NF-ToN-IoT-v2 class distribution and attack descriptions
| Class | Count | Description |
|---|---|---|
| Benign | 6,099,469 | Normal unmalicious flows |
| Backdoor | 16,809 | Remote-access attack triggered by crafted client applications |
| DoS | 712,609 | Resource overload to deny access or service availability |
| DDoS | 2,026,234 | Distributed DoS with multiple attack sources |
| Injection | 684,465 | Untrusted inputs altering execution (e.g. SQL, code injections) |
| MITM | 7,723 | Attacker intercepts traffic between victim and host |
| Password | 1,153,323 | Password extraction via brute force or sniffing |
| Ransomware | 3,425 | File encryption with demand for decryption ransom |
| Scanning | 3,781,419 | Network/host probing to extract system information |
| XSS | 2,455,020 | Script injection through web applications to users |
| Class | Count | Description |
|---|---|---|
| Benign | 6,099,469 | Normal unmalicious flows |
| Backdoor | 16,809 | Remote-access attack triggered by crafted client applications |
| DoS | 712,609 | Resource overload to deny access or service availability |
| DDoS | 2,026,234 | Distributed DoS with multiple attack sources |
| Injection | 684,465 | Untrusted inputs altering execution (e.g. SQL, code injections) |
| 7,723 | Attacker intercepts traffic between victim and host | |
| Password | 1,153,323 | Password extraction via brute force or sniffing |
| Ransomware | 3,425 | File encryption with demand for decryption ransom |
| Scanning | 3,781,419 | Network/host probing to extract system information |
| 2,455,020 | Script injection through web applications to users |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.