Skip to content

A comprehensive survey of datasets for research in host-based and/or network-based intrusion detection, with a focus on enterprise networks

License

Notifications You must be signed in to change notification settings

fkie-cad/COMIDDS

Repository files navigation

COMIDDS

A Comprehensive, Continuous, and Collaborative Survey of Intrusion Detection Datasets.

The content of this repository is intended to be viewed through its github.io site!

Content and Goals

This repository contains the website for COMIDDS, an overview of datasets for research in intrusion detection. Our goal is to provide a comprehensive and detailed list of relevant datasets along with descriptions and links, aiding researchers in finding and selecting suitable data to work with. Beyond the table of all datasets, each dataset has a separate page, listing key features and describing the underlying environment, activity, contained data, etc.

We mainly focus on datasets suited for developing and evaluating methods for intrusion detection in enterprise networks, i.e., common office environments involving applications such as browsing, emailing, or text processing as well as services such as web, email, or database servers. We intentionally omit datasets from very different environments such as industrial control systems or Internet exchange points.

Citing this Work

If you are using COMIDDS for your academic work, please cite our paper:

@inproceedings{10.1145/3675741.3675754,
  author = {B\"{o}nninghausen, Philipp and Uetz, Rafael and Henze, Martin},
  title = {Introducing a Comprehensive, Continuous, and Collaborative Survey of Intrusion Detection Datasets},
  year = {2024},
  isbn = {9798400709579},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3675741.3675754},
  doi = {10.1145/3675741.3675754},
  booktitle = {Proceedings of the 17th Cyber Security Experimentation and Test Workshop},
  pages = {34–40},
  numpages = {7},
  keywords = {Cyber Range, Cyberattack, Dataset, Enterprise Network, Intrusion Detection, Log Data, Netflow Data, Simulation, Survey, Testbed},
  location = {Philadelphia, PA, USA},
  series = {CSET '24}
}

If you (additionally) would like to cite specific information from within COMIDDS, we recommend to cite the release that the information is contained in, e.g.,

@misc{comidds100,
  author = {{COMIDDS} contributors},
  title = {{COMIDDS v1.0.0 -- GitHub}},
  year = {2024},
  howpublished = {\url{https://github.com/fkie-cad/COMIDDS/releases/tag/v1.0.0}},
  note = {[Online; accessed DD-MMM-YYYY]},
}

Contributing

Any kind of contribution is most welcome, both in the form of adding new entries and improving existing ones! For more information, please refer to the Contribution Guide.