A comprehensive and realistic IoT dataset generated by the Canadian Institute for Cybersecurity (CIC) for profiling, detecting, and characterizing multi-vector IoT attacks in a real network topology.
Network-traffic dataset on Mendeley Data documenting DDoS attacks against the Fibaro Home Center 3 smart-home controller; PCAP and CSV formats are provided. [page:4][web:52]
CICIoT2023 is a large-scale, flow-based network traffic dataset capturing real-time benign and malicious communications in an IoT environment composed of 105 physical devices. The dataset captures traffic traces for 33 attack scenarios grouped into seven categories: DDoS, DoS, Reconnaissance, web-based attacks, brute-force attempts, spoofing, and Mirai malware.
The Gotham Dataset is a large-scale, reproducible benchmark for evaluating decentralized Intrusion Detection Systems (IDS) and Federated Learning in virtualized smart cities. It captures interface-level network traffic from 78 heterogeneous IoT devices, including complex attack vectors like Mirai botnets, Merlin C2 traffic, and CoAP amplification, preserving the non-IID nature of edge data for realistic AI security training.
An MQTT DoS and DDoS IoT attack dataset collected on a Raspberry Pi 3B+ Mosquitto broker over 12 sessions, including three days of normal traffic and several minutes of attack traffic, totaling 424,716 labeled entries for machine learning-based IDS and IPS research.
A real-world MQTT-based IoT cybersecurity dataset collected from the MQTTEEB testbed at the International University of Rabat, with benign traffic and five attack types (DoS, SlowITe, Malformed Data Injection, Brute Force, Publish Flooding), provided in multiple processed forms (raw, cleaned, normalized, standardized, SMOTE) for AI-driven intrusion detection research.
IoT-DH is a real-world IoT DDoS honeypot dataset collected from a honeypot deployment and converted from PCAP to CSV with traffic features and labels for DDoS classification, identification, and detection tasks.
A pair of labeled MQTT and UDP DDoS datasets for Healthcare-IoT networks, generated with Cooja and ns-3 simulators to support evaluation of DDoS detection and mitigation techniques in H-IoT environments.
Comprehensive Industrial IoT security dataset from the Canadian Institute for Cybersecurity, featuring realistic network traffic with 34 types of attacks including DDoS, ransomware, data exfiltration, and advanced persistent threats across multiple IIoT protocols.
Real-time network traffic dataset from diverse IoT devices including normal behavior and various attacks (DDoS, brute-force, scans) for developing intrusion detection systems.
Specialized dataset for detecting IoT botnet attacks using network traffic analysis. Captures behavior of 9 real IoT devices infected with Mirai and BASHLITE malware variants. Ideal for training ML models to identify compromised IoT devices through traffic patterns.