Cyber4OT: ICS network traces containing normal activity and full attack traffic

The Cyber4OT dataset contains prepared in the test-bed environment packet traces from normal activity of OT network, as well as, full network attack. During recorded activity, the attacker performs full network reconnaissance, later disconnects legal Modbus TCP connection and performs PLC device hijacking.

The dataset contains 96 files with more than 4,25 millions of packets.

ReadMe.txt file contains short description of each trace file content.

Detailed description of the test bed, where data was prepared, is provided in the Cyber4OT_testbed_description.pdf file.

Cyber4OT数据集（Cyber4OT Dataset）包含在试验台环境下采集的OT（运营技术，Operational Technology）网络正常活动与完整网络攻击场景的报文追踪数据。在本次记录的活动流程中，攻击者首先实施全面的网络侦察，随后断开合法的Modbus TCP连接，并开展PLC（可编程逻辑控制器，Programmable Logic Controller）设备劫持操作。
该数据集共计包含96个文件，累计超过425万个网络报文。
ReadMe.txt文件中包含了每个报文追踪文件的内容简要说明。
关于本次数据采集所用试验台的详细说明，请参阅Cyber4OT_testbed_description.pdf文件。