X-IIoTID: A Connectivity- and Device-agnostic Intrusion Dataset for Industrial Internet of Things

Industrial Internet of Things (IIoTs) are high-value cyber targets due to the nature of the devices and connectivity protocols they deploy. They are easy to compromise and, as they are connected on a large scale with high-value data content, the compromise of any single device can extend to the whole system and disrupt critical functions. There are various security solutions that detect and mitigate intrusions. However, as they lack the capability to deal with an IIoT's co-existing heterogeneity and interoperability, developing new universal security solutions to fit its requirements is critical. This is challenging due to the scarcity of accurate data about IIoT systems' activities, connectivities and attack behaviors. In addition, owing to their multi-platform connectivity protocols and multi-vendor devices, collecting and creating such data is also challenging. To tackle these issues, we propose a holistic approach for generating an appropriate intrusion dataset for an IIoT called X-IIoTID, connectivity- and device-agnostic intrusion dataset for fitting the heterogeneity and interoperability of IIoT systems. It includes the behaviors of new IIoT connectivity protocols, activities of recent devices, diverse attack types and scenarios, and various attack protocols. It defines an attack taxonomy and consists of multi-view features, such as network traffic, host resources, logs and alerts. X-IIoTID is evaluated using popular machine and deep learning algorithms and compared with eighteen intrusion datasets to verify its novelty.

搜集汇总

背景与挑战

背景概述

X-IIoTID是一个专门为工业物联网（IIoT）设计的入侵检测数据集，旨在解决IIoT系统因设备异构性和互操作性带来的安全挑战。其特点是连接和设备无关性，涵盖新连接协议行为、多样化攻击类型以及多视图特征（包括网络流量、主机资源等），并通过机器学习和深度学习评估验证了其新颖性和实用性。