Towards the Development of Realistic Botnet Dataset in the Internet of\n Things for Network Forensic Analytics: Bot-IoT Dataset

2018/11/01 by Nickolaos Koroniotis, Nour Moustafa, Koroniotis, Nickolaos +5 · 12 citations
Computer Science · #Network Security and Intrusion Detection #Anomaly Detection Techniques and Applications #Advanced Malware Detection Techniques

paper · pdf · doi:10.48550/arxiv.1811.00701

Abstract

The proliferation of IoT systems, has seen them targeted by malicious third\nparties. To address this, realistic protection and investigation\ncountermeasures need to be developed. Such countermeasures include network\nintrusion detection and network forensic systems. For that purpose, a\nwell-structured and representative dataset is paramount for training and\nvalidating the credibility of the systems. Although there are several network,\nin most cases, not much information is given about the Botnet scenarios that\nwere used. This paper, proposes a new dataset, Bot-IoT, which incorporates\nlegitimate and simulated IoT network traffic, along with various types of\nattacks. We also present a realistic testbed environment for addressing the\nexisting dataset drawbacks of capturing complete network information, accurate\nlabeling, as well as recent and complex attack diversity. Finally, we evaluate\nthe reliability of the BoT-IoT dataset using different statistical and machine\nlearning methods for forensics purposes compared with the existing datasets.\nThis work provides the baseline for allowing botnet identificaiton across\nIoT-specifc networks. The Bot-IoT dataset can be accessed at [1].\n

Cited by

• Toward Real-World IoT Security: Concept Drift-Resilient IoT Botnet Detection via Latent Space Representation Learning and Alignment
• Synecdoche: Efficient and Accurate In-Network Traffic Classification via Direct Packet Sequential Pattern Matching
• CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptography
• Green Deep Reinforcement Learning for IoT Edge Intrusion Detection
• Revisiting Network Traffic Analysis: Compatible network flows for ML models
• AegisMCP: Online Graph Intrusion Detection for Tool-Augmented LLMs on Edge Devices
• A Novel Ensemble Learning Approach for Enhanced IoT Attack Detection: Redefining Security Paradigms in Connected Systems
• AutoML in Cybersecurity: An Empirical Study
• Towards Adapting Federated & Quantum Machine Learning for Network Intrusion Detection: A Survey
• MixGAN: A Hybrid Semi-Supervised and Generative Approach for DDoS Detection in Cloud-Integrated IoT Networks
• Developing a Transferable Federated Network Intrusion Detection System
• Evaluating Machine Learning Models for Intrusion Detection Systems in IoT Devices: An Experimental Study

Related

• Towards Developing Network forensic mechanism for Botnet Activities in the IoT based on Machine Learning Techniques
• A State-of-the-Art Review on IoT botnet Attack Detection
• Towards a Universal Features Set for IoT Botnet Attacks Detection
• Systematic review and characterisation of malicious industrial network traffic datasets
• AI-Driven Fast and Early Detection of IoT Botnet Threats: A Comprehensive Network Traffic Analysis Approach