MODEL USING CNN-LSTM ON APACHE SPARK PLATFORM

S. Othman, Adnan Yehya Al-Mutawkkil · NED University Journal of Research · 2026

Tomek Links and Random Undersampling for Infiltration Attack Detection in Imbalanced CSE-CIC-IDS2018 Dataset

S. Fernandes, Aji Gautama Putrada, R. Wicaksono · 2025 IEEE International Conference on Communication, Networks and Satellite (COMNETSAT) · 2025

TFCNet: Based on time-frequency domain and multi-channel analysis for Network security situation prediction

Sheng-Cai Zhang, Fanchang Zeng, Huiju Yi · Computers & security · 2025

Comparing Synthetic and Authentic Network Traffic: A Case Study

Jonas Vasconcelos Bistene, Clayton Escouper das Chagas, A. D. Dos Santos · International Symposium on Networks, Computers and Communications · 2025

Article metrics

Real usage data collected on this platform.

85

Page views

0

PDF downloads

4

Outbound clicks

101

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.