Using a VMware Network Infrastructure to Collect Traffic Traces for Intrusion Detection Evaluation
Frédéric Massicotte, Mathieu Couture · 2005
this report, some recommendations for IDS Testing Research are made. Among those recommendations, the authors insist that data sets should contain realistic data and be shared freely between multiple organizations. They also state that there is a great need to provide the security community with a large set of attack traces. Such information could be easily added to and would greatly augment existing vulnerability databases. The resulting vulnerability/attack trace databases would aid IDS testing researchers and would provide valuable data for IDS developers