You may use KDDcup99 dataset but this is too old to validate a detection method. So, better to use some new real-time datasets.

You may use KDDcup99 dataset but this is too old to validate a detection method. So, better to use some new real-time datasets.

yes you can

Dear Monowar H.Bhuyan,

How can I get real-time data sets?Do you know downloadable link of  that kind of data sets? If so... can you describe me.

Dear Monowar,

You can do so with the KDD 99 dataset. Because of its limitations, you can use some new datasets like ISCX 2012.

You cannot use the KDD dataset anymore. It is old (outdated) and has significant bias. Any results obtained with this dataset are irrelevant for modern intrusion detection systems. Furthermore, if you attempt to publish a paper including as validation only the KDD dataset, it will very likely be rejected.

Better datasets also depend on your goals. If you want to study false positives, real traffic archives (CAIDA, MAWI) may help you. In any case, I would recommend that any publication validates results on several datasets.

Please dont use KDD dataset 

You can also try the ADFA Intrusion Detection Datasets

Thank you so much Dhakar.

Thank you so much Sebastian.