In the ZT (Zero Trust) model, all the operations to objects are assumed to be not trustworthy to make information systems secure. Therefore, whether or not each operation is trustworthy is checked. Machine learning models are used to decide the trust score of each operation based on the traffic information of the operation. For the machine learning models, the UNSW-NB15 data set is considered. However, the UNSW-NB15 data set does not have features for the information flow control. The ZT model in which trust score of each operation can be decided based on not only traffic information of the operation but also occurring of illegal information flow is critical. In order to evaluate the ZT model, a data set which has both information on each operation is necessary. Therefore, we propose a method to create series of operations from subjects to objects based on the UNSW-NB15 data set in this paper.