10.26249/FK2/MOCIY8Lanfer, EricEricLanfer0000-0001-9763-4613Osnabrück UniversityBrockmann, DominikDominikBrockmann0009-0004-2162-8873Osnabrück UniversityAschenbruck, NilsNilsAschenbruck0000-0002-5861-8896WEB-IDS23 DatasetosnaData2025Computer and Information ScienceLanfer, EricEricLanferOsnabrück University2025-02-062025-02-07arXiv:2502.03909881193587227925967275603576259811306255100119862232137362575328338086450799056332641386813386254077928118532741329640622579240314152039980013103097531659070200307913617581354390text/markdownapplication/pdftext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csvtext/csv1.0<a href="http://creativecommons.org/licenses/by-sa/4.0/"><img src="https://osnadata.ub.uni-osnabrueck.de/resources/images/cc-icons/by-sa.png" height="31"/> http://creativecommons.org/licenses/by-sa/4.0/</a><h1 id="web-ids23">WEB-IDS23</h1>
<p>WEB-IDS23 is a network intrusion detection dataset that includes over 12 million flows, categorizing 20 attack types across FTP, HTTP/S, SMTP, SSH, and network scanning activities. This dataset is documented in the paper "Technical Report: Generating the WEB-IDS23 Dataset," which provides insights into the generation, structure, and key characteristics of the dataset.</p>
<h2 id="data">Data</h2>
<p>The dataset is available as CSV files under web-ids23. Each file includes the data of one class, and each row corresponds to a flow extracted using Zeek FlowMeter. In total, the dataset includes over 12 million samples.</p>
<h2 id="data">Short Documentation</h2>
<p>A short documentation of the data and the according labels can be found in the files readme.md or readme.pdf</p>