GOOSEIDRS Dataset: IEC 61850 GOOSE Masquerade Attack Traces

Abstract

This dataset accompanies the paper “GOOSEIDRS: Intrusion Detection and Automated Response for IEC 61850 GOOSE Masquerade Attacks,” accepted for ACM Sustainability Week Companion 2026. The dataset contains 1,007,460 augmented IEC 61850 GOOSE traffic records derived from a hardware-in-the-loop digital substation testbed. It includes labeled normal and masquerade traffic used for feature engineering, model training, validation, and testing in the GOOSEIDRS intrusion detection and response framework. The CSV file contains the following fields:- label: traffic class, where 0 indicates normal traffic and 1 indicates masquerade attack traffic- allData: parsed GOOSE payload/control data- sqNum: GOOSE sequence number- stNum: GOOSE state number- timestamp: packet timestamp- utcTime: UTC time field from the trace The dataset is provided for reproducible cybersecurity research in controlled IEC 61850 laboratory/testbed environments.