LAN-SDN-NIDS: A Multi-Class Dataset for OpenFlow Attack Detection

Synthetic, tabular data for benign (normal) traffic and five attack-types (link fabrication, host hijacking, host injection, DDoS, and portscan) in a LAN-SDN, emulated with mininet and the OpenDaylight controller. The data has 40 features, including OpenFlow-dependent values. There are a total of six CSV files, corresponding to five different experiments —each with a different topology— and a sixth file combining four topologies, which we recommend for training a machine learning model. The combination files (FULL_SDN_NIDS.csv and FULL_SDN_NIDS.parquet) include all the experiments.