A comprehensive and realistic IoT dataset generated by the Canadian Institute for Cybersecurity (CIC) for profiling, detecting, and characterizing multi-vector IoT attacks in a real network topology.
Network-traffic dataset on Mendeley Data documenting DDoS attacks against the Fibaro Home Center 3 smart-home controller; PCAP and CSV formats are provided. [page:4][web:52]
CICIoT2023 is a large-scale, flow-based network traffic dataset capturing real-time benign and malicious communications in an IoT environment composed of 105 physical devices. The dataset captures traffic traces for 33 attack scenarios grouped into seven categories: DDoS, DoS, Reconnaissance, web-based attacks, brute-force attempts, spoofing, and Mirai malware.
The Gotham Dataset is a large-scale, reproducible benchmark for evaluating decentralized Intrusion Detection Systems (IDS) and Federated Learning in virtualized smart cities. It captures interface-level network traffic from 78 heterogeneous IoT devices, including complex attack vectors like Mirai botnets, Merlin C2 traffic, and CoAP amplification, preserving the non-IID nature of edge data for realistic AI security training.
An MQTT DoS and DDoS IoT attack dataset collected on a Raspberry Pi 3B+ Mosquitto broker over 12 sessions, including three days of normal traffic and several minutes of attack traffic, totaling 424,716 labeled entries for machine learning-based IDS and IPS research.
IoT-DH is a real-world IoT DDoS honeypot dataset collected from a honeypot deployment and converted from PCAP to CSV with traffic features and labels for DDoS classification, identification, and detection tasks.
A pair of labeled MQTT and UDP DDoS datasets for Healthcare-IoT networks, generated with Cooja and ns-3 simulators to support evaluation of DDoS detection and mitigation techniques in H-IoT environments.
Comprehensive Industrial IoT security dataset from the Canadian Institute for Cybersecurity, featuring realistic network traffic with 34 types of attacks including DDoS, ransomware, data exfiltration, and advanced persistent threats across multiple IIoT protocols.
Real-time network traffic dataset from diverse IoT devices including normal behavior and various attacks (DDoS, brute-force, scans) for developing intrusion detection systems.
Specialized dataset for detecting IoT botnet attacks using network traffic analysis. Captures behavior of 9 real IoT devices infected with Mirai and BASHLITE malware variants. Ideal for training ML models to identify compromised IoT devices through traffic patterns.
Comprehensive large-scale IoT botnet dataset combining legitimate IoT network traffic with realistic botnet attack scenarios. Features full packet captures (PCAP) and extracted flow features for diverse attack types including DDoS, reconnaissance, theft, and DoS attacks.
Comprehensive large-scale IoT intrusion detection dataset from Canadian Institute for Cybersecurity with 33 attack types across 105 real IoT devices. Includes 8.94 GB of network traffic data covering DDoS, DoS, Mirai, MITM, and reconnaissance attacks.