Skip to content
Research Article Open access CC BY 4.0

A Detailed Analysis of Benchmark Datasets for Network Intrusion Detection System

Mossa Ghurab, Ghaleb Gaphari, Faisal Alshami, Reem Alshamy, Suad Othman

Asian Journal of Research in Computer Science · pp. 14–33 · Published 14 Apr 2021

10.9734/ajrcos/2021/v7i430185

Abstract

The enormous increase in the use of the Internet in daily life has provided an opportunity for the intruder attempt to compromise the security principles of availability, confidentiality, and integrity. As a result, organizations are working to increase the level of security by using attack detection techniques such as Network Intrusion Detection System (NIDS), which monitors and analyzes network flow and attacks detection. There are a lot of researches proposed to develop the NIDS and depend on the dataset for the evaluation. Datasets allow evaluating the ability in detecting intrusion behavior. This paper introduces a detailed analysis of benchmark and recent datasets for NIDS. Specifically, we describe eight well-known datasets that include: KDD99, NSL-KDD, KYOTO 2006+, ISCX2012, UNSW-NB 15, CIDDS-001, CICIDS2017, and CSE-CIC-IDS2018. For each dataset, we provide a detailed analysis of its instances, features, classes, and the nature of the features. The main objective of this paper is to offer overviews of the datasets are available for the NIDS and what each dataset is comprised of. Furthermore, some recommendations were made to use network-based datasets.

KDD99 NSL-KDD KYOTO 2006 ISCX2012 UNSW-NB 15 CIDDS-001 CICIDS2017 CSE-CIC-IDS2018

Cited by 101

Streaming-Based Intrusion Detection with Big Data and Online Learning Algorithms

Amro Saleh, H. Mosa, Mouhammd Alkasassbeh · Italian Conference on Theoretical Computer Science · 2025

PETDA2C-EC: a privacy-enhancing technique to detect attacks against confidentiality in edge computing

Vipin Kumar, Vivek Kumar · Journal of Reliable Intelligent Environments · 2025

Enhancing DDoS defense in SDN using hierarchical machine learning models

S. Kaur, Krishan Kumar, N. Aggarwal · Journal of Network and Computer Applications · 2025

A Novel Dataset and a Hybrid Ensemble Approach for Anomaly Detection in Enterprise-Access-Logs for Anomaly Detection

S. Udayakumar, Hariharan Ragothaman, Kumar Manas Khare · 2025 International Conference on Data Science, Agents & Artificial Intelligence (ICDSAAI) · 2025

A Comparative Study of Two-Stage Intrusion Detection Using Modern Machine Learning Approaches on the CSE-CIC-IDS2018 Dataset

I. Hewapathirana · Knowledge · 2025

Time Matters: Temporal NetFlow Features for ML-Based Network Intrusion Detection

Majed Luay, S. Layeghy, Niloufar Noorbin · IEEE Access · 2025

Enhancing Intrusion Detection Systems: A Unified Framework Leveraging User Personality Behavior Analysis to Detect Insider Threats and Social Engineering Attacks through Deep Learning

Marshet Tamirat, Anteneh Girma, Tilahun Melak · Journal of Electrical Systems · 2025

ICS-LTU2022: A dataset for ICS vulnerabilities

Manar Alanazi, Abdun Mahmood, M. Chowdhury · Computers & security · 2025

Enhancing Multiclass Network Intrusion Detection Systems Using Continuous Wavelet Transform on Network Traffic

Abdulaziz A. Alsulami, B. Alturki · Data and Metadata · 2025

Deep learning-driven methods for network-based intrusion detection systems: A systematic review

Ramya Chinnasamy, Malliga Subramanian, S. Easwaramoorthy · ICT express · 2025

Related research

Article metrics

Real usage data collected on this platform.

85

Page views

0

PDF downloads

4

Outbound clicks

101

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.