An Automatic Complex Event Processing Rules Generation System for the Recognition of Real-Time IoT Attack Patterns (Dataset)

The dataset contains data from different attacks on an IoT network. In addition to data on the legitimate traffic of the network. You can also find the CEP rules used to detect attacks.

This dataset has been used in the work : "An Automatic Complex Event Processing Rules Generation System for the Recognition of Real-Time IoT Attack Patterns".

The distribution between training and testing is as follows:

Normal: 20% training, 80% testing
Subscription fuzzing: 20% training, 80% testing
Disconnection wave: 20%training, 80% testing
TCP SYN Scan: 70% training, 30% testing
UDP port Scan: 70% training, 30% testing
XMAS Scan: 90% training, 10% testing
Telnet Connection: 70% training, 30% testing