CyberFlowIoT-GICAP: Labelled Flow-Based Network Traffic Dataset for Cyberattack Detection [Dataset]

The dataset captures network communication generated by hardware-based IoT devices during normal operation, including MQTT messaging, database synchronization, and web-based monitoring, as well as during the execution of predefined cyber-attack scenarios within an isolated experimental network.

Network traffic was recorded at the packet level using passive network monitoring and stored in PCAP format. The packet captures were subsequently processed into bidirectional network flows using a flow-based traffic extraction pipeline, producing flow records with statistical and temporal attributes derived from the observed packet exchanges. Cyberattack-related flows were identified based on predefined attack execution time intervals obtained from experimental metadata.