A Botnet Data Collection Method for Industrial Internet

Industrial internet security is related to industrial production operations and national economic security. Network intrusion detection dataset in industrial control environment can effectively train detection models and mitigate network attacks, which is an indispensable component for industrial internet security. In this paper, we propose a data collection method for industrial Internet-oriented botnet by classifying traffic packets according to network traffic features and industrial control identification codes, containing the status of industrial control devices. This method can greatly improve the detection accuracy of the model in the industrial internet. To create a botnet incursion dataset in the industrial control environment, we simultaneously employed the existing industrial control devices to gather both industrial control and botnet network traffic. Finally, we used an AI-based model to detect the botnet.