This is a non-IMPACT record, meaning that access to the data is not controlled by IMPACT. For access, see the directions below.

This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.


Insider Threat Test Dataset
External Dataset
External Data Source
Carnegie Mellon University
56 (lowest rank is 56)

Category & Restrictions

malicious traffic, cyber attack, network data


The Insider Threat Test Dataset is a collection of synthetic insider threat test datasets that provide both background and malicious actor synthetic data.

The CERT Division, in partnership with ExactData, LLC, and under sponsorship from DARPA I2O, generated a collection of synthetic insider threat test datasets. These datasets provide both synthetic background data and data from synthetic malicious actors. Datasets are organized according to the data generator release that created them. Most releases include multiple datasets (e.g., r3.1 and r3.2). Generally, later releases include a superset of the data generation functionality of earlier releases. Each dataset file contains a readme file that provides detailed notes about the features of that release. The answer key file answers.tar.bz2 contains the details of the malicious activity included in each dataset, including descriptions of the scenarios enacted and the identifiers of the synthetic users involved.

Additional Details

test, insider, threat, dataset, 1297, insider threat test dataset, inferlink corporation, corporation, inferlink, external data source, source, external, synthetic, datasets, malicious, background, provide, actor, releases, file, include, r3, release, bz2, llc, functionality, included, key, organized, detailed, answer, readme, exactdata, identifiers, darpa, multiple, generator, sponsorship, partnership, generation, details, generated, earlier, features, division, descriptions, cert, answers, including, tar, activity, superset, other, enacted, scenarios, involved, actors, users, i2o, created, notes