{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T23:15:33Z","timestamp":1778109333104,"version":"3.51.4"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032160911","type":"print"},{"value":"9783032160928","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-16092-8_4","type":"book-chapter","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:56:27Z","timestamp":1778108187000},"page":"65-82","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Nxcap: A Unified Format for NIDS Benchmarking"],"prefix":"10.1007","author":[{"given":"Gabin","family":"Noblet","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"C\u00e9dric","family":"Lefebvre","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Philippe","family":"Owezarski","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"William","family":"Ritchie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"4_CR1","doi-asserted-by":"publisher","unstructured":"Aitken, P., Claise, B., Trammell, B.: Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information (Sep 2013), issue 7011, p. 76, Series: Request for Comments Published: RFC 7011 (2013). https:\/\/doi.org\/10.17487\/RFC7011, https:\/\/www.rfc-editor.org\/info\/rfc7011","DOI":"10.17487\/RFC7011"},{"key":"4_CR2","doi-asserted-by":"publisher","unstructured":"Claise, B.: Cisco Systems NetFlow Services Export Version 9. Request for Comments RFC 3954, Internet Engineering Task Force (Oct 2004), p. 33 (2004).https:\/\/doi.org\/10.17487\/RFC3954, https:\/\/datatracker.ietf.org\/doc\/rfc3954","DOI":"10.17487\/RFC3954"},{"key":"4_CR3","doi-asserted-by":"publisher","unstructured":"Draper-Gil, G., Lashkari, A.H., Mamun, M.S.I., Ghorbani, A.: Characterization of encrypted and VPN traffic using time-related features:. In: Proceedings of the 2nd International Conference on Information Systems Security and Privacy, pp. 407\u2013414. SCITEPRESS - Science and and Technology Publications, Rome, Italy (2016).https:\/\/doi.org\/10.5220\/0005740704070414","DOI":"10.5220\/0005740704070414"},{"key":"4_CR4","doi-asserted-by":"publisher","unstructured":"Eddy, W.: Transmission Control Protocol (TCP) (Aug 2022), issue 9293, p. 98, Series: Request for Comments Published: RFC 9293.https:\/\/doi.org\/10.17487\/RFC9293, https:\/\/www.rfc-editor.org\/info\/rfc9293","DOI":"10.17487\/RFC9293"},{"key":"4_CR5","doi-asserted-by":"publisher","unstructured":"Engelen, G., Rimmer, V., Joosen, W.: Troubleshooting an intrusion detection dataset: the CICIDS2017 Case Study. In: 2021 IEEE Security and Privacy Workshops (SPW), pp. 7\u201312. IEEE, San Francisco, USA (May 2021). https:\/\/doi.org\/10.1109\/SPW53761.2021.00009, https:\/\/ieeexplore.ieee.org\/document\/9474286\/","DOI":"10.1109\/SPW53761.2021.00009"},{"key":"4_CR6","doi-asserted-by":"publisher","unstructured":"Flood, R., Engelen, G., Aspinall, D., Desmet, L.: Bad design smells in benchmark NIDS datasets. In: 2024 IEEE 9th European Symposium on Security and Privacy (EuroS&P), pp. 658\u2013675. IEEE, Vienna, Austria (Jul 2024). https:\/\/doi.org\/10.1109\/EuroSP60621.2024.00042, https:\/\/ieeexplore.ieee.org\/document\/10629000\/","DOI":"10.1109\/EuroSP60621.2024.00042"},{"key":"4_CR7","doi-asserted-by":"publisher","unstructured":"Garc\u00eda, S., Grill, M., Stiborek, J., Zunino, A.: An empirical comparison of botnet detection methods. Comput. Secur. 45, 100\u2013123 (2014).https:\/\/doi.org\/10.1016\/j.cose.2014.05.011, https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0167404814000923","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"4_CR8","unstructured":"Group, T.T.: Tcpdum & libpcap (1999). https:\/\/www.tcpdump.org\/"},{"key":"4_CR9","unstructured":"Gu, G., Porras, P., Yegneswaran, V., Fong, M., Lee, W.: BotHunter: detecting malware infection through IDS-driven dialog correlation. In: Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium. SS\u201907, USENIX Association, USA (2007), Event-place: Boston, MA"},{"key":"4_CR10","doi-asserted-by":"publisher","unstructured":"Habibi\u00a0Lashkari, A., Draper\u00a0Gil, G., Mamun, M.S.I., Ghorbani, A.A.: Characterization of tor traffic using time based features:. In: Proceedings of the 3rd International Conference on Information Systems Security and Privacy, pp. 253\u2013262. SCITEPRESS - Science and Technology Publications, Porto, Portugal (2017). https:\/\/doi.org\/10.5220\/0006105602530262","DOI":"10.5220\/0006105602530262"},{"key":"4_CR11","doi-asserted-by":"publisher","unstructured":"Holland, J., Schmitt, P., Feamster, N., Mittal, P.: New Directions in Automated Traffic Analysis, pp. 3366\u20133383 (Nov 2021). https:\/\/doi.org\/10.1145\/3460120.3484758, http:\/\/arxiv.org\/abs\/2008.02695, arXiv:2008.02695 [cs]","DOI":"10.1145\/3460120.3484758"},{"key":"4_CR12","unstructured":"IANA: Internet Protocol Version 4 (IPv4) Parameters (2018). https:\/\/www.iana.org\/assignments\/ip-parameters\/ip-parameters.xhtml"},{"key":"4_CR13","doi-asserted-by":"publisher","unstructured":"Kent, S.: IP Authentication Header (Dec 2005), issue 4302, p. 34 Series: Request for Comments Published: RFC 4302. https:\/\/doi.org\/10.17487\/RFC4302, https:\/\/www.rfc-editor.org\/info\/rfc4302","DOI":"10.17487\/RFC4302"},{"key":"4_CR14","doi-asserted-by":"publisher","unstructured":"Lanvin, M., Gimenez, P.F., Han, Y., Majorczyk, F., Me, L., Totel, E.: Errors in the cicids2017 dataset and the significant differences in detection performances it makes. In: Risks and Security of Internet and Systems: 17th International Conference, CRiSIS 2022, Sousse, Tunisia, December 7-9, 2022, Revised Selected Papers, pp. 18\u201333. Springer-Verlag, Heidelberg (2022).https:\/\/doi.org\/10.1007\/978-3-031-31108-6","DOI":"10.1007\/978-3-031-31108-6"},{"key":"4_CR15","doi-asserted-by":"publisher","unstructured":"Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS), pp.\u00a01\u20136. IEEE, Canberra, Australia (Nov 2015). https:\/\/doi.org\/10.1109\/MilCIS.2015.7348942","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"4_CR16","doi-asserted-by":"publisher","unstructured":"Myneni, S., et al.: DAPT 2020 - constructing a benchmark dataset for advanced persistent threats. In: Wang, G., Ciptadi, A., Ahmadzadeh, A. (eds.) Deployable Machine Learning for Security Defense, vol.\u00a01271, pp. 138\u2013163. Springer International Publishing, Cham (2020). Series Title: Communications in Computer and Information Science. https:\/\/doi.org\/10.1007\/978-3-030-59621-7_8","DOI":"10.1007\/978-3-030-59621-7_8"},{"key":"4_CR17","doi-asserted-by":"publisher","unstructured":"Noblet, G., Lefebvre, C., Owezarski, P., Ritchie, W.: NetGlyph: representation learning to generate network traffic with transformers. In: 2024 20th International Conference on Network and Service Management (CNSM), pp.\u00a01\u20139 (2024). https:\/\/doi.org\/10.23919\/CNSM62983.2024.10814626","DOI":"10.23919\/CNSM62983.2024.10814626"},{"key":"4_CR18","unstructured":"Project, T.Z.: Zeek (2025). https:\/\/zeek.org\/"},{"key":"4_CR19","unstructured":"QoSient, L.: OpenArgus (2025). https:\/\/openargus.org\/"},{"key":"4_CR20","doi-asserted-by":"publisher","unstructured":"Sargent, M., Chu, J., Paxson, D.V., Allman, M.: Computing TCP\u2019s retransmission timer, issue 6298, p. 11. Series: Request for Comments Published: RFC 6298 (Jun 2011). https:\/\/doi.org\/10.17487\/RFC6298, https:\/\/www.rfc-editor.org\/info\/rfc6298","DOI":"10.17487\/RFC6298"},{"key":"4_CR21","doi-asserted-by":"publisher","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a standard feature set for network intrusion detection system datasets. Mobile Netw. Appl. 27(1), 357\u2013370 (2022). https:\/\/doi.org\/10.1007\/s11036-021-01843-0, http:\/\/arxiv.org\/abs\/2101.11315, arXiv:2101.11315 [cs]","DOI":"10.1007\/s11036-021-01843-0"},{"key":"4_CR22","doi-asserted-by":"publisher","unstructured":"Sharafaldin, I., Habibi\u00a0Lashkari, A., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: Proceedings of the 4th International Conference on Information Systems Security and Privacy, pp. 108\u2013116. SCITEPRESS - Science and Technology Publications, Funchal, Madeira, Portugal (2018). https:\/\/doi.org\/10.5220\/0006639801080116","DOI":"10.5220\/0006639801080116"},{"key":"4_CR23","doi-asserted-by":"publisher","unstructured":"Stolfo, S., Fan, W., Lee, W., Prodromidis, A., Chan, P.: KDD Cup 1999 Data. UCI Machine Learning Repository (1999). https:\/\/doi.org\/10.24432\/C51C7N","DOI":"10.24432\/C51C7N"},{"key":"4_CR24","doi-asserted-by":"publisher","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD CUP 99 data set. In: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, pp.\u00a01\u20136 (2009). https:\/\/doi.org\/10.1109\/CISDA.2009.5356528","DOI":"10.1109\/CISDA.2009.5356528"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2025 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-16092-8_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:56:29Z","timestamp":1778108189000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-16092-8_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032160911","9783032160928"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-16092-8_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}