Datasets
Standard Dataset
CICIDS2017
- Citation Author(s):
- Submitted by:
- Haolei Chen
- Last updated:
- Fri, 04/25/2025 - 21:14
- DOI:
- 10.21227/akxq-9v09
- Data Format:
- Research Article Link:
- Links:
- License:
- Categories:
- Keywords:
Abstract
Many Intrusion Detection Systems (IDS) has been proposed in the current decade. To evaluate the effectiveness of the IDS Canadian Institute of Cybersecurity presented a state of art dataset named CICIDS2017, consisting of latest threats and features. The dataset draws attention of many researchers as it represents threats which were not addressed by the older datasets. While undertaking an experimental research on CICIDS2017, it has been found that the dataset has few major shortcomings. These issues are sufficient enough to biased the detection engine of any typical IDS. This paper explores the detailed characteristics of CICIDS2017 dataset and outlines issues inherent to it.Finally, it also presents a combined dataset by eliminating such issues for better classification and detection of any future intrusion detection engine.
The dataset includes a total of 14 categories of attacks. Each network connection record contains 79 features that are extracted from the flow data by the CICFlowMeter tool, covering information such as timestamps, source/destination IPs, source/destination ports, protocol types, and attack categories.