Serial Number: 35
Year: 2016
Kind of Traffic: Real
Publicly Available: Yes
Count of Records: 130M flows
Features Count:
No. of citations: 33
Attack Type: N/A
Download Links: Not Available
Abstract: KENT dataset was compiled over the course of “fifty-eight” days on the Los Alamos National Laboratory network in 2016. This includes approximately “130” million network traffic based on unidirectional flows, & several log files based on host. For privacy reasons, heavily anonymized network traffic is used. This dataset is unlabelled & is available for download from the website. Authentication events are gathered from computers as well as Active Directory domain controller servers. From individual Windows computers the start & stop events of processes are collected, DNS lookups are gathered from internal DNS servers, key routers are used to gather network flow data & a series of well-defined red teaming events were conducted within the past 58 days that displayed bad behaviour. Using the "5" data elements, the dataset measures 12GB in size and has 1,648,275,307 events associated with 62,974 processes, 17,684 computers and 12,425 users.