{"id":"https://openalex.org/W6912075331","doi":"https://doi.org/10.5281/zenodo.15668685","title":"TUC-RedTeam30: A Dataset for Evaluating ML-Based Network Intrusion Detection Systems","display_name":"TUC-RedTeam30: A Dataset for Evaluating ML-Based Network Intrusion Detection Systems","publication_year":2025,"publication_date":"2025-06-15","ids":{"openalex":"https://openalex.org/W6912075331","doi":"https://doi.org/10.5281/zenodo.15668685"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.15668685","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15668685","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"dataset"},"type":"dataset","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.15668685","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Hajizadeh, Mehrdad","orcid":"https://orcid.org/0009-0008-3375-0912"},"institutions":[{"id":"https://openalex.org/I2610724","display_name":"Chemnitz University of Technology","ror":"https://ror.org/00a208s56","country_code":"DE","type":"education","lineage":["https://openalex.org/I2610724"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Hajizadeh, Mehrdad","raw_affiliation_strings":["Technische Universit\u00e4t Chemnitz"],"raw_orcid":"https://orcid.org/0009-0008-3375-0912","affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Chemnitz","institution_ids":["https://openalex.org/I2610724"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Golchin, Pegah","orcid":"https://orcid.org/0000-0002-8686-113X"},"institutions":[{"id":"https://openalex.org/I2610724","display_name":"Chemnitz University of Technology","ror":"https://ror.org/00a208s56","country_code":"DE","type":"education","lineage":["https://openalex.org/I2610724"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Golchin, Pegah","raw_affiliation_strings":["Technische Universit\u00e4t Chemnitz"],"raw_orcid":"https://orcid.org/0000-0002-8686-113X","affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Chemnitz","institution_ids":["https://openalex.org/I2610724"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nowroozi, Ehsan","orcid":"https://orcid.org/0000-0002-5714-8378"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nowroozi, Ehsan","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-5714-8378","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Rigaki, Maria","orcid":"https://orcid.org/0000-0002-0688-7752"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Rigaki, Maria","raw_affiliation_strings":["Czech Technical University in Prague"],"raw_orcid":"https://orcid.org/0000-0002-0688-7752","affiliations":[{"raw_affiliation_string":"Czech Technical University in Prague","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Valeros, Veronica","orcid":"https://orcid.org/0000-0003-2554-3231"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Valeros, Veronica","raw_affiliation_strings":["Czech Technical University in Prague"],"raw_orcid":"https://orcid.org/0000-0003-2554-3231","affiliations":[{"raw_affiliation_string":"Czech Technical University in Prague","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Garcia, Sebastian","orcid":"https://orcid.org/0000-0001-6238-9910"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Garcia, Sebastian","raw_affiliation_strings":["Czech Technical University in Prague"],"raw_orcid":"https://orcid.org/0000-0001-6238-9910","affiliations":[{"raw_affiliation_string":"Czech Technical University in Prague","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Conti, Mauro","orcid":"https://orcid.org/0000-0002-3612-1934"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Conti, Mauro","raw_affiliation_strings":["University of Padua"],"raw_orcid":"https://orcid.org/0000-0002-3612-1934","affiliations":[{"raw_affiliation_string":"University of Padua","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"last","author":{"id":null,"display_name":"Bauschert, Thomas","orcid":null},"institutions":[{"id":"https://openalex.org/I2610724","display_name":"Chemnitz University of Technology","ror":"https://ror.org/00a208s56","country_code":"DE","type":"education","lineage":["https://openalex.org/I2610724"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Bauschert, Thomas","raw_affiliation_strings":["Technische Universit\u00e4t Chemnitz"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Chemnitz","institution_ids":["https://openalex.org/I2610724"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2610724"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5656999945640564},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.539900004863739},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5080999732017517},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.459199994802475},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.397599995136261},{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.36410000920295715},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.3504999876022339}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7671999931335449},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5662000179290771},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5656999945640564},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.539900004863739},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5080999732017517},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.4693000018596649},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.459199994802475},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.397599995136261},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.36410000920295715},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.3504999876022339},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.34299999475479126},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3328000009059906},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.3043000102043152},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.28839999437332153}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5281/zenodo.15668685","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15668685","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"dataset"}],"best_oa_location":{"id":"doi:10.5281/zenodo.15668685","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15668685","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"dataset"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"TUC-RedTeam30":[0],"Dataset":[1],"for":[2,49,141,160,216],"NIDS":[3],"Benchmarking":[4],"The":[5,148],"Technical":[6],"University":[7],"of":[8,33,96,110,193],"Chemnitz":[9],"Red":[10,51],"Team":[11],"30":[12,18,98,142],"(TUC-RedTeam30)":[13],"dataset":[14,63,116],"was":[15],"collected":[16],"during":[17],"distinct":[19],"red":[20,67],"teaming":[21],"exercises":[22],"conducted":[23],"in":[24,61,107,119,204,246],"a":[25,65,157,199],"controlled":[26],"and":[27,46,70,82,86,170,213,220,239],"isolated":[28],"environment.":[29],"It":[30],"is":[31,117,166,202],"part":[32],"the":[34,62,97,111,145,190,194,247],"artifact":[35],"accompanying":[36],"our":[37],"USENIX":[38],"WOOT'25":[39],"paper,":[40],"\"DeepRed:":[41],"A":[42,109,245],"Deep":[43],"Learning\u2013Powered":[44],"Command":[45],"Control":[47],"Framework":[48],"Multi-Stage":[50],"Teaming":[52],"Against":[53],"ML-based":[54],"Network":[55,89],"Intrusion":[56,90],"Detection":[57,91],"Systems.\"":[58],"Each":[59,163],"scenario":[60],"represents":[64],"unique":[66],"team":[68],"engagement":[69],"benign":[71,177],"traffic":[72,133],"(Web,":[73],"Email,":[74],"DNS,":[75],"Streaming":[76],"etc.),":[77],"specifically":[78],"designed":[79],"to":[80,101,189,210,243],"evaluate":[81],"challenge":[83],"both":[84,122],"signature-based":[85],"machine":[87],"learning\u2013based":[88],"Systems":[92],"(NIDS).":[93],"Detailed":[94],"descriptions":[95],"scenarios":[99,143,152,212],"mapped":[100],"MITRE":[102],"ATT&ck":[103],"framework":[104],"are":[105,214],"provided":[106,118],"Appendix":[108,244],"main":[112,248],"paper.":[113,249],"Data":[114],"FormatsThe":[115],"two":[120],"formats,":[121],"compressed":[123],"using":[124,144],"tar.gz":[125],"(no":[126],"password":[127],"protection):":[128],"CSV":[129],"Format:":[130,187],"Contains":[131],"labeled":[132],"flow":[134,164],"features":[135,149],"extracted":[136],"from":[137],"all":[138,151],"PCAP":[139,186,196],"files":[140],"NFStream":[146],"tool.":[147],"across":[150],"have":[153],"been":[154],"combined":[155],"into":[156],"single":[158],"file":[159],"streamlined":[161],"analysis.":[162],"record":[165],"annotated":[167],"with":[168],"labels":[169],"metadata":[171],"(scenario":[172],"number).":[173],"Label":[174],"\"0\"":[175],"denotes":[176],"(normal)":[178],"activity,":[179],"while":[180],"label":[181],"\"1\"":[182],"indicates":[183],"malicious":[184,229],"activity.":[185],"Due":[188],"large":[191],"size":[192],"raw":[195],"files,":[197],"only":[198],"representative":[200],"subset":[201],"included":[203],"this":[205],"release.":[206],"These":[207],"PCAPs":[208],"correspond":[209],"selected":[211],"suitable":[215],"deeper":[217],"packet-level":[218],"analysis":[219],"feature":[221],"extraction.":[222],"Additional":[223],"Information":[224],"For":[225],"detailed":[226],"information":[227],"on":[228],"IP":[230],"addresses,":[231],"ports,":[232],"attack":[233,235],"labeling,":[234],"stages,":[236],"tools":[237],"used,":[238],"targets,":[240],"please":[241],"refer":[242]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}