MAWILab

2007	2008	2009	2010	2011	2012	2015	2017	2019	2022	2024

Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec

"Anomalous" and "Suspicious" labels (admd file): 20100223_anomalous_suspicious.xml
"Anomalous" and "Suspicious" labels (csv file): 20100223_anomalous_suspicious.csv

Number of anomalies: 25
Proportion of anomalies in terms of occurrence:

Taxonomy	Heuristic	Label	Detectors
network_scan_ICMP_ecrq	Ping flood	anomalous	Hough, Gamma, KL, PCA
network_scan_TCP_ICMP_du_response	Ping flood	suspicious	Hough, KL
network_scan_UDP_UDP_response	Other	suspicious	Hough, KL
multipoint_to_point	Other	anomalous	Hough, Gamma, KL, PCA
multipoint_to_point_low_activity	Other	anomalous	Hough, Gamma
multipoint_to_point_low_activity_HTTP	HTTP traffic	anomalous	Gamma, PCA
ipv4_ipv6_tunnel	Other	anomalous	Hough, Gamma, PCA
multipoint_to_multipoint	Other	anomalous	Hough, Gamma, PCA
multipoint_to_point	RST attack	anomalous	Gamma, PCA
alpha_flow_HTTP	HTTP traffic	anomalous	Gamma, PCA
small_alpha_flow	HTTPS traffic	anomalous	Gamma
small_alpha_flow	Other	anomalous	Gamma
alpha_flow	Other	anomalous	KL
point_to_multipoint	Other	anomalous	Hough, Gamma, PCA
multipoint_to_multipoint	Other	anomalous	Hough, KL, PCA
point_to_multipoint_HTTP	HTTP traffic	anomalous	Hough, Gamma, KL, PCA
multipoint_to_point_HTTP	HTTP traffic	anomalous	Gamma, PCA
point_to_multipoint	Other	suspicious	Gamma, PCA
small_alpha_flow	HTTP traffic	suspicious	PCA
multipoint_to_point_low_activity	Other	suspicious	PCA
small_alpha_flow	HTTP traffic	suspicious	PCA
point_to_multipoint_HTTP	HTTP traffic	suspicious	Hough, PCA
alpha_flow_HTTP	HTTP traffic	suspicious	PCA
alpha_flow	Other	suspicious	PCA
empty	Unknown	anomalous	Hough, Gamma, KL, PCA
Taxonomy	Heuristic	Label	Detectors

"Notice" labels (admd file): 20100223_notice.xml
"Notice" labels (csv file): 20100223_notice.csv

Data set: 2010/02/23