Serial Number: 49
Year: 2017
Kind of Traffic: Simulated
Publicly Available: Yes
Count of Records: 460M pack- ets
Features Count: 50
No. of citations: 174
Attack Type: DoS, Probing
Download Links: https://secplab.ppgia.pucpr.br/?q=trabid
Abstract: In 2017 TRAbID dataset was proposed by Viegas et al. For evaluating intrusion detection systems TRAbID database include “16” types of scenarios. Every scenario was recorded in a virtual environment (100 clients and 1 honeypot server). The traffic was captured for 30 minutes and few attacks were carried out in each scenario. The authors labelled the network traffic using the clients' IP addresses. Every client uses Linux system. The majority of clients only performed user requests, which were normal to the honeypot server while some clients only perform attacks. HTTP, SSH, SMTP, and SNMP traffic are examples of normal user behaviour, whereas malicious network traffic includes DoS attacks and port scans. TRAbID is readily available.