MQTT_UAD: MQTT Under Attack Dataset for Detection of Attacks in IoT Networks Using MQTT Protocol

Overview

MQTT_UAD (MQTT Under Attack Dataset) is a public dataset of MQTT traffic for detecting cyberattacks in IoT networks that use the MQTT protocol. It is introduced in a 2025 Data in Brief article and released together with structured data suitable for machine learning-based intrusion detection.

Scope and Design

• Focuses specifically on MQTT-based IoT communication, a widely used publish/subscribe protocol in constrained IoT environments.
• Includes benign traffic as well as multiple attack scenarios against MQTT infrastructure, enabling comparative evaluation of intrusion detection techniques.
• Provides labeled records so that supervised learning methods can distinguish between normal and malicious activity.

Intended Uses

• Training and benchmarking intrusion detection systems for MQTT-based IoT deployments.
• Developing and comparing feature-engineering strategies and classifiers tailored to MQTT traffic.
• Supporting research on lightweight IDS models that can operate on resource-constrained IoT gateways.

Access and License

The dataset is described in the Data in Brief article and distributed via the publisher's data platform and an associated external repository. Users should follow the citation and licensing guidance provided in the article and dataset page.