Modbus Dataset for ICS Anomaly Detection

Citation Author(s):
Ondrej
Rysavy
Brno University of Technology
Petr
Matousek
Brno University of Technology
Submitted by:
Ondrej Rysavy
Last updated:
Wed, 03/16/2022 - 09:53
DOI:
10.21227/e1bc-3w91
Data Format:
License:
0
0 ratings - Please login to submit your rating.

Abstract 

This dataset consisting of MODBUS/TCP communication was created using the Factory.IO simulator (trial version is available). The dataset contains different scenarios that control different industrial processes. For each scenario, files are provided to capture normal communication and communication with anomalies. The purpose of the dataset is to support research and evaluation of anomaly detection methods in the field of ICS. The provided ICS operation, with the help of a simulated factory, is close to the real system and at the same time allows various errors and attacks to be demonstrated.

Instructions: 

The dataset is provided as a collection of raw packet capture files supplemented by scene documentation, and other files necessary to reproduce the data. Currently, only four scenes and their normal communication are available. All these scenes are provided as samples with the Factory I/O application. They are controlled using a simple soft controller communicating with RTU by MODBUS messages. 

Each scene is provided as a separate ZIP file. See included PDF file for further documentation. 

 

Comments

I would like to work on it

Submitted by Mubashir Iqbal on Mon, 12/20/2021 - 01:16

Sure, I am about to upload more files soon after completing their documentation and do some cleaning.

Submitted by Ondrej Rysavy on Tue, 01/04/2022 - 04:33

Dataset only contains normal instances of traffic and no anomalies/attacks etc.

Submitted by Asterios Mpatziakas on Tue, 06/25/2024 - 09:06

Documentation

AttachmentSize
File Readme.pdf455.42 KB