TempFirm Ground-Truth Dataset v1.0: Labelled Firmware Trigger-Sink Metadata for Time-Triggered Backdoor Detection

TempFirm Ground-Truth Dataset v1.0 is a labelled cybersecurity dataset designed for research on firmware and IoT backdoor detection, with emphasis on temporal trigger mechanisms and security-relevant sink behaviors. The publication-ready CSV contains 10,000 records and 10 fields: id, label, trigger_class, sink_type, tau, eol_date, delta_days, conf, sdk_origin, and notes. Each record is labelled as either backdoor or benign. Backdoor-labelled records describe trigger-sink patterns associated with time, uptime, boot/power-cycle counters, RTC registers, filesystem or certificate-expiry conditions, and watchdog/crash counters. Sink categories include shell execution, network behavior, authentication bypass, firewall manipulation, and credential modification. The dataset also includes confidence scores and optional SDK/source-family identifiers. The dataset is intended to support reproducible academic research in firmware security, IoT security, temporal trigger analysis, explainable cybersecurity feature engineering, and benchmark construction for machine learning or rule-based detection pipelines.