Cited by 29Network Security and Intrusion DetectionNetwork Packet Processing and OptimizationSmart Grid Security and Resilience

A hypergraph based Kohonen map for detecting intrusions over cyber–physical systems traffic

Jagtap, Sujeet S., V. S., Shankar Sriram, V., Subramaniyaswamy·2021·Future Generation Computer Systems

Integrity signals

Registry

Crossref · 10.1016/j.future.2021.02.001

Cites

100 of 100 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • By representing hosts, flows, services, and even events as nodes and edges, graph-based methods are particularly suitable for detecting DDoS, reconnaissance, injection, and other multi-stage intrusions that manifest as abnormal communication patterns, rare paths, or sudden expansions in connectivity rather than only local feature changes.

    “First, by representing hosts, flows, services, and even events as nodes and edges, these methods are particularly suitable for detecting DDoS, reconnaissance, injection, and other multi-stage intrusions that manifest as abnormal communication patterns, rare paths, or sudden expansions in connectivity rather than only local feature changes [51,54,55].”
  • When properly engineered, graph-based detectors can be distributed across cloud-edge architectures or parallelized to support near-real-time operation in large industrial networks.

    “when properly engineered, graph-based detectors can be distributed across cloud-edge architectures or parallelized to support near-real-time operation in large industrial networks [51,55,59].”
  • Constructing and maintaining communication graphs from live ICS/CPS traffic requires careful aggregation of flow logs, selection of node/edge types, and windowing, which introduce additional design choices and computational overhead at scale.

    “Constructing and maintaining communication graphs from live ICS/CPS traffic requires careful aggregation of flow logs, selection of node/edge types, and windowing, which introduce additional design choices and computational overhead at scale [51,54,55].”
  • Graph-based models such as APPNP GCNs, heterogeneous GNN autoencoders, and hypergraph Kohonen maps can capture non-Euclidean correlations and higher-order neighborhood structures that are difficult to express with flat feature vectors.

    “Graph-based models such as APPNP GCNs, heterogeneous GNN autoencoders, and hypergraph Kohonen maps can capture non-Euclidean correlations and higher-order neighborhood structures that are difficult to express with flat feature vectors [51,54,55].”
  • BLOSOM uses Bloom filters to store signatures of normal packet payloads to filter first-stage anomalies, enhanced PCA for noise/irrelevant-feature removal, and clustering in a parallel Kohonen map using neighbors selected through hypergraph vertex partitioning, with label supervision and class-imbalance corrections to detect NMRI/CMRI attacks, command/response injections, reconnaissance, and other

    “First, Bloom filters store signatures of normal packet payloads to efficiently filter first-stage anomalies. Traffic that passes this stage undergoes noise/irrelevant-feature removal via enhanced PCA (ePCA), followed by clustering in a parallel Kohonen map (p-Kohonen) using neighbors selected through hypergraph vertex partitioning. The final BLOSOM model incorporates label supervision and class-im”

Cites

Flagged first, then by citations

4 of the 104 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Jagtap, S. S., V. S., S. S., & V., S.
Affiliations
SASTRA University (IN)
Venue
Future Generation Computer Systems
Publisher
Elsevier BV
Published
2021-06
Volume
119
Pages
84-109
ISSN
0167-739X (ISSN-L)
OpenAlex
W3127660228
Cited by
29
References
104
Citations by year
2025: 5 · 2024: 3 · 2023: 5 · 2022: 11 · 2021: 5
FWCI
2.69
Type
journal article
Language
en
Open access
closed
Locations
Future Generation Computer Systems (publishedVersion)
Funders
Ministry of Electronics and Information Technology
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
  • Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
Keywords
intrusion detection, cyber-physical systems, hypergraphs, Kohonen neural network, process control networks, anomaly detection, zero-day attacks, Bloom filter, principal component analysis, critical infrastructure security

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review