DOI: 10.5281/zenodo.18635643
title: Hydrogen CPS Digital-Twin IDS Dataset

description: This dataset contains multivariate time-series measurements representing a hydrogen logistics cyber–physical system that integrates cryogenic storage/transfer operations, SCADA/PLC control, IIoT sensing, fleet logistics telemetry, and cybersecurity network indicators. It is designed to support research on joint cyber intrusion detection and physical safety monitoring under a digital-twin–enabled operating setting, where simulated twin states and real process states may diverge during abnormal events.

Each row corresponds to one timestamped observation from a sensor/terminal/tanker context. The dataset includes (i) raw operational signals (pressure, temperatures, flow, vibration), (ii) control and authentication signals from industrial automation, (iii) network/security behavior indicators, (iv) digital-twin synchronization variables, and (v) engineered cross-domain risk indices. The dataset supports both multi-class intrusion classification and continuous leakage severity estimation.

File format: CSVTime axis: fixed-interval sampling (see Sampling_Interval)Key identifiers for grouping studies: Terminal_ID (site/client), Tanker_ID (asset), Sensor_Node_ID (device)

Targets (labels)





Intrusion_Class (multi-class; imbalanced)







0 Normal




1 SCADA valve spoofing




2 Sensor malware




3 PLC firmware intrusion




4 Fleet route hijacking




5 Digital twin tampering







Leakage_Rate (regression; kg/hr)Continuous leakage severity signal reflecting cryogenic losses and safety-critical anomalies.



Feature description (by category)

A) Indexing and entities





Timestamp: observation time




Terminal_ID: terminal/site identifier (useful as a federated “client”)




Tanker_ID: tanker/vehicle identifier




Sensor_Node_ID: IIoT sensor node identifier



B) Cryogenic tank telemetry (process physics)





LH2_Temperature (°C): liquid hydrogen temperature




Vapor_Temperature (°C): vapor phase temperature




Tank_Pressure (bar): tank pressure reading




Pressure_Rise_Rate (bar/min): pressure change rate indicator




Boil_Off_Rate (%/hr): boil-off proxy




Liquid_Level (%): cryogenic tank fill level




Heat_Ingress (proxy units): thermal ingress driver




Wall_Stress (MPa): structural stress proxy linked to pressure/vibration




Relief_Valve_Status (0/1): relief valve activation indicator




Cryo_Pump_Status (0/1): cryogenic pump operational state



C) Pipeline and terminal infrastructure (flow dynamics)





Pipeline_Pressure (bar): pipeline pressure




Flow_Rate (kg/s): hydrogen flow rate




Compressor_Load (%): compressor utilization




Transfer_Line_Temperature (°C): transfer line temperature




Joint_Leakage_Index (%): leakage propensity indicator at joints




Flow_Turbulence_Score (score): turbulence/instability indicator




Terminal_Throughput (throughput units): terminal processing intensity




Pump_Vibration_Level (vibration units): mechanical vibration proxy



D) IIoT device telemetry (edge/network health)





Sensor_Battery_Level (%): device battery estimate




Signal_Strength_RSSI (dBm): radio signal strength




Packet_Loss_Rate (%): packet loss indicator




Sampling_Interval (minutes): configured sampling rate




Edge_Buffer_Load (%): edge buffer utilization




Sensor_Calibration_Error (score): calibration drift indicator




Device_Tamper_Flag (0/1): device tamper indicator



E) SCADA/PLC control and security (automation layer)





Valve_Command (categorical): 0 Hold, 1 Open, 2 Close, 3 Partial




Command_Source (categorical): 0 Auto, 1 Operator, 2 Remote API




Execution_Latency (ms): command execution latency




PLC_CPU_Load (%): PLC utilization




Firmware_Integrity (0/1): firmware status (1 OK, 0 compromised)




Override_Command (0/1): manual override indicator




Shutdown_Trigger (0/1): shutdown event indicator




Authentication_Status (0/1): authentication verified vs suspicious/failed



F) Fleet and logistics telemetry (transport risk)





Tanker_GPS_Latitude, Tanker_GPS_Longitude: asset position




Route_Deviation_Index (%): route anomaly indicator




Transit_Time (hours): travel time estimate




Loading_Delay (minutes): loading delay




Fleet_Density (count): vehicles in operating region




Boil_Off_Transit_Loss (fraction): transit boil-off loss proxy




Vibration_Exposure (units): vibration exposure during transit



G) Cybersecurity network behavior (IDS signals)





Login_Attempts (count)




Failed_Logins (count)




Access_Time_Anomaly (0/1): abnormal access timing




IP_Entropy (score): IP distribution entropy




Packet_Size_Variance (bytes² proxy): traffic variability




Malware_Flag (0/1)




Privilege_Escalation (0/1)




Network_Latency_Spike (score): latency anomaly magnitude



H) Digital-twin synchronization (twin vs real consistency)





Twin_Pressure, Real_Pressure




Twin_Temperature, Real_Temperature




Twin_Real_Deviation: aggregated deviation between twin and real




State_Error_Index: bounded twin-state inconsistency measure




Simulated_Valve_Response, Observed_Valve_Response: actuation mismatch signals




Twin_Integrity_Score (0–1): estimated twin trust/integrity



I) Engineered cross-domain risk features (for learning robustness)





Cryo_Instability_Index: cryogenic instability score




Leak_Risk_Score: leakage risk composite




Cyber_Physical_Risk: fused cyber + physical risk score




Valve_Spoofing_Confidence: spoofing likelihood proxy




Twin_Tamper_Score: twin tamper likelihood proxy




Routing_Risk_Index: transport-side risk composite