dataset-v1.pcap

The dataset consists of 9 hosts: 1x HMI; 1x Data Historian; 5x RTU; 1x MITM Attacker; 1x Reconnaissance. The man in the middle (MITM) attack targets IEC104, which replaces the COT value to an invalid value. <br><br>There is one dataset in two formats. PCAP and binary format fot SiLK[1]<br>[1] https://tools.netsa.cert.org/silk/docs.html<br>本数据集包含9台主机：1台人机界面（Human-Machine Interface, HMI）、1台数据历史服务器（Data Historian）、5台远程终端单元（Remote Terminal Unit, RTU）、1台中间人（Man-in-the-Middle, MITM）攻击主机以及1台侦察主机。该中间人攻击针对IEC 104协议，将传输原因（Cause of Transmission, COT）值替换为无效值。 本数据集提供两种存储格式：PCAP格式与适用于SiLK的二进制格式[1] [1] https://tools.netsa.cert.org/silk/docs.html