Hmehdi515/NF-ToN-IoT-v2.csv

NF-ToN-IoT网络流量数据集是从物联网网络流量中衍生出的网络流量数据集，包含良性和攻击流量。该数据集通过将ToN-IoT测试床的pcap文件转换为NetFlow记录而创建，为训练网络入侵检测系统提供了标记数据。数据集包含11,858,887个流量，其中良性样本占36.01%，扫描样本占22.32%，XSS样本占14.49%，DDOS样本占11.96%，密码样本占6.81%，DOS样本占4.21%，注入样本占4.04%，后门样本占0.10%，MITM样本占0.04%，勒索软件样本占0.02%。数据集包含多个字段，如源IP地址、目的IP地址、源端口、目的端口、IP协议标识、第七层协议、流入字节、流出字节、流入数据包、流出数据包、TCP标志、流持续时间（毫秒）和标签（0为良性，1为攻击）。攻击类型包括DDoS/DoS、注入、扫描、密码、勒索软件、XSS、MITM和后门。

NF-ToN-IoT is a network flow dataset derived from IoT network traffic, containing both benign and attack flows. The dataset was created by converting pcap files from the ToN-IoT testbed into NetFlow records, providing labeled data for training network intrusion detection systems. The dataset includes 11,858,887 flows, with benign samples accounting for 36.01%, scanning samples for 22.32%, XSS samples for 14.49%, DDOS samples for 11.96%, password samples for 6.81%, DOS samples for 4.21%, injection samples for 4.04%, backdoor samples for 0.10%, MITM samples for 0.04%, and ransomware samples for 0.02%. The dataset features multiple fields such as source IP address, destination IP address, source port, destination port, IP protocol identifier, layer 7 protocol, incoming bytes, outgoing bytes, incoming packets, outgoing packets, TCP flags, flow duration (milliseconds), and label (0 for benign, 1 for attack). Attack types include DDoS/DoS, injection, scanning, password, ransomware, XSS, MITM, and backdoor.