100 种网络协议， 30 种工控协议，加密流量检测

本数据集主要面向基于远程动态认证技术的安全可信 PLC 控制系统和基于轻量级分布式认证技术的安全可信 DCS 控制系统的研究与需求建设。数据集支持 100 种网络协议和 30 种工控协议，涵盖加密流量检测生成的各类数据包记录。通过模拟 DOS 攻击的现场数据，帮助研究者分析和验证网络与工控协议的安全性。数据来源于安全管理软件配置的 DOS 工具策略，在流量回放过程中识别 DOS 攻击类型，产生 syslog 告警日志，主要通讯协议为 UDP。
该数据集包含 10 个.pcap和.pcapng文件，记录了关键的网络安全事件，特别是针对加密流量的检测及异常流量分析。每个 PCAP 文件包含时间戳、协议类型等详细数据项，可通过 Wireshark 工具在 Windows 平台进行分析。数据集的主要内容包括：设备 ID、设备名称、策略 ID、策略名称、规则 ID、规则名称、协议类型等信息，为工业网络安全、入侵检测系统等领域的研究提供了重要的实验数据支持，具有较大的研究价值。

This dataset is primarily targeted at research and requirement construction for secure and trusted PLC control systems based on remote dynamic authentication technology and secure and trusted DCS control systems based on lightweight distributed authentication technology. It supports 100 types of network protocols and 30 types of industrial control protocols, covering various packet records generated by encrypted traffic detection. Through field data simulating DOS attacks, it helps researchers analyze and verify the security of network and industrial control protocols. The data is derived from DOS tool policies configured by security management software. During the traffic replay process, DOS attack types are identified, generating syslog alert logs, with UDP as the primary communication protocol. This dataset contains 10 .pcap and .pcapng files that record key cybersecurity incidents, particularly for encrypted traffic detection and abnormal traffic analysis. Each PCAP file includes detailed data items such as timestamps and protocol types, and can be analyzed using the Wireshark tool on the Windows platform. The main content of the dataset includes information such as device ID, device name, policy ID, policy name, rule ID, rule name, and protocol type. It provides important experimental data support for research in fields such as industrial cybersecurity and intrusion detection systems, holding significant research value.

搜集汇总

背景与挑战

背景概述

该数据集是一个专注于工业网络安全和加密流量检测的实验数据集，支持100种网络协议和30种工控协议，通过模拟DOS攻击生成数据包记录，用于分析和验证协议安全性。数据集包含10个PCAP格式文件，提供详细的网络事件信息如时间戳和协议类型，适用于工业控制系统安全研究和入侵检测系统开发，数据来源于国家重点研发计划项目，具有较高的研究价值。