IoT network intrusion dataset

We created various types of network attacks in Internet of Things (IoT) environment for academic purpose. Two typical smart home devices -- SKT NUGU (NU 100) and EZVIZ Wi-Fi Camera (C2C Mini O Plus 1080P) -- were used. All devices, including some laptops or smart phones, were connected to the same wireless network. The dataset consists of 42 raw network packet files (pcap) at different time points.* The packet files are captured by using monitor mode of wireless network adapter. The wireless headers are removed by Aircrack-ng.* All attacks except Mirai Botnet category are the packets captured while simulating attacks using tools such as Nmap. The case of Mirai Botnet category, the attack packets were generated on a laptop and then manipulated to make it appear as if it originated from the IoT device.

本数据集为开展学术研究，于物联网（Internet of Things, IoT）环境中构建了多种网络攻击场景。本次实验选用两款典型智能家居设备：SKT NUGU（NU 100）与EZVIZ Wi-Fi摄像头（C2C Mini O Plus 1080P）。所有设备（含若干笔记本电脑与智能手机）均接入同一无线网络。本数据集包含42份不同时间节点采集的原始网络数据包文件（pcap）*。上述数据包文件通过无线网络适配器的监听模式采集获取。无线数据包头部已通过Aircrack-ng工具完成移除。除Mirai僵尸网络（Mirai Botnet）类别外，其余攻击场景的数据包均通过Nmap等工具模拟攻击时采集所得。针对Mirai僵尸网络类别这一案例，攻击数据包为在笔记本电脑上生成，并经处理伪装为源自物联网设备的数据包。