Introduction: The goal of the ISCX 2012 dataset is to develop new techniques, technology, and algorithms for the automatic generation of benchmark datasets. The dataset has been created by security researchers at ISCX including Ali Shiravi, Hadi Shiravi, and Mahbod Tavallaee. The dataset is meant to aid research efforts in the general areas of developing, testing and evaluating algorithms for intrusion detection and anomaly detection. The Information Security Centre of Excellence has copyright on the data and is the principal distributor of the ISCX 2012 dataset. A full description of the dataset is available here.

Release of the dataset: To advance the state-of-the-art in intrusion detection, this dataset is made available to the researcher community.

To receive a copy of the dataset, the requestor must sign this document and agree to observe the restrictions listed below.

Consent: The researcher(s) agrees to the following restrictions on the ISCX 2012 dataset:

1. Redistribution: Without prior written approval from the Information Security Centre of Excellence, the ISCX 2012 intrusion detection evaluation dataset, in whole or in part, will not be further distributed, published, copied, or disseminated in any way or form whatsoever, whether for profit or not. This includes further distributing, copying or disseminating to a different facility or organizational unit in the requesting university, organization, or company.
   
   
2. Modification and Commercial Use: Without prior approval from the Information Security Centre of Excellence, the ISCX 2012 intrusion detection evaluation dataset, in whole or in part, may not be modified or used for commercial purposes. This is with the exception that any relevant analysis and or evaluation of the dataset, and its subsequent results, are shared with ISCX.
   
   
3. Requests for the ISCX 2012 dataset: All requests for the ISCX 2012 dataset will be forwarded to the ISCX 2012 principle investigator.
   
   
4. Network Trace Privacy: In so far as possible, privacy of end users (hosts) and networks monitored and captured in the creation of these traces will be respected by the researchers. Researchers will make no attempts to reverse engineer, decrypt, or otherwise identify the original IP addresses collected in the trace. Researchers will also not attempt to extract IP addresses from encapsulated headers.
   
   
5. Researchers will make no attempts to connect to, probe, or in any other way initiate contact with a machine or machine administrator identified via the traffic traces.
   
   
6. Citation/Reference: All documents and papers that report on research that uses the ISCX 2012 dataset will acknowledge the use of the dataset by including an appropriate citation to the following:
   
   Ali Shiravi, Hadi Shiravi, Mahbod Tavallee, and Ali A. Ghorbani, "Towards Developing a Systematic Approach To Generate Benchmark Datasets for Intrusion Detection". Accepted to Elsevier Computers & Security, January 2012. [PDF]
   
   
7. Publications to Information Security Centre of Excellence: A copy of all reports and papers that are for public or general release that use the ISCX 2012 dataset should be forwarded immediately upon release or publication to the Information Security Centre of Excellence director.
   
   
8. No Warranty: THE PROVIDER OF THE DATA MAKES NO REPRESENTATIONS AND EXTENDS NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED. THERE ARE NO EXPRESS OR IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, OR THAT THE USE OF THE MATERIAL WILL NOT INFRINGE ANY PATENT, COPYRIGHT, TRADEMARK, OR OTHER PROPRIETARY RIGHTS.