An Automatic Complex Event Processing Rules Generation System for the Recognition of Real-Time IoT Attack Patterns (Dataset)

In addition to data on the legitimate traffic of the network. You can also find the CEP rules used to detect attacks.

This dataset has been used in the work : "An Automatic Complex Event Processing Rules Generation System for the Recognition of Real-Time IoT Attack Patterns". The distribution between training and testing is as follows: Normal: 20% training, 80% testing Subscription fuzzing: 20% training, 80% testing Disconnection wave: 20%training, 80% testing TCP SYN Scan: 70% training, 30% testing UDP port Scan: 70% training, 30% testing XMAS Scan: 90% training, 10% testing Telnet Connection: 70% training, 30% testing