# ZigBeeNet: Decrypted Zigbee IoT Network Traffic Dataset in Smart Home Environment
## 9 Conclusions  
One of the significant features of Zigbee is that it encrypts the data payloads within the frame to ensure secure communication. This encryption is achieved using the link key and the network key and prevents unauthorized access to sensitive information such as device commands or sensor data. However, it is important to be able to decrypt these data to understand the full operation of the network and for analytical purposes or to understand how an attack occurs. Thus, we presented a publicly decrypted Zigbee real IoT traffic dataset for smart home applications. This dataset fills the gap in the literature for a decrypted Zigbee dataset. Another purpose of this study is to investigate Zigbee network traffic characteristics. Therefore, researchers are able to explore the feasibility of developing a reliable generator for simulating IoT and Zigbee network traffic. We collected IoT network traffic data in a two-floor smart home. We used 15 Zigbee devices in total, six different types of devices (hub, power plug, smart light, smart bulb, wall switch, and motion sensor) and nine different devices. We obtained the network key, explained in detail in Section 5.2, to decrypt the payload data of each packet in the traffic. Then, we analyzed the Zigbee network traffic characteristics of our data in Section 7. The analysis of the Zigbee network traffic dataset reveals several key characteristics. Packet distribution across network layers highlights the prominence of the Zigbee HA layer, particularly in supporting smart home devices, with nearly one-third of the traffic originating from this layer. While unicast messages dominate, broadcast packets play a significant role in the Zigbee NWK layer. The analysis of packet transmission shows a higher tendency for retransmissions in the Zigbee NWK and ZDP layers, in contrast to more direct communication in the Zigbee HA layer. Furthermore, message types vary across layers, with the IEEE 802.15.4 layer primarily handling ACK messages to ensure communication reliability, and the Zigbee and ZDP layers focusing on routing and network management. The Zigbee HA layer, meanwhile, is responsible for device control, particularly in lighting systems. Finally, traffic analysis by power source distribution provides further insight into the operational aspects of the network. These findings collectively enhance the understanding of Zigbee network traffic characteristics in smart home environments. On the other hand, the fact that the data were collected only for 20 days with 15 IoT devices in a specific smart home may not adequately reflect variations such as heavy traffic conditions or security threats in the environments, even if we consider that it is a large dataset. For this reason, the authors plan to expand the dataset by increasing the number of devices, as mentioned, in future work. Another proposal for future work is to develop a Zigbee traffic generator. A Zigbee traffic generator has many potential effects, such as testing possible security attacks or simulating different traffic densities. We want to emphasize that the development of the Zigbee traffic generator is not only a theoretical contribution but also can have a significant impact on practical applications. The dataset we present in this paper will help to develop a Zigbee traffic generator. We believe that our dataset makes a significant contribution to the literature and industrial applications. Conceptualization, L.S. and N.K. ; software, L.S. ; validation, L.S. and N.K. ; formal analysis, L.S. and N.K. ; investigation, L.S. and N.K. ; data curation, L.S. ; writing--original draft preparation, N.K. and L.S. ; writing--review and editing, N.K. and L.S. ; visualization, N.K. and L.S. All authors have read and agreed to the published version of the manuscript. This paper was supported by Reactive Too project that has received funding from the European Union's Horizon 2020 Research, Innovation and Staff Exchange Programme under the Marie Sklodowska-Curie Action (Grant Agreement No 871163).