{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T16:42:11Z","timestamp":1781973731460,"version":"3.54.5"},"reference-count":31,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2021,2,23]],"date-time":"2021-02-23T00:00:00Z","timestamp":1614038400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Over the past few years, we have witnessed the emergence of Internet of Things (IoT) and Industrial IoT networks that bring significant benefits to citizens, society, and industry. However, their heterogeneous and resource-constrained nature makes them vulnerable to a wide range of threats. Therefore, there is an urgent need for novel security mechanisms such as accurate and efficient anomaly-based intrusion detection systems (AIDSs) to be developed before these networks reach their full potential. Nevertheless, there is a lack of up-to-date, representative, and well-structured IoT\/IIoT-specific datasets which are publicly available and constitute benchmark datasets for training and evaluating machine learning models used in AIDSs for IoT\/IIoT networks. Contribution to filling this research gap is the main target of our recent research work and thus, we focus on the generation of new labelled IoT\/IIoT-specific datasets by utilising the Cooja simulator. To the best of our knowledge, this is the first time that the Cooja simulator is used, in a systematic way, to generate comprehensive IoT\/IIoT datasets. In this paper, we present the approach that we followed to generate an initial set of benign and malicious IoT\/IIoT datasets. The generated IIoT-specific information was captured from the Contiki plugin \u201cpowertrace\u201d and the Cooja tool \u201cRadio messages\u201d.<\/jats:p>","DOI":"10.3390\/s21041528","type":"journal-article","created":{"date-parts":[[2021,2,23]],"date-time":"2021-02-23T20:19:36Z","timestamp":1614111576000},"page":"1528","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":52,"title":["Generating Datasets for Anomaly-Based Intrusion Detection Systems in IoT and Industrial IoT Networks"],"prefix":"10.3390","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5583-0306","authenticated-orcid":false,"given":"Ismael","family":"Essop","sequence":"first","affiliation":[{"name":"Faculty of Engineering and Science, University of Greenwich, Chatham Maritime ME4 4TB, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jos\u00e9 C.","family":"Ribeiro","sequence":"additional","affiliation":[{"name":"Instituto de Telecomunica\u00e7\u00f5es, Aveiro 3810-193, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3830-7190","authenticated-orcid":false,"given":"Maria","family":"Papaioannou","sequence":"additional","affiliation":[{"name":"Faculty of Engineering and Science, University of Greenwich, Chatham Maritime ME4 4TB, UK"},{"name":"Instituto de Telecomunica\u00e7\u00f5es, Aveiro 3810-193, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9130-4605","authenticated-orcid":false,"given":"Georgios","family":"Zachos","sequence":"additional","affiliation":[{"name":"Faculty of Engineering and Science, University of Greenwich, Chatham Maritime ME4 4TB, UK"},{"name":"Instituto de Telecomunica\u00e7\u00f5es, Aveiro 3810-193, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Georgios","family":"Mantas","sequence":"additional","affiliation":[{"name":"Faculty of Engineering and Science, University of Greenwich, Chatham Maritime ME4 4TB, UK"},{"name":"Instituto de Telecomunica\u00e7\u00f5es, Aveiro 3810-193, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jonathan","family":"Rodriguez","sequence":"additional","affiliation":[{"name":"Instituto de Telecomunica\u00e7\u00f5es, Aveiro 3810-193, Portugal"},{"name":"Faculty of Computing, Engineering and Science, University of South Wales, Pontypridd CF37 1DL, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2021,2,23]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"2233","DOI":"10.1109\/TII.2014.2300753","article-title":"Internet of Things in Industries: A Survey","volume":"10","author":"Xu","year":"2014","journal-title":"IEEE Trans. Ind. Informatics"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1016\/j.jnca.2017.02.009","article-title":"A survey of intrusion detection in Internet of Things","volume":"84","author":"Miani","year":"2017","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"4724","DOI":"10.1109\/TII.2018.2852491","article-title":"Industrial Internet of Things: Challenges, Opportunities, and Directions","volume":"14","author":"Sisinni","year":"2018","journal-title":"IEEE Trans. Ind. Informatics"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","article-title":"TON_IoT Telemetry Dataset: A New Generation Dataset of IoT and IIoT for Data-Driven Intrusion Detection Systems","volume":"8","author":"Alsaedi","year":"2020","journal-title":"IEEE Access"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"2671","DOI":"10.1109\/COMST.2019.2896380","article-title":"Network Intrusion Detection for IoT Security Based on Learning Techniques","volume":"21","author":"Chaabouni","year":"2019","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"ref_6","unstructured":"(2020, September 19). KDD Cup 1999 Data. Available online: http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A.A. (2009, January 8\u201310). A detailed analysis of the KDD CUP 99 data set. Proceedings of the IEEE Symposium on Computational Intelligence for Security and Defense Applications, CISDA 2009, Ottawa, ON, Canada.","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Moustafa, N., and Slay, J. (2015, January 10\u201312). UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). Proceedings of the 2015 Military Communications and Information Systems Conference, MilCIS 2015, Canberra, ACT, Australia.","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., and Ghorbani, A.A. (2018, January 22\u201324). Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization. Proceedings of the ICISSP2018, Funchal, Madeira, Portugal.","DOI":"10.5220\/0006639801080116"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Suthaharan, S., Alzahrani, M., Rajasegarar, S., Leckie, C., and Palaniswami, M. (2010, January 7\u201310). Labelled data collection for anomaly detection in wireless sensor networks. Proceedings of the 2010 6th International Conference on Intelligent Sensors, Sensor Networks and Information Processing, ISSNIP 2010, Brisbane, QLD, Australia.","DOI":"10.1109\/ISSNIP.2010.5706782"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1745","DOI":"10.1109\/TMC.2018.2866249","article-title":"Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics","volume":"18","author":"Sivanathan","year":"2019","journal-title":"IEEE Trans. Mob. Comput."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Futur. Gener. Comput. Syst."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Hamza, A., Gharakheili, H.H., Benson, T.A., and Sivaraman, V. (2019, January 3\u20134). Detecting Volumetric Attacks on IoT Devices via SDN-Based Monitoring of MUD Activity. Proceedings of the SOSR 2019\u2014Proceedings of the 2019 ACM Symposium on SDN Research, San Jose, CA, USA.","DOI":"10.1145\/3314148.3314352"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"\u00d6sterlind, F., Dunkels, A., Eriksson, J., Finne, N., and Voigt, T. (2006, January 14\u201316). Cross-level sensor network simulation with COOJA. Proceedings of the Proceedings\u2014Conference on Local Computer Networks, LCN, Tampa, FL, USA.","DOI":"10.1109\/LCN.2006.322172"},{"key":"ref_15","unstructured":"ITU-T (2020, December 15). Recommendation ITU-T Y.2060 \u201cOverview of the Internet of Things\u201d. Available online: https:\/\/www.itu.int\/ITU-T\/recommendations\/rec.aspx?rec=y.2060."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"86769","DOI":"10.1109\/ACCESS.2019.2923610","article-title":"A Smart Manufacturing Service System Based on Edge Computing, Fog Computing, and Cloud Computing","volume":"7","author":"Qi","year":"2019","journal-title":"IEEE Access"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1125","DOI":"10.1109\/JIOT.2017.2683200","article-title":"A Survey on Internet of Things: Architecture, Enabling Technologies, Security and Privacy, and Applications","volume":"4","author":"Lin","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1016\/j.jnca.2017.10.017","article-title":"Security for 4G and 5G cellular networks: A survey of existing authentication and privacy-preserving schemes","volume":"101","author":"Ferrag","year":"2018","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1636","DOI":"10.1109\/COMST.2018.2874978","article-title":"Anatomy of Threats to the Internet of Things","volume":"21","author":"Makhdoom","year":"2019","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"82721","DOI":"10.1109\/ACCESS.2019.2924045","article-title":"A Survey on IoT Security: Application Areas, Security Threats, and Solution Architectures","volume":"7","author":"Hassija","year":"2019","journal-title":"IEEE Access"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Newsome, J., Shi, E., Song, D., and Perrig, A. (2004, January 27). The Sybil attack in sensor networks: Analysis & defenses - IEEE Conference Publication. Proceedings of the Third International Symposium on Information Processing in Sensor Networks, Berkeley, CA, USA.","DOI":"10.1145\/984622.984660"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"El-hajj, M., Fadlallah, A., Chamoun, M., and Serhrouchni, A. (2019). A Survey of Internet of Things (IoT) Authentication Schemes. Sensors, 19.","DOI":"10.3390\/s19051141"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"2483","DOI":"10.1109\/JIOT.2017.2767291","article-title":"Evaluating critical security issues of the IoT world: Present and future challenges","volume":"5","author":"Frustaci","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"4815","DOI":"10.1109\/JIOT.2018.2871719","article-title":"An ensemble intrusion detection technique based on proposed statistical flow features for protecting network traffic of internet of things","volume":"6","author":"Moustafa","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_25","unstructured":"Clarence, C., and David, F. (2018). Machine Learning and Security [Book], O\u2019Reilly Media, Inc."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Hodo, E., Bellekens, X., Hamilton, A., Dubouilh, P.L., Iorkyase, E., Tachtatzis, C., and Atkinson, R. (2016, January 11\u201313). Threat analysis of IoT networks using artificial neural network intrusion detection system. Proceedings of the 2016 International Symposium on Networks, Computers and Communications, ISNCC 2016, Yasmine Hammamet, Tunisia.","DOI":"10.1109\/ISNCC.2016.7746067"},{"key":"ref_27","unstructured":"(2020, December 05). Moteiv Corporation Tmote Sky\u2014Ultra Low Power IEEE 802.15.4 Compliant Wireless Sensor Module. Available online: http:\/\/www.crew-project.eu\/sites\/default\/files\/tmote-sky-datasheet.pdf."},{"key":"ref_28","unstructured":"(2020, November 28). Wireshark Go Deep. Available online: https:\/\/www.wireshark.org\/."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Amirinasab Nasab, M., Shamshirband, S., Chronopoulos, A., Mosavi, A., and Nabipour, N. (2020). Energy-Efficient Method for Wireless Sensor Networks Low-Power Radio Operation in Internet of Things. Electronics, 9.","DOI":"10.20944\/preprints202001.0194.v1"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Bandekar, A., and Javaid, A.Y. (August, January 31). Cyber-attack Mitigation and Impact Analysis for Low-power IoT Devices. Proceedings of the 2017 IEEE 7th Annual International Conference on CYBER Technology in Automation, Control, and Intelligent Systems, CYBER 2017, Honolulu, HI, USA.","DOI":"10.1109\/CYBER.2017.8446380"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Amir Alavi, S., Rahimian, A., Mehran, K., and Alaleddin Mehr Ardestani, J. (2018, January 13\u201316). An IoT-Based Data Collection Platform for Situational Awareness-Centric Microgrids. Proceedings of the Canadian Conference on Electrical and Computer Engineering, Quebec City, QC, Canada.","DOI":"10.1109\/CCECE.2018.8447718"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/4\/1528\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:26:45Z","timestamp":1760160405000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/4\/1528"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,2,23]]},"references-count":31,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2021,2]]}},"alternative-id":["s21041528"],"URL":"https:\/\/doi.org\/10.3390\/s21041528","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,2,23]]}}}