UOS_IOTSH_2024: A Comprehensive network traffic dataset for sinkhole attacks in diverse RPL IoT networks

The proliferation of Internet of Things (IoT) implementations has enabled significant advancements across various applications, from smart homes to industrial automation. IoT networks typically consist of wirelessly interconnected, resource-constrained heterogeneous nodes. They are usually built using the energy-efficient Low Power and Lossy Network (LLN) standard, and employ the Routing Protocol for Low-Power and Lossy Networks (RPL) due to its efficiency in accommodating the constraints of IoT devices. However, RPL-based networks are susceptible to various security attacks that target the organization of the network. Chief among these is the sinkhole attack, which disrupts the network topology to attract traffic towards the malicious node by advertising false routing information. This work addresses the challenge of detecting sinkhole attacks on RPL-based IoT networks by introducing the extensive UOS_IOTSH_2024 dataset. This dataset is comprised mainly of raw network traffic collected through simulations of realistic IoT networks using the COOJA simulator. The dataset contains samples representing single and dual attackers in small and medium-sized IoT networks. It also covers both single-DODAG and dual-DODAG network architectures, as well as attackers at various locations across different topological positions for each scenario. In total, the dataset comprises 1,771,880 samples covering 60 different scenarios.