{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T09:14:47Z","timestamp":1780046087098,"version":"3.53.1"},"reference-count":58,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Internet of Things"],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1016\/j.iot.2026.101939","type":"journal-article","created":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T01:24:06Z","timestamp":1775438646000},"page":"101939","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["MQTT Spectrum: A comprehensive and version-agnostic dataset for intrusion detection in MQTT-based IoMT deployments"],"prefix":"10.1016","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7010-8805","authenticated-orcid":false,"given":"Sujitha","family":"Lakshminarayana","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8359-1330","authenticated-orcid":false,"given":"P.","family":"Santhi Thilagam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"1","key":"10.1016\/j.iot.2026.101939_bib0001","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1109\/COMST.2022.3205377","article-title":"A survey on evaluating the quality of autonomic internet of things applications","volume":"25","author":"Fizza","year":"2023","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"1","key":"10.1016\/j.iot.2026.101939_bib0002","doi-asserted-by":"crossref","first-page":"616","DOI":"10.1109\/COMST.2019.2953364","article-title":"Security of the internet of things: vulnerabilities, attacks, and countermeasures","volume":"22","author":"Butun","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101939_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2020.100227","article-title":"Survey on IoT security: challenges and solution using machine learning, artificial intelligence and blockchain technology","volume":"11","author":"Mohanta","year":"2020","journal-title":"Internet Things"},{"issue":"4","key":"10.1016\/j.iot.2026.101939_bib0004","doi-asserted-by":"crossref","first-page":"2510","DOI":"10.1109\/COMST.2024.3372630","article-title":"Securing the IoT application layer from an MQTT protocol perspective: challenges and research prospects","volume":"26","author":"Lakshminarayana","year":"2024","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101939_bib0005","series-title":"2020 IEEE Symposium on Security and Privacy (SP)","first-page":"465","article-title":"Burglars\u2019 IoT paradise: understanding and mitigating security risks of general messaging protocols on IoT clouds","author":"Jia","year":"2020"},{"key":"10.1016\/j.iot.2026.101939_bib0006","article-title":"Survey and classification of dos and DDos attack detection and validation approaches for IoT environments","volume":"25","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0007","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2020.100264","article-title":"A survey of IoT protocols and their security issues through the lens of a generic IoT stack","volume":"16","author":"Tournier","year":"2021","journal-title":"Internet Things"},{"issue":"5","key":"10.1016\/j.iot.2026.101939_bib0008","doi-asserted-by":"crossref","first-page":"4717","DOI":"10.1109\/TDSC.2024.3358630","article-title":"MQTT-I: Achieving end-to-End data flow integrity in MQTT","volume":"21","author":"Buccafurri","year":"2024","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"18","key":"10.1016\/j.iot.2026.101939_bib0009","doi-asserted-by":"crossref","first-page":"17728","DOI":"10.1109\/JIOT.2022.3155872","article-title":"BORDER: A benchmarking framework for distributed MQTT brokers","volume":"9","author":"Longo","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101939_bib0010","unstructured":"OASIS, MQTT Version 3.1.1, n.d., (https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v3.1.1\/os\/mqtt-v3.1.1-os.htmla). Accessed: Jul. 07, 2025."},{"key":"10.1016\/j.iot.2026.101939_bib0011","unstructured":"OASIS, MQTT Version 5.0, n.d., (https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v5.0\/mqtt-v5.0.htmlb). Accessed: Jul. 07, 2025."},{"key":"10.1016\/j.iot.2026.101939_bib0012","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/LNET.2026.3671836","article-title":"Quantitative evaluation of DDoS attacks on MQTT-based IoT deployments","author":"Lakshminarayana","year":"2026","journal-title":"IEEE Netw. Lett."},{"key":"10.1016\/j.iot.2026.101939_bib0013","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1016\/j.procs.2024.08.012","article-title":"Securing MQTT: unveiling vulnerabilities and innovating cyber range solutions","volume":"241","author":"Kombate","year":"2024","journal-title":"Procedia. Comput. Sci."},{"issue":"3","key":"10.1016\/j.iot.2026.101939_bib0014","doi-asserted-by":"crossref","first-page":"1826","DOI":"10.1109\/TDSC.2020.3037908","article-title":"A large-Scale empirical study on the vulnerability of deployed IoT devices","volume":"19","author":"Zhao","year":"2022","journal-title":"IEEE Trans. Dependable Secure. Comput."},{"issue":"4","key":"10.1016\/j.iot.2026.101939_bib0015","doi-asserted-by":"crossref","first-page":"3496","DOI":"10.1109\/COMST.2018.2844742","article-title":"A critical review of practices and challenges in intrusion detection systems for IoT: toward universal and resilient systems","volume":"20","author":"Benkhelifa","year":"2018","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101939_bib0016","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2021.100365","article-title":"Machine learning approaches to IoT security: a systematic literature review","volume":"14","author":"Ahmad","year":"2021","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_sbref0017","article-title":"MQTT Vulnerabilities, attack vectors and solutions in the internet of things (IoT)","volume":"Latest Articles","author":"Hintaw","year":"2021","journal-title":"IETE J. Res."},{"key":"10.1016\/j.iot.2026.101939_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2023.100780","article-title":"Internet of things (IoT) security dataset evolution: challenges and future directions","volume":"22","author":"Kaur","year":"2023","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0019","unstructured":"HiveMQ, MQTT 5 Protocol Overview, 2025, (https:\/\/www.hivemq.com\/mqtt\/mqtt-5\/). Accessed: Jul. 07, 2025."},{"issue":"12","key":"10.1016\/j.iot.2026.101939_bib0020","doi-asserted-by":"crossref","first-page":"22090","DOI":"10.1109\/JIOT.2025.3549784","article-title":"Next-Generation DDos attacks on IoT deployments: targeting the advanced features of MQTT v5.0 protocol","volume":"12","author":"Lakshminarayana","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101939_bib0021","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2021.102207","article-title":"Comprehensive analysis of MQTT 5.0 susceptibility to network covert channels","volume":"104","author":"Mileva","year":"2021","journal-title":"Comput. Secur."},{"issue":"19","key":"10.1016\/j.iot.2026.101939_bib0022","doi-asserted-by":"crossref","first-page":"19062","DOI":"10.1109\/JIOT.2022.3163469","article-title":"Characterization and evaluation of IoT protocols for data exfiltration","volume":"9","author":"Uroz","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101939_sbref0023","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2025.101869","article-title":"AI for IoMT security: a comprehensive survey of intrusion detection and system architectures","volume":"36","author":"Yacoubi","year":"2026","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0024","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2025.101631","article-title":"Evaluating and enhancing intrusion detection systems in ioMT: the importance of domain-specific datasets","volume":"32","author":"Dom\u00e9nech","year":"2025","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_sbref0025","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2023.100887","article-title":"Artificial intelligence for ioMT security: a review of intrusion detection systems, attacks, datasets and cloud\u2013Fog\u2013Edge architectures","volume":"23","author":"Hernandez-Jaimes","year":"2023","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0026","series-title":"2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications","first-page":"1","article-title":"A detailed analysis of the KDD CUP 99 data set","author":"Tavallaee","year":"2009"},{"key":"10.1016\/j.iot.2026.101939_bib0027","series-title":"Performance analysis of NSL-KDD dataset using ANN","first-page":"92","author":"Ingre","year":"2015"},{"key":"10.1016\/j.iot.2026.101939_bib0028","series-title":"2015 Military Communications and Information Systems Conference (MilCIS)","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"key":"10.1016\/j.iot.2026.101939_bib0029","unstructured":"R. Panigrahi, CICIDS2017, 2025. 10.21227\/akxq-9v09."},{"issue":"3","key":"10.1016\/j.iot.2026.101939_bib0030","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/MPRV.2018.03367731","article-title":"N-BaIot-network-Based detection of IoT botnet attacks using deep autoencoders","volume":"17","author":"Meidan","year":"2018","journal-title":"IEEE Pervasive Comput."},{"key":"10.1016\/j.iot.2026.101939_bib0031","doi-asserted-by":"crossref","unstructured":"N. Koroniotis, N. Moustafa, E. Sitnikova, B. Turnbull, Towards the Development of Realistic Botnet Dataset in the Internet of Things for Network Forensic Analytics: Bot-IoT Dataset, 2018. 10.48550\/arXiv.1811.00701.","DOI":"10.1016\/j.future.2019.05.041"},{"key":"10.1016\/j.iot.2026.101939_bib0032","unstructured":"N. Moustafa, ToN_IoT datasets, 2019. 10.21227\/fesz-dm97."},{"key":"10.1016\/j.iot.2026.101939_bib0033","series-title":"MedBIoT: generation of an IoT botnet dataset in a medium-sized IoT network","author":"Guerra-Manzanares","year":"2020"},{"key":"10.1016\/j.iot.2026.101939_bib0034","unstructured":"S. Garcia, A. Parmisano, M.J. Erquiaga, IoT-23: A labeled dataset with malicious and benign IoT network traffic, 2020. 10.5281\/zenodo.4743746."},{"key":"10.1016\/j.iot.2026.101939_bib0035","doi-asserted-by":"crossref","unstructured":"M.A. Ferrag, O. Friha, D. Hamouda, L. Maglaras, H. Janicke, Edge-IIoTset: A New Comprehensive Realistic Cyber Security Dataset of IoT and IIoT Applications: Centralized and Federated Learning, 2022. 10.21227\/mbc1-1h68.","DOI":"10.36227\/techrxiv.18857336.v1"},{"issue":"13","key":"10.1016\/j.iot.2026.101939_bib0036","doi-asserted-by":"crossref","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: A real-Time dataset and benchmark for large-Scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"issue":"22","key":"10.1016\/j.iot.2026.101939_bib0037","doi-asserted-by":"crossref","DOI":"10.3390\/s20226578","article-title":"MQTTset, A new dataset for machine learning techniques on MQTT","volume":"20","author":"Vaccari","year":"2020","journal-title":"Sensors"},{"issue":"9","key":"10.1016\/j.iot.2026.101939_bib0038","doi-asserted-by":"crossref","DOI":"10.3390\/s21093025","article-title":"A framework for malicious traffic detection in IoT healthcare environment","volume":"21","author":"Hussain","year":"2021","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101939_bib0039","series-title":"Selected Papers from the 12Th International Networking Conference","first-page":"73","article-title":"Machine learning based IoT intrusion detection system: an MQTT case study (MQTT-IoT-IDS2020 dataset)","author":"Hindy","year":"2021"},{"key":"10.1016\/j.iot.2026.101939_bib0040","doi-asserted-by":"crossref","unstructured":"M. Al-Hawawreh, E. Sitnikova, N. Aboutorab, X-IIoTID: A Connectivity- and Device-agnostic Intrusion Dataset for Industrial Internet of Things, 2021. 10.21227\/mpb6-py55.","DOI":"10.1109\/JIOT.2021.3102056"},{"key":"10.1016\/j.iot.2026.101939_bib0041","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2023.109809","article-title":"DoS\/DDoS-MQTT-IoT: a dataset for evaluating intrusions in IoT networks using the MQTT protocol","volume":"231","author":"Alatram","year":"2023","journal-title":"Comput. Networks"},{"key":"10.1016\/j.iot.2026.101939_bib0042","doi-asserted-by":"crossref","unstructured":"S. Dadkhah, E. Neto, R. Ferreira, R. Molokwu, S. Sadeghi, A. Ghorbani, CICIoMT2024: Attack Vectors in Healthcare devices-A Multi-Protocol Dataset for Assessing IoMT Device Security, 2024. 10.20944\/preprints202402.0898.v1.","DOI":"10.2139\/ssrn.4725150"},{"issue":"7","key":"10.1016\/j.iot.2026.101939_bib0043","doi-asserted-by":"crossref","first-page":"8453","DOI":"10.1109\/JIOT.2024.3501017","article-title":"IoTForge pro: a security testbed for generating intrusion dataset for industrial IoT","volume":"12","author":"Kumar","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101939_bib0044","doi-asserted-by":"crossref","first-page":"166068","DOI":"10.1109\/ACCESS.2024.3494052","article-title":"MU-IoT: a new IoT intrusion dataset for network and application layer attacks analysis","volume":"12","author":"Clinton","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101939_bib0045","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2025.101761","article-title":"Role of artificial intelligence in health monitoring using IoT based wearable sensors: a survey","volume":"34","author":"Shaw","year":"2025","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0046","unstructured":"Eclipse Mosquitto, Eclipse Mosquitto - An open source MQTT broker, n.d., (https:\/\/mosquitto.org\/). Accessed: Jul. 07, 2025."},{"key":"10.1016\/j.iot.2026.101939_bib0047","series-title":"2019 IEEE World Congress on Services (SERVICES)","first-page":"47","article-title":"MQTTSA: A tool for automatically assisting the secure deployments of MQTT brokers","volume":"2642-939X","author":"Palmieri","year":"2019"},{"key":"10.1016\/j.iot.2026.101939_bib0048","unstructured":"W.J. Burns, Common Password List (rockyou.txt), 2025, (https:\/\/www.kaggle.com\/datasets\/wjburns\/common-password-list-rockyoutxt). Accessed: Jul. 16, 2025."},{"issue":"10","key":"10.1016\/j.iot.2026.101939_bib0049","doi-asserted-by":"crossref","DOI":"10.3390\/s20102932","article-title":"SlowITe, a novel denial of service attack affecting MQTT","volume":"20","author":"Vaccari","year":"2020","journal-title":"Sensors"},{"issue":"4","key":"10.1016\/j.iot.2026.101939_bib0050","first-page":"482","article-title":"Denial of service attack detection through machine learning for the IoT","volume":"4","author":"Naeem Firdous Syed","year":"2020","journal-title":"J. Inf. Telecomm."},{"key":"10.1016\/j.iot.2026.101939_bib0051","unstructured":"Wireshark Foundation, Chapter 2: Building and Installing Wireshark, 2025, (https:\/\/www.wireshark.org\/docs\/wsug_html_chunked\/ChapterBuildInstall.html). Accessed: Jul. 24, 2025."},{"key":"10.1016\/j.iot.2026.101939_bib0052","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101367","article-title":"Empirical evaluation of feature selection methods for machine learning based intrusion detection in IoT scenarios","volume":"28","author":"Garc\u00eda","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101939_bib0053","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2020.106097","article-title":"Ensemble feature selection in high dimension, low sample size datasets: parallel and serial combination approaches","volume":"203","author":"Tsai","year":"2020","journal-title":"Knowl. Based Syst."},{"issue":"4","key":"10.1016\/j.iot.2026.101939_bib0054","doi-asserted-by":"crossref","DOI":"10.3390\/molecules26041111","article-title":"Effect of dataset size and train\/test split ratios in QSAR\/QSPR multiclass classification","volume":"26","author":"R\u00e1cz","year":"2021","journal-title":"Molecules"},{"key":"10.1016\/j.iot.2026.101939_bib0055","unstructured":"scikit-learn developers, GridSearchCV, n.d., (https:\/\/scikit-learn.org\/stable\/modules\/generated\/sklearn.model_selection.GridSearchCV.html). Accessed: Jul. 24, 2025."},{"key":"10.1016\/j.iot.2026.101939_bib0056","unstructured":"Keras, KerasTuner RandomSearch Class, n.d., (https:\/\/keras.io\/keras_tuner\/api\/tuners\/random\/). Accessed: Jul. 24, 2025."},{"issue":"null","key":"10.1016\/j.iot.2026.101939_bib0057","first-page":"281","article-title":"Random search for hyper-parameter optimization","volume":"13","author":"Bergstra","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"10.1016\/j.iot.2026.101939_bib0058","unstructured":"M. Grandini, E. Bagli, G. Visani, Metrics for Multi-Class Classification: an Overview, 2020. url: https:\/\/arxiv.org\/abs\/2008.05756. 2008.05756."}],"container-title":["Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000697?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000697?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T08:33:50Z","timestamp":1780043630000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2542660526000697"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":58,"alternative-id":["S2542660526000697"],"URL":"https:\/\/doi.org\/10.1016\/j.iot.2026.101939","relation":{},"ISSN":["2542-6605"],"issn-type":[{"value":"2542-6605","type":"print"}],"subject":[],"published":{"date-parts":[[2026,5]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"MQTT Spectrum: A comprehensive and version-agnostic dataset for intrusion detection in MQTT-based IoMT deployments","name":"articletitle","label":"Article Title"},{"value":"Internet of Things","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.iot.2026.101939","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"101939"}}