Serial Number: 9
Year: 2008
Kind of Traffic: Real
Publicly Available: Yes
Count of Records: 14.2M flows
Features Count: 10
No. of citations: 231
Attack Type: brute force, scan, etc
Download Links: Not Available
Abstract: In 2008, one of the first intrusion detection dataset based on flow was released by Sperotto et al in Twente University and is available to public. The Twente data set have traffic from a honeypot server which provides FTP, web, & SSH services of “6” days. The dataset only contains honeypot network traffic, and nearly all flows are malicious, with no normal user behaviour.