Annotated Encrypted Network Traffic Dataset for Application, OS, and Malware Identification

This dataset provides an annotated collection of encrypted network communication intended for research on application identification, operating system fingerprinting, and malware detection in encrypted traffic. It combines network traffic captured in controlled sandbox environments executing selected Windows applications with malware-related communication obtained from automated malware analysis reports. In addition to application and malware traffic, the dataset includes background operating system communication generated by the capture environment, enabling comprehensive and realistic modeling of host behavior.

The dataset is publicly provided as Apache Parquet files containing preprocessed representations of the raw network traffic. The underlying raw packet capture data (PCAP files) are not publicly distributed but are available upon justified request. The Parquet files include extracted features and structured annotations suitable for direct use in data analysis and machine learning workflows.

The format and structure of the Parquet files, including field definitions and annotation schemas, are documented in the accompanying README.md file. The dataset is versioned and designed to be incrementally extended with additional applications, operating systems, and malware samples, supporting reproducible research and long-term reuse in encrypted traffic analysis and network security studies.