Cybersecurity dataset of water distribution plant communications under replay attacks

This dataset documents replay attacks targeting MQTT communications in a water distribution level control system. The attacks affect both directions of communication: replaying historical control commands from PC to plants, and replaying process parameter messages from plants to PC.

When a message arrives at the broker during an active attack campaign, a replay sequence triggers 1-20 previously recorded messages of the same type to be resent. Messages preserve original sampling time, producing syntactically valid but temporally inconsistent traffic.

The dataset enables temporal sequence analysis and comparison between original and replayed messages, with attack campaigns having variable durations separated by realistic cooldown periods. Created as part of strategic project between INCIBE and University of A Coruña.