Dataset For Detection In Multi-IDS Environment
IDS data from a Multi-IDS environment Simulated in GNS3
@kaggle.arkaghoshcs_dataset_for_multi_ids_environment
IDS data from a Multi-IDS environment Simulated in GNS3
@kaggle.arkaghoshcs_dataset_for_multi_ids_environment
The dataset presented aims to support research in developing robust Intrusion Detection Systems (IDS) for modern networks. It simulates a network environment of a fictitious organization with multiple vulnerable hosts and strategic IDS deployments. The experimental setup uses virtual machines to emulate an attacker machine, vulnerable hosts, and IDS devices, connected via Open vSwitches (OVS) with port mirroring to capture traffic. Attack scenarios include multi-hop attacks targeting internal hosts by exploiting vulnerabilities and bypassing traffic restrictions. The raw PcapNG files are complemented with extracted features in CSV format, supporting Machine Learning (ML) analysis. The dataset is designed for training and evaluating IDS models capable of detecting complex, multi-stage attacks in realistic network environments.
CREATE TABLE ids_1 (
"packet_number" BIGINT,
"src_ip" VARCHAR,
"dst_ip" VARCHAR,
"protocol" VARCHAR,
"src_port" DOUBLE,
"dst_port" DOUBLE,
"tcp_payload_hex" VARCHAR,
"tcp_payload_ascii" VARCHAR,
"error" VARCHAR,
"is_attack" VARCHAR
);
CREATE TABLE ids_2 (
"packet_number" BIGINT,
"src_ip" VARCHAR,
"dst_ip" VARCHAR,
"protocol" VARCHAR,
"src_port" DOUBLE,
"dst_port" DOUBLE,
"tcp_payload_hex" VARCHAR,
"tcp_payload_ascii" VARCHAR,
"error" VARCHAR,
"is_attack" VARCHAR
);
CREATE TABLE ids_3 (
"packet_number" BIGINT,
"src_ip" VARCHAR,
"dst_ip" VARCHAR,
"protocol" VARCHAR,
"src_port" DOUBLE,
"dst_port" DOUBLE,
"tcp_payload_hex" VARCHAR,
"tcp_payload_ascii" VARCHAR,
"error" VARCHAR,
"is_attack" VARCHAR
);
CREATE TABLE ids_4 (
"packet_number" BIGINT,
"src_ip" VARCHAR,
"dst_ip" VARCHAR,
"protocol" VARCHAR,
"src_port" DOUBLE,
"dst_port" DOUBLE,
"tcp_payload_hex" VARCHAR,
"tcp_payload_ascii" VARCHAR,
"error" VARCHAR,
"is_attack" VARCHAR
);
Anyone who has the link will be able to view this.