Maintainable Log Datasets for Evaluation of Intrusion Detection Systems. (arXiv:2203.08580v1 [cs.CR])

Intrusion detection systems (IDS) monitor system logs and network traffic to
recognize malicious activities in computer networks. Evaluating and comparing
IDSs with respect to their detection accuracies is thereby essential for their
selection in specific use-cases. Despite a great need, hardly any labeled
intrusion detection datasets are publicly available. As a consequence,
evaluations are often carried out on datasets from real infrastructures, where
analysts cannot control system parameters or generate a reliable ground truth,
or private datasets that prevent reproducibility …

detection intrusion intrusion detection log systems