工业控制系统安全日志数据集

本数据集为工业控制系统安全日志，覆盖Modbus、PROFINET、OPC UA、DNP3、IEC104、S7comm等主流工控协议的正常通信及攻击事件（扫描、DoS、非法写入、中间人、重放、固件异常等）。包含网络五元组、协议功能码、寄存器地址、操作数值、设备操作日志及攻击标签（含攻击阶段及风险等级）。适用于工控入侵检测、异常行为分析、态势感知、安全事件关联等。This dataset comprises security logs for industrial control systems (ICS), covering both normal communications and attack incidents (e.g., scanning, DoS, unauthorized write operations, man-in-the-middle attacks, replay attacks, firmware anomalies, etc.) across mainstream industrial control protocols including Modbus, PROFINET, OPC UA, DNP3, IEC104, and S7comm. It contains network five-tuples, protocol function codes, register addresses, operation values, device operation logs, and attack tags (including attack phases and risk levels). This dataset is applicable to scenarios such as ICS intrusion detection, abnormal behavior analysis, situational awareness, and security event correlation.

搜集汇总

背景与挑战

背景概述

该数据集为工业控制系统安全日志，涵盖Modbus、S7comm等多种主流工控协议的正常通信及多种攻击类型事件。数据包含网络、协议、设备操作及详细安全标签等多维度字段，适用于工控入侵检测、异常行为分析和安全态势感知等研究与应用。