Datasets

Water Distribution (WaDi)

Characteristics of dataset (WaDi.A1)

1. 16 days of continuous operation: 14 under normal operation & 2 days with attack scenarios
2. Data from all the 123 sensors and actuators
3. Attack Scenarios: Derived from the attack models developed by our research team. The attack model considers the intent space of a CPS as an attack model. 15 attacks were launched during the 2 days.

Updates on dataset

19 Dec 19 (WaDi.A2)
As the plant was unstable for certain periods during the operation, the affected readings have been removed and a new csv file “WADI_14days_new.csv” uploaded. A second csv file “WADI_attackdataLABLE.csv” now contains labels on whether there was an attack (-1) or not (1). The updated attack table with the corrected dates has also been uploaded.

WaDi Dec 2023 (100-hour run)
Characteristics of the Datasets 18 Dec – 22 Dec 2023 SWaT.A9_18 Dec 2023 & WaDi.A3_18 Dec 2023 datasets, i.e., 100 Hour Run Dataset

1. 105 hours of continuous operations of both SWaT and WaDi testbeds under normal conditions.
2. The first 5 hours of continuous run of both testbeds was not in CrossOver mode, i.e., each testbed was run in a closed loop.
3. The testbeds were run for the remaining 100 hours in CrossOver mode.
4. No attacks were performed, i.e., Clean Dataset.
5. The flow rate of the WaDi Consumer Tank 2 was deliberately set to 0.00 m^3/h to avoid triggering its faulty sensor.
6. The following files are available:
   1. The PCAPs for the 100 Hour Run Dataset
      1. Total number of files and respective data size: 4,106 x 190MB files totalling 764 GB
      2. WaDi: 1,804 x 190MB files totalling 335 GB
      3. SWaT: 2,302 x 190MB files totalling 429 GB
   2. The Historian Datasets for both SWaT and WaDi
   3. The NetFlow logs (Incomplete Set – The Net_Flow VM was not able to capture the full run due to its unavailability)