IoTFinder Data

The ground truth and evalulation data for IoTFinder are available for download. The data spans two months from August 1st 2019 to September 30th 2019. The data is filtered for DNS responses only and excludes other protocols. The PCAPs cover all the DNS responses for the devices mapped in the device mapping file.

DNS Response PCAPs

IoTFinder relies only on DNS traffic to identify IoT devices. The technique uses on a combination of domains contacted and how frequent they are resolved within a configurable time window. The training and evaluation data can be found below:

  1. August 2019 - download
  2. Septmber 2019 - download

YourThings Data

The evaluation scores for the smart-home devices and their generated network traffic are available for download. The data is broken down into the network traffic generated during the manual assessment of the devices and the derived evaluation score sheet.

Evaluation Sheet

The evaluation sheet contains the evaluation data based on our methodology in a CSV format. The evaluation data is used to generate the scores found in the scorecards page.

  1. A copy of the CSV file can be downloaded here
Device Mapping

The device mapping file is a CSV file that has device to local IP mapping. This information is useful when analyzing the pcap files to identify the specific device that’s on the network.

  1. A copy of the CSV file can be downloaded here.

To generate the evaluation sheet we manually assessed the devices and their components over a period of 10 days. The PCAPs for those 10 days are available for download below. Each file size ranges between 10GB-13GB in size. The dates for the evaluation period are from March 20, 21, 25, 2018 and April 10-19 of 2018:

Device Evaluation (March 20, 21, and 28)

  1. March 20, 2018 - download
  2. March 21, 2018 - download
  3. March 28, 2018 - download

Network Evaluation (April 10-19)

  1. April 10, 2018 - download
  2. April 11, 2018 - download
  3. April 12, 2018 - download
  4. April 13, 2018 - download
  5. April 14, 2018 - download
  6. April 15, 2018 - download
  7. April 16, 2018 - download
  8. April 17, 2018 - download
  9. April 18, 2018 - download
  10. April 19, 2018 - download

If you have additional questions, please contact us directly and let us know what you are looking for, we would be happy to help!


This initiative is based on the following research. If you use our published data we kindly ask you to cite our work.

  1. Roberto Perdisci, Thomas Papastergiou, Omar Alrawi, Manos Antonakakis; IoTFinder: Efficient Large-Scale Identification of IoT Devices via Passive DNS Traffic Analysis, in IEEE European Symposium of Security & Privacy, Sept 2020.
  2. Omar Alrawi, Chaz Lever, Manos Antonakakis, Fabian Monrose; SoK: Security Evaluation of Home-Based IoT Deployments, in IEEE Symposium of Security & Privacy, May 2019.