Coperfed

 The coperfed dataset, which contains four datasets：ICS traffic data, low-interaction ICS honeypot data, high-interaction ICS honeypot data, attack tools data. ICS traffic data  is collected in a simulated power system with two MTUs and six RTUs, and the traffic includes six types of attack traffic as well as regular system polling and manual operation traffic. The low-interaction ICS honeypot data are traffic from 10 different attacking organizations collected by a Modbus honeypot developed by from July 2017 to February 2023. Traffic from the same organization is regarded as belonging to the same category of attacks. High-interaction ICS Honeypot Data from , which creates a high-interaction Modbus honeypot that highly simulates a water treatment PLC device from the perspective of a physical process. The dataset contains four types of attack traffic data collected by this honeypot. The attack tools data is collected from ten Modbus industrial control devices using five publicly accessible attack tools implemented on GitHub, with 1000 scans per device.