Data underlying the publication: “Bits and Pieces: Piecing Together Factors of IoT Vulnerability Exploitation"

This repository contains the source code for our exploit prediction model, as well as detailed descriptions and links for each dataset used in this study:<br>1. Model source code: The R code used for predicting and explaining exploitation in IoT vulnerabilities is included. All necessary instructions for running the model are provided in the README file within the ZIP archive.<br>2. You can use the following sources to collect the data used in the model:2.1. IoT Vulnerabilities: 2.1.1 VARIoT: https://www.variot.eu/<br>2.2. Targeted IoT Vulnerabilities: 2.2.1. VirusTotal: https://www.virustotal.com2.2.2. CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog2.2.3. VulnCheck KEV: https://vulncheck.com/kev2.2.4. AttackerKB: https://attackerkb.com2.2.5. Google Project Zero: https://googleprojectzero.blogspot.com/2.2.6. Honeypots such as IoTPOT and X-Pot: https://sec.ynu.codes/iot/<br>2.3. Vulnerability Features: 2.3.1. NVD: https://nvd.nist.gov/<br>2.4. Exploitability Features: 2.4.1. ExploitDB: https://www.exploit-db.com/<br>2.5. Hacking Community Features: 2.5.1 CrimeBB: https://www.cambridgecybercrime.uk/datasets.html<br>

本仓库包含了我们用于漏洞利用预测模型的源代码，以及本研究中使用的全部数据集的详细说明与获取链接：
1. 模型源代码：本仓库收录了用于预测并解释物联网（IoT）漏洞利用行为的R语言代码，运行该模型所需的全部操作指南均收录在ZIP压缩包内的README文件中。
2. 模型所用数据集的获取来源如下：
2.1 物联网漏洞数据集：
2.1.1 VARIoT：https://www.variot.eu/
2.2 定向物联网漏洞数据集：
2.2.1 VirusTotal：https://www.virustotal.com
2.2.2 CISA KEV：https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2.2.3 VulnCheck KEV：https://vulncheck.com/kev
2.2.4 AttackerKB：https://attackerkb.com
2.2.5 Google Project Zero：https://googleprojectzero.blogspot.com/
2.2.6 蜜罐（含IoTPOT与X-Pot）：https://sec.ynu.codes/iot/
2.3 漏洞特征数据集：
2.3.1 NVD：https://nvd.nist.gov/
2.4 可利用性特征数据集：
2.4.1 ExploitDB：https://www.exploit-db.com/
2.5 黑客社区特征数据集：
2.5.1 CrimeBB：https://www.cambridgecybercrime.uk/datasets.html