OwnCloud-DDoS-2022: Slowloris DDoS and Benign Network Flows from a Private Cloud Testbed

This dataset contains 28,972 labelled network flows captured from a virtual private cloud built on the OwnCloud platform. It includes a Slowloris application-layer DDoS attack against the cloud server and a range of normal (benign) traffic. Flows were extracted from packet captures with CICFlowMeter 4.0. That gives 80 flow features plus a binary label, `DDoS` or `Benign`.Most public DDoS datasets record general enterprise or campus networks. This dataset was captured from a cloud platform itself. It is meant for research on DDoS detection in cloud environments, for teaching, and for comparison with benchmarks such as CSE-CIC-IDS2018.