Nine attack captures for network intrusion detection, with a documented total of 27,170,754 packets, 115 statistical features per packet and separate binary labels.
About 4.6 million labelled bi-flows with 80 CICFlowMeter features, covering 15 attack families plus benign traffic in 16 single-class files. CC BY 4.0.
Free CC0 synthetic dataset: 4,000 rows of Modbus, OPC UA and DNP3 flows labelled for SCADA intrusion detection. 21% Attacks. Reproducible from its seed.
Free CC0 synthetic dataset: 10,000 rows of Modbus, OPC UA and DNP3 flows labelled for SCADA intrusion detection. 29% Attacks. Reproducible from its seed.
Free CC0 synthetic dataset: 10,000 rows of Modbus, OPC UA and DNP3 flows labelled for SCADA intrusion detection. 16% Attacks. Reproducible from its seed.
Free CC0 synthetic dataset: 10,000 rows of Modbus, OPC UA and DNP3 flows labelled for SCADA intrusion detection. 15% Attacks. Reproducible from its seed.
Reproducible large-scale IoT network dataset from 78 emulated devices using MQTT, CoAP, and RTSP protocols. Includes benign and malicious traffic with DoS, brute force, scanning, and C&C attacks in PCAP and CSV formats.
Released in October 2025, this dataset captures performance metrics and network traffic associated with implementing Post-Quantum Cryptography (PQC) in Industrial IoT (IIoT) scenarios. It supports research into the feasibility and overhead of quantum-resistant security protocols on resource-constrained industrial hardware.
CICIoT2023 is a large-scale, flow-based network traffic dataset capturing real-time benign and malicious communications in an IoT environment composed of 105 physical devices. The dataset captures traffic traces for 33 attack scenarios grouped into seven categories: DDoS, DoS, Reconnaissance, web-based attacks, brute-force attempts, spoofing, and Mirai malware.