CICIoT2023: A Real-Time Dataset and Benchmark for Large-Scale Attacks in IoT Environment

• Published in: Sensors (Basel, Switzerland) Vol. 23; no. 13; p. 5941
• Main Authors: Neto, Euclides Carlos Pinto, Dadkhah, Sajjad, Ferreira, Raphael, Zohourian, Alireza, Lu, Rongxing, Ghorbani, Ali A.
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 26.06.2023; MDPI
• Subjects: Algorithms; Benchmarking; Cameras; dataset; Datasets; Deep learning; Denial of service attacks; DoS; Industry; Internet of Things; Internet of Things (IoT); Intrusion detection systems; Machine learning; Performance evaluation; security; Transportation; Mirai; brute force; web attacks; deep learning; Internet of Things (IoT); security; DoS; DDoS; machine learning; dataset; reconnaissance; spoofing
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s23135941

Nowadays, the Internet of Things (IoT) concept plays a pivotal role in society and brings new capabilities to different industries. The number of IoT solutions in areas such as transportation and healthcare is increasing and new services are under development. In the last decade, society has experienced a drastic increase in IoT connections. In fact, IoT connections will increase in the next few years across different areas. Conversely, several challenges still need to be faced to enable efficient and secure operations (e.g., interoperability, security, and standards). Furthermore, although efforts have been made to produce datasets composed of attacks against IoT devices, several possible attacks are not considered. Most existing efforts do not consider an extensive network topology with real IoT devices. The main goal of this research is to propose a novel and extensive IoT attack dataset to foster the development of security analytics applications in real IoT operations. To accomplish this, 33 attacks are executed in an IoT topology composed of 105 devices. These attacks are classified into seven categories, namely DDoS, DoS, Recon, Web-based, brute force, spoofing, and Mirai. Finally, all attacks are executed by malicious IoT devices targeting other IoT devices. The dataset is available on the CIC Dataset website.