yasirchemmakh/Cicids2018_Suricata_Logs

该数据集主要包含网络流量相关的信息，涵盖了Flow ID、事件类型、日志文本、是否报警、标签、真实值、开始时间、年龄、日期、事件类型报警等多个特征。事件类型报警进一步细分为动作、类别、gid、元数据等子特征，元数据中又包含受影响的产品、攻击目标、置信度、创建时间、CVE、部署、前类别、恶意软件家族、性能影响、审查时间、签名严重性、标签、更新时间等信息。此外，数据集还包含HTTP、DNS、SMB、SSH等协议的相关信息。数据集分为训练集，包含1,554,725个样本，总大小为2,038,242,269字节。

This dataset primarily contains information related to network traffic, including features such as Flow ID, event types, log text, whether alerted, label, truth, start time, age, day, event type alerts, and more. The event type alerts are further divided into sub-features such as action, category, gid, metadata, etc. Metadata includes affected products, attack targets, confidence, creation time, CVE, deployment, former category, malware family, performance impact, reviewed time, signature severity, tags, updated time, and more. Additionally, the dataset contains information related to protocols such as HTTP, DNS, SMB, SSH, etc. The dataset is divided into a training set, containing 1,554,725 samples, with a total size of 2,038,242,269 bytes.

搜集汇总

背景与挑战

背景概述

该数据集是基于Suricata日志的网络流量数据集，源自CICIDS2018，用于网络入侵检测任务。数据包含155.5万行记录，以Parquet格式存储，涵盖多种网络事件类型（如DNS、TLS、SMB），并标注了良性流量标签，适用于恶意流量分类模型训练。