Skip to content
Research Article Open access CC BY 4.0

A Detailed Analysis of Benchmark Datasets for Network Intrusion Detection System

Mossa Ghurab, Ghaleb Gaphari, Faisal Alshami, Reem Alshamy, Suad Othman

Asian Journal of Research in Computer Science · pp. 14–33 · Published 14 Apr 2021

10.9734/ajrcos/2021/v7i430185

Abstract

The enormous increase in the use of the Internet in daily life has provided an opportunity for the intruder attempt to compromise the security principles of availability, confidentiality, and integrity. As a result, organizations are working to increase the level of security by using attack detection techniques such as Network Intrusion Detection System (NIDS), which monitors and analyzes network flow and attacks detection. There are a lot of researches proposed to develop the NIDS and depend on the dataset for the evaluation. Datasets allow evaluating the ability in detecting intrusion behavior. This paper introduces a detailed analysis of benchmark and recent datasets for NIDS. Specifically, we describe eight well-known datasets that include: KDD99, NSL-KDD, KYOTO 2006+, ISCX2012, UNSW-NB 15, CIDDS-001, CICIDS2017, and CSE-CIC-IDS2018. For each dataset, we provide a detailed analysis of its instances, features, classes, and the nature of the features. The main objective of this paper is to offer overviews of the datasets are available for the NIDS and what each dataset is comprised of. Furthermore, some recommendations were made to use network-based datasets.

KDD99 NSL-KDD KYOTO 2006 ISCX2012 UNSW-NB 15 CIDDS-001 CICIDS2017 CSE-CIC-IDS2018

Cited by 101

Comparative Evaluation of Machine Learning Algorithms for Network Intrusion Detection and Attack Classification

M. Leon, Tijana Markovic, S. Punnekkat · IEEE International Joint Conference on Neural Network · 2022

An efficient SVM based DEHO classifier to detect DDoS attack in cloud computing environment

M. M. Gowthul Alam, S. J. N. Kumar, R. UmaMageswari · Comput. Networks · 2022

The Effects of Autoencoders on the Robustness of Deep Learning Models

Elif Değirmenci, Ilker Özçelik, A. Yazıcı · Signal Processing and Communications Applications Conference · 2022

A Novel Hybrid Evolutionary Transformer-Long Short-Term Memory Model for Unified Anomaly Detection in IoT and Cyber-Physical Networks

Pardis Sadatian Moghaddam, Mahyar Mahmoudi, Nuria Serrano · Computers, Materials & Continua · 2026

Feature-Space Adversarial Robustness Evaluation of Lightweight ML-Based Intrusion Detection for IoT and Healthcare-Sensing Networks

A. Alajaji, Rawan Alharbi, M. M. Hassan · IEEE Access · 2026

Systematic Analysis of Federated Learning Approaches for Intrusion Detection in the Internet of Things Environment

Nuha A. Hamad, K. A. Bakar, Faizan Qamar · IEEE Access · 2025

A Taxonomy of IDS in IoTs: ML Classifiers, Feature Selection Models, Datasets and Future Directions

Hessah Alqahtani, Monir Abdullah · International Journal of Advanced Computer Science and Applications · 2024

DDoS Attacks Detection in IoV using ML-based Models with an Enhanced Feature Selection Technique

Ohoud Ali Albishi, Monir Abdullah · International Journal of Advanced Computer Science and Applications · 2024

From Bytes to Insights: A Systematic Literature Review on Unraveling IDS Datasets for Enhanced Cybersecurity Understanding

Akbar Khanan, Yasir Abdelgadir Mohamed, A. H. Mohamed · IEEE Access · 2024

A comprehensive analysis of various cyber attack datasets used for intrusion detection system

Deepshikha Kumari, A. Sinha, Sandip Dutta · PROCEEDINGS OF THE TIM22 PHYSICS CONFERENCE · 2024

Related research

Article metrics

Real usage data collected on this platform.

85

Page views

0

PDF downloads

4

Outbound clicks

101

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.