Accurate modeling of modbus/TCP for intrusion detection in SCADA systems

Snort - Lightweight Intrusion Detection for Networks

Roesch, M. (1999) · Cited by 3,094 · see citing works

Security problems in the TCP/IP protocol suite

Bellovin, S. (1989) · ACM SIGCOMM Computer Communication Review · doi:10.1145/378444.378449 · Cited by 551 · see citing works

Using Model-based Intrusion Detection for SCADA Networks

Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321 · see citing works

On SCADA control system command and response injection and intrusion detection

Gao, W., Morris, T. H., Reaves, B., & Richey, D. (2010) · eCrime Researchers Summit (eCrime) · doi:10.1109/ecrime.2010.5706699 · Cited by 187 · see citing works

Stuxnet, the real start of cyber warfare? [Editor's Note]

Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5634434 · Cited by 168 · see citing works

A testbed for analyzing security of SCADA control systems (TASSCS)

Mallouhi, M., Al-Nashif, Y., Cox, D., Chadaga, T., & Hariri, S. (2011) · ISGT 2011 · doi:10.1109/isgt.2011.5759169 · Cited by 164 · see citing works

Modbus/DNP3 State-Based Intrusion Detection System

Fovino, I. N., Carcano, A., Murel, T. D. L., Trombetta, A., & Masera, M. (2010) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2010.86 · Cited by 153 · see citing works

Smart grids, smart cities need better networks [Editor's Note

Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5430136 · Cited by 138 · see citing works

Multi-Agent Intrusion Detection System in Industrial Network using Ant Colony Clustering Approach and Unsupervised Feature Extraction

Tsang, C.-H., & Kwong, S. (2006) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit.2005.1600609 · Cited by 107 · see citing works

Communication pattern anomaly detection in process control systems

Valdes, A., & Cheung, S. (2009) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2009.5168010 · Cited by 106 · see citing works

A testbed for secure and robust SCADA systems

Giani, A., Karsai, G., Roosta, T., Shah, A., Sinopoli, B., & Wiley, J. (2008) · ACM SIGBED Review · doi:10.1145/1399583.1399587 · Cited by 94 · see citing works

A cyber-physical experimentation environment for the security analysis of networked industrial control systems

Genge, B., Siaterlis, C., Nai Fovino, I., & Masera, M. (2012) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2012.06.015 · Cited by 82 · see citing works

A Simulation Environment for SCADA Security Analysis and Assessment

Wang, C., Fang, L., & Dai, Y. (2010) · International Conference on Measuring Technology and Mechatronics Automation (ICMTMA) · doi:10.1109/icmtma.2010.603 · Cited by 79 · see citing works

Development of the PowerCyber SCADA security testbed

Hahn, A., Kregel, B., Govindarasu, M., Fitzpatrick, J. M., Adnan, R., Sridhar, S., & Higdon, M. (2010) · Cyber Security and Information Intelligence Research Workshop · doi:10.1145/1852666.1852690 · Cited by 66 · see citing works

Detection, correlation, and visualization of attacks against critical infrastructure systems

Briesemeister, L., Cheung, S., Lindqvist, U., & Valdes, A. (2010) · Conference on Privacy, Security and Trust · doi:10.1109/pst.2010.5593242 · Cited by 44 · see citing works

Intrusion Monitoring in Process Control Systems

Valdes, A., & Cheung, S. (2009) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2009.273 · Cited by 39 · see citing works

Configurable Middleware-Level Intrusion Detection for Embedded Systems

Næss, E., Frincke, D. A., McKinnon, A. D., & Bakken, D. E. (2005) · IEEE International Conference on Distributed Computing Systems Workshops (ICDCSW) · doi:10.1109/icdcsw.2005.52 · Cited by 18 · see citing works

Development of test-bed and security devices for SCADA communication in electric power system

Kang, D.-J., & Kim, H. (2009) · International Telecommunications Energy Conference (INTELEC) · doi:10.1109/intlec.2009.5351774 · Cited by 10 · see citing works

In-vehicle network intrusion detection using deep convolutional neural network

Song, H. M., Woo, J., & Kim, H. K. (2019) · Vehicular Communications · doi:10.1016/j.vehcom.2019.100198 · Cited by 595 · see citing works

Challenges and Opportunities in Securing the Industrial Internet of Things

Serror, M., Hack, S., Henze, M., Schuba, M., & Wehrle, K. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.3023507 · Cited by 381 · see citing works

A survey of cyber security management in industrial control systems

Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344 · see citing works

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Pliatsios, D., Sarigiannidis, P., Lagkas, T., & Sarigiannidis, A. G. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.2987688 · Cited by 320 · see citing works

Architecture and security of SCADA systems: A review

Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261 · see citing works

Securing the Smart Grid: A Comprehensive Compilation of Intrusion Detection and Prevention Systems

Grammatikis, P. I. R., & Sarigiannidis, P. G. (2019) · IEEE Access · doi:10.1109/access.2019.2909807 · Cited by 229 · see citing works

An Ensemble of Deep Recurrent Neural Networks for Detecting IoT Cyber Attacks Using Network Traffic

Saharkhizan, M., Azmoodeh, A., Dehghantanha, A., Choo, K. R., & Parizi, R. M. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.2996425 · Cited by 210 · see citing works

Sequence-aware Intrusion Detection in Industrial Control Systems

Caselli, M., Zambon, E., & Kargl, F. (2015) · ACM Workshop on Cyber-Physical System Security (CPSS) · doi:10.1145/2732198.2732200 · Cited by 169 · see citing works

Design and Analysis of Multimodel-Based Anomaly Intrusion Detection Systems in Industrial Process Automation

Zhou, C., Huang, S., Xiong, N. N., Yang, S., Li, H., Qin, Y., & Li, X. (2015) · IEEE Transactions on Systems Man and Cybernetics Systems · doi:10.1109/tsmc.2015.2415763 · Cited by 168 · see citing works

Industrial Control System Network Intrusion Detection by Telemetry Analysis

Ponomarev, S., & Atkison, T. (2015) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2015.2443793 · Cited by 147 · see citing works

A Systematic Framework to Generate Invariants for Anomaly Detection in Industrial Control Systems

Feng, C., Palleti, V. R., Mathur, A. P., & Chana, D. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23265 · Cited by 129 · see citing works

Current cyber-defense trends in industrial control systems

Rubio, J. E., Alcaraz, C., Roman, R., & Lopez, J. (2019) · Computers & Security · doi:10.1016/j.cose.2019.06.015 · Cited by 113 · see citing works

Cyber security for fog-based smart grid SCADA systems: Solutions and challenges

Ferrag, M. A., Babaghayou, M., & Yazıcı, M. A. (2020) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2020.102500 · Cited by 109 · see citing works

Anomaly Detection for Industrial Control System Based on Autoencoder Neural Network

Wang, C., Wang, B., Liu, H., & Qu, H. (2020) · Wireless Communications and Mobile Computing · doi:10.1155/2020/8897926 · Cited by 99 · see citing works

Network intrusion detection system for DDoS attacks in ICS using deep autoencoders

Ortega-Fernandez, I., Sestelo, M., Burguillo, J. C., & Piñón-Blanco, C. (2023) · Wireless Networks · doi:10.1007/s11276-022-03214-3 · Cited by 104 · see citing works

An enhanced optimization based algorithm for intrusion detection in SCADA network

Selvarajan, S., & David, P. W. (2017) · Computers & Security · doi:10.1016/j.cose.2017.04.012 · Cited by 95 · see citing works

A fog computing based approach to DDoS mitigation in IIoT systems

Zhou, L., Guo, H., & Deng, G. (2019) · Computers & Security · doi:10.1016/j.cose.2019.04.017 · Cited by 95 · see citing works

On Ladder Logic Bombs in Industrial Control Systems

Govil, N., Agrawal, A., & Tippenhauer, N. O. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-72817-9_8 · Cited by 90 · see citing works

Analysis of cyber security for industrial control systems

Drias, Z., Serhrouchni, A., & Vogel, O. (2015) · International Conference on Security of Smart Cities, Industrial Control System and Communications (SSIC) · doi:10.1109/ssic.2015.7245330 · Cited by 89 · see citing works

Control variable classification, modeling and anomaly detection in Modbus/TCP SCADA systems

Erez, N., & Wool, A. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.05.001 · Cited by 87 · see citing works

Intrusion Detection and Prevention for ZigBee-Based Home Area Networks in Smart Grids

Jokar, P., & Leung, V. C. M. (2016) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2016.2600585 · Cited by 86 · see citing works

Cyber-attack detection in SCADA systems using temporal pattern recognition techniques

Kalech, M. (2019) · Computers & Security · doi:10.1016/j.cose.2019.03.007 · Cited by 82 · see citing works

Internet-scale Probing of CPS: Inference, Characterization and Orchestration Analysis

Fachkha, C., Bou‐Harb, E., Keliris, A., Memon, N. D., & Ahamad, M. (2017) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2017.23149 · Cited by 81 · see citing works

Industrial control systems security: What is happening?

Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622964 · Cited by 74 · see citing works

False sequential logic attack on SCADA system and its physical impact analysis

Li, W., Xie, L., Deng, Z., & Wang, Z. (2016) · Computers & Security · doi:10.1016/j.cose.2016.01.001 · Cited by 71 · see citing works

Autoencoder via DCNN and LSTM Models for Intrusion Detection in Industrial Control Systems of Critical Infrastructures

Saheed, Y. K., Misra, S., & Chockalingam, S. (2023) · IEEE/ACM International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) · doi:10.1109/encycris59249.2023.00006 · Cited by 74 · see citing works

Accurate Modeling of the Siemens S7 SCADA Protocol for Intrusion Detection and Digital Forensics

Kleinmann, A., & Wool, A. (2014) · The journal of digital forensics, security and law · doi:10.15394/jdfsl.2014.1169 · Cited by 69 · see citing works

Cyber attack and defense on industry control systems

Lin, C.-T., Wu, S., & Lee, M.-L. (2017) · IEEE Conference on Dependable and Secure Computing (DSC) · doi:10.1109/desec.2017.8073874 · Cited by 68 · see citing works

Anomaly Detection in Real-Time Multi-Threaded Processes Using Hardware Performance Counters

Krishnamurthy, P., Karri, R., & Khorrami, F. (2019) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2019.2923577 · Cited by 68 · see citing works

A Large-Scale Empirical Study on the Vulnerability of Deployed IoT Devices

Zhao, B., Ji, S., Lee, W., Lin, C., Weng, H., Wu, J., Zhou, P., Fang, L., & Beyah, R. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3037908 · Cited by 64 · see citing works

A method for evaluating the consequence propagation of security attacks in cyber–physical systems

Orojloo, H., & Azgomi, M. A. (2016) · Future Generation Computer Systems · doi:10.1016/j.future.2016.07.016 · Cited by 64 · see citing works

Double Behavior Characteristics for One-Class Classification Anomaly Detection in Networked Control Systems

Wan, M., Shang, W., & Zeng, P. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2730581 · Cited by 59 · see citing works

Denial of Service Attacks: Detecting the Frailties of Machine Learning Algorithms in the Classification Process

Frazão, I., Abreu, P. H., Cruz, T., Araújo, H. J., & Simões, P. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-05849-4_19 · Cited by 59 · see citing works

Cyber–physical vulnerability and resiliency analysis for DER integration: A review, challenges and research needs

Vosughi, A., Tamimi, A., King, A. B., Majumder, S., & Srivastava, A. K. (2022) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2022.112794 · Cited by 58 · see citing works

SCADAWall: A CPI-enabled firewall model for SCADA security

Li, D., Guo, H., Zhou, J., Zhou, L., & Wong, J. W. (2018) · Computers & Security · doi:10.1016/j.cose.2018.10.002 · Cited by 53 · see citing works

A cyber-physical model for SCADA system and its intrusion detection

Sheng, C., Yao, Y. K., Fu, Q., & Yang, W. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107677 · Cited by 53 · see citing works

Deep autoencoders as anomaly detectors: Method and case study in a distributed water treatment plant

Raman, M. R. G., Dong, W., & Mathur, A. P. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102055 · Cited by 52 · see citing works

An Evaluation of Machine Learning-based Anomaly Detection in a SCADA System Using the Modbus Protocol

Phillips, B., Gamess, E., & Krishnaprasad, S. (2020) · ACM Southeast Regional Conference (ACMSE) · doi:10.1145/3374135.3385282 · Cited by 49 · see citing works

Implementation and Detection of Modbus Cyberattacks

Grammatikis, P. I. R., Siniosoglou, I., Liatifis, A., Kourouniadis, A., Rompolos, K., & Sarigiannidis, P. G. (2020) · International Conference on Modern Circuits and Systems Technologies · doi:10.1109/mocast49295.2020.9200287 · Cited by 48 · see citing works

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network

Lai, Y., Zhang, J., & Liu, Z. (2019) · Security and Communication Networks · doi:10.1155/2019/8124254 · Cited by 46 · see citing works

IDS Detection Based on Optimization Based on WI-CS and GNN Algorithm in SCADA Network

Selvarajan, S., Satheesh, N., Kumar, B. P., & Sangeetha, K. (2021) · Lecture notes in networks and systems · doi:10.1007/978-981-16-0386-0_14 · Cited by 45 · see citing works

Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow

Alsabbagh, W., & Langendörfer, P. (2023) · IEEE Open Journal of the Industrial Electronics Society · doi:10.1109/ojies.2023.3335976 · Cited by 45 · see citing works

Exploiting traffic periodicity in industrial control networks

Barbosa, R. R. R., Sadre, R., & Pras, A. (2016) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2016.02.004 · Cited by 44 · see citing works

A Survey on Programmable Logic Controller Vulnerabilities, Attacks, Detections, and Forensics

Wang, Z., Zhang, Y., Chen, Y., Liu, H., Wang, B., & Wang, C. (2023) · Processes · doi:10.3390/pr11030918 · Cited by 42 · see citing works

Formal security assessment of Modbus protocol

Nardone, R., Rodríguez, R. J., & Marrone, S. (2016) · International Conference for Internet Technology and Secured Transactions · doi:10.1109/icitst.2016.7856685 · Cited by 41 · see citing works

Understanding IEC-60870-5-104 Traffic Patterns in SCADA Networks

Lin, C., & Nadjm‐Tehrani, S. (2018) · ACM Workshop on Cyber-Physical System Security (CPSS) · doi:10.1145/3198458.3198460 · Cited by 41 · see citing works

Stealthy Deception Attacks Against SCADA Systems

Kleinmann, A., Amichay, O., Wool, A., Tenenbaum, D., Bar, O., & Lev, L. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-72817-9_7 · Cited by 40 · see citing works

Cybersecurity protection for power grid control infrastructures

Jarmakiewicz, J., Parobczak, K., & Maślanka, K. (2017) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2017.07.002 · Cited by 39 · see citing works

Timing-Based Anomaly Detection in SCADA Networks

Lin, C., Nadjm‐Tehrani, S., & Asplund, M. (2018) · Lecture notes in computer science · doi:10.1007/978-3-319-99843-5_5 · Cited by 39 · see citing works

Time is of the Essence: Machine Learning-Based Intrusion Detection in Industrial Time Series Data

Antón, S. D. D., Ahrens, L., Fraunholz, D., & Schotten, H. D. (2018) · IEEE ... International Conference on Data Mining workshops · doi:10.1109/icdmw.2018.00008 · Cited by 38 · see citing works

IPAL: Breaking up Silos of Protocol-dependent and Domain-specific Industrial Intrusion Detection Systems

Wolsing, K., Wagner, E., Saillard, A., & Henze, M. (2022) · International Symposium on Research in Attacks, Intrusions and Defenses (RAID) · doi:10.1145/3545948.3545968 · Cited by 38 · see citing works

Experimental assessment of network design approaches for protecting industrial control systems

Genge, B., Graur, F., & Haller, P. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.07.005 · Cited by 36 · see citing works

A mechanistic fault detection and isolation approach using Kalman filter to improve the security of cyber physical systems

Palleti, V. R., Tan, Y. C., & Lakshminarayanan, S. (2018) · Journal of Process Control · doi:10.1016/j.jprocont.2018.05.005 · Cited by 36 · see citing works

Detecting PLC control corruption via on-device runtime verification

García, L. A. R., Zonouz, S., Wei, D., & de Aguiar, L. P. (2016) · Resilience Week (RWS) · doi:10.1109/rweek.2016.7573309 · Cited by 35 · see citing works

Smart Grid Security : Innovative Solutions for a Modernized Grid

Skopik, F. (2015) · Cited by 35 · see citing works

Methodology to Determine the Device-Level Periodicity for Anomaly Detection in EtherCAT-Based Industrial Control Network

Akpinar, K. O., & Özçeli̇k, İ. (2020) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2020.3037050 · Cited by 35 · see citing works

Industrial control systems security: What is happening?

Krotofil, M., & Gollmann, D. (2013) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin.2013.6622963 · Cited by 35 · see citing works

Anomaly detection in SCADA systems : a network based approach

Barbosa, R. R. R. (2014) · doi:10.3990/1.9789036536455 · Cited by 35 · see citing works

A Brief Survey of Security Approaches for Cyber-Physical Systems

Bou‐Harb, E. (2016) · IFIP International Conference on New Technologies, Mobility and Security (NTMS) · doi:10.1109/ntms.2016.7792424 · Cited by 33 · see citing works

DiPot: A Distributed Industrial Honeypot System

Cao, J., Li, W., Li, J., & Li, B. (2018) · Lecture notes in computer science · doi:10.1007/978-3-319-73830-7_30 · Cited by 31 · see citing works

Modeling Modbus TCP for intrusion detection

Faisal, M. A., Cárdenas, Á. A., & Wool, A. (2016) · IEEE Conference on Communications and Network Security · doi:10.1109/cns.2016.7860524 · Cited by 30 · see citing works

Automatic Construction of Statechart-Based Anomaly Detection Models for Multi-Threaded Industrial Control Systems

Kleinmann, A., & Wool, A. (2017) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3011018 · Cited by 30 · see citing works

Advanced Persistent Threats and Their Defense Methods in Industrial Internet of Things: A Survey

Gan, C., Lin, J., Huang, D.-W., Zhu, Q., & Tian, L. (2023) · Mathematics · doi:10.3390/math11143115 · Cited by 34 · see citing works

EDMAND: Edge-Based Multi-Level Anomaly Detection for SCADA Networks

Ren, W., Yardley, T. M., & Nahrstedt, K. (2018) · IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) · doi:10.1109/smartgridcomm.2018.8587533 · Cited by 29 · see citing works

Industrial network-based behavioral anomaly detection in AI-enabled smart manufacturing

Kim, H., & Shon, T. (2022) · The Journal of Supercomputing · doi:10.1007/s11227-022-04408-4 · Cited by 29 · see citing works

Implementing Man-in-the-Middle Attack to Investigate Network Vulnerabilities in Smart Grid Test-bed

Banik, S., Banik, T., Hossain, S. M. M., & Saha, S. K. (2023) · IEEE World AI IoT Congress (AIIoT) · doi:10.1109/aiiot58121.2023.10174478 · Cited by 29 · see citing works

SIDS: State-based intrusion detection for stage-based cyber physical systems

Khalili, A., Sami, A., Khozaei, A., & Pouresmaeeli, S. (2018) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2018.06.003 · Cited by 28 · see citing works

Security enhancement for software defined network using game theoretical approach

Anithaashri, T. P., Ravichandran, G., & Baskaran, R. (2019) · Computer Networks · doi:10.1016/j.comnet.2019.04.014 · Cited by 27 · see citing works

PLC Guard: A practical defense against attacks on cyber-physical systems

Malchow, J.-O., Marzin, D., Klick, J., Kovács, R., & Roth, V. (2015) · IEEE Conference on Communications and Network Security · doi:10.1109/cns.2015.7346843 · Cited by 27 · see citing works

Automatic Construction of Statechart-Based Anomaly Detection Models for Multi-Threaded SCADA via Spectral Analysis

Kleinmann, A., & Wool, A. (2016) · doi:10.1145/2994487.2994490 · Cited by 27 · see citing works

A New Burst-DFA model for SCADA Anomaly Detection

Markman, C., Wool, A., & Cárdenas, Á. A. (2017) · Workshop on Cyber-Physical Systems Security and PrivaCy (CPS-SPC) · doi:10.1145/3140241.3140245 · Cited by 27 · see citing works

A SCADA Intrusion Detection Framework that Incorporates Process Semantics

Nivethan, J., & Papa, M. (2016) · Annual Cyber and Information Security Research Conference (CISRC) · doi:10.1145/2897795.2897814 · Cited by 26 · see citing works

Detecting Semantic Attack in SCADA System: A Behavioral Model Based on Secondary Labeling of States-Duration Evolution Graph

Xu, L., Wang, B., Wu, X., Zhao, D., Zhang, L., & Wang, Z. (2021) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2021.3130602 · Cited by 26 · see citing works

A connection pattern-based approach to detect network traffic anomalies in critical infrastructures

Genge, B., Rusu, D. A., & Haller, P. (2014) · European Workshop on System Security · doi:10.1145/2592791.2592792 · Cited by 25 · see citing works

D-IDS for Cyber-Physical DER Modbus System - Architecture, Modeling, Testbed-based Evaluation

Ravikumar, G., Singh, A. K., Babu, J. R., Abdelkhalek Moataz, A., & Govindarasu, M. (2020) · Resilience Week (RWS) · doi:10.1109/rws50334.2020.9241259 · Cited by 25 · see citing works

Attack detection and prevention in IoT-SCADA networks using NK-classifier

Justindhas, Y., & Jeyanthi, P. (2022) · Soft Computing · doi:10.1007/s00500-022-06921-3 · Cited by 25 · see citing works

Anomaly-Based Detection and Classification of Attacks in Cyber-Physical Systems

Kreimel, P., Eigner, O., & Tavolato, P. (2017) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3098954.3103155 · Cited by 25 · see citing works

An approach based on behavioral models and critical states distance notion for improving cybersecurity of industrial control systems

SICARD, F., ZAMAI, É., & FLAUS, J.-M. (2019) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2019.03.020 · Cited by 25 · see citing works

Scaphy: Detecting Modern ICS Attacks by Correlating Behaviors in SCADA and PHYsical

Ike, M., Phan, K., Sadoski, K., Valme, R., & Lee, W. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179411 · Cited by 24 · see citing works

A Statechart-Based Anomaly Detection Model for Multi-Threaded SCADA Systems

Kleinmann, A., & Wool, A. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-33331-1_11 · Cited by 24 · see citing works

Implementation of error detection and correction in the Modbus-RTU serial protocol

Urrea, C., Morales, C., & Kern, J. (2016) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2016.07.001 · Cited by 24 · see citing works

Safeguarding Building Automation Networks: THE-Driven Anomaly Detector Based on Traffic Analysis

Zheng, Z., & Reddy, A. L. N. (2017) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn.2017.8038393 · Cited by 24 · see citing works

IEC 60870-5-104 Network Characterization of a Large-Scale Operational Power Grid

Mai, K., Qin, X., Ortiz, N., & Cárdenas, Á. A. (2019) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2019.00051 · Cited by 24 · see citing works

Intrusion detection in SCADA systems by traffic periodicity and telemetry analysis

Zhang, J., Gan, S., Liu, X., & Zhu, P. (2016) · IEEE Symposium on Computers and Communications (ISCC) · doi:10.1109/iscc.2016.7543760 · Cited by 24 · see citing works

Experimental Implementation and Performance Evaluation of an IoT Access Gateway for the Modbus Extension

Găitan, V. G., & Zagan, I. (2021) · Sensors · doi:10.3390/s21010246 · Cited by 24 · see citing works

Temporal pattern-based malicious activity detection in SCADA systems

Shlomo, A., Kalech, M., & Moskovitch, R. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102153 · Cited by 23 · see citing works

A General Real-Time Control Approach of Intrusion Response for Industrial Automation Systems

Huang, S., Zhou, C., Xiong, N. N., Yang, S., Qin, Y., & Zhang, Q. (2015) · IEEE Transactions on Systems Man and Cybernetics Systems · doi:10.1109/tsmc.2015.2469688 · Cited by 23 · see citing works

An intrusion detection method based on log sequence clustering of honeypot for Modbus TCP protocol

Wang, P.-H., Liao, I., Kao, K., & Huang, J.-Y. (2018) · 2018 IEEE International Conference on Applied System Invention (ICASI) · doi:10.1109/icasi.2018.8394581 · Cited by 23 · see citing works

Protocol study and anomaly detection for server-driven traffic in SCADA networks

Lin, C., & Nadjm‐Tehrani, S. (2023) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2023.100612 · Cited by 22 · see citing works

On the impact of empirical attack models targeting marine transportation

Bou‐Harb, E., Kaisar, E. I., & Austin, M. A. (2017) · IEEE International Conference on Models and Technologies for Intelligent Transportation Systems · doi:10.1109/mtits.2017.8005665 · Cited by 22 · see citing works

Compact Modbus TCP/IP protocol for data acquisition systems based on limited hardware resources

Bai, Q., Jin, B., Wang, D., Wang, Y., & Liu, X. (2018) · Journal of Instrumentation · doi:10.1088/1748-0221/13/04/t04004 · Cited by 22 · see citing works

Global-local integration for GNN-based anomalous device state detection in industrial control systems

Lu, S., Wang, K., Zhang, L., & Wang, B. (2022) · Expert Systems with Applications · doi:10.1016/j.eswa.2022.118345 · Cited by 21 · see citing works

Secure Communications in Smart Grid: Networking and Protocols

McLaughlin, K., Friedberg, I., Kang, B., Maynard, P., Sezer, S., & McWilliams, G. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-802122-4.00005-5 · Cited by 21 · see citing works

An experiment in using IMUNES and Conpot to emulate honeypot control networks

Kuman, S., Groš, S., & Mikuc, M. (2017) · International Convention on Information and Communication Technology, Electronics and Microelectronics · doi:10.23919/mipro.2017.7973617 · Cited by 21 · see citing works

Anomaly Detection for Power Grid Based on Time Series Model

Lizong, Z., Shen, X., Zhang, F., Ren, M., Ge, B., & Li, B. (2019) · IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC) · doi:10.1109/cse/euc.2019.00044 · Cited by 20 · see citing works

Accurate Automata-Based Detection of Cyber Threats in Smart Grid Communication

Havlena, V., Matoušek, P., Ryšavý, O., & Holík, L. (2022) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2022.3216726 · Cited by 20 · see citing works

Onboard system of hybrid underwater robotic vehicles: Integrated software architecture and control algorithm

Yu, C., Xiang, X., Maurelli, F., Zhang, Q., Zhao, R. J., & Xu, G. (2019) · Ocean Engineering · doi:10.1016/j.oceaneng.2019.106121 · Cited by 20 · see citing works

A Software-Defined Security Approach for Securing Field Zones in Industrial Control Systems

Yang, J. Y., Zhou, C., Tian, Y., & Yang, S. (2019) · IEEE Access · doi:10.1109/access.2019.2924800 · Cited by 19 · see citing works

Efficient Modelling of ICS Communication For Anomaly Detection Using Probabilistic Automata

Matoušek, P., Havlena, V., & Holík, L. (2021) · Cited by 18 · see citing works

Off-the-Shelf Solutions as Potential Cyber Threats to Industrial Environments and Simple-To-Implement Protection Methodology

Slunjski, M., Sumina, D., Groš, S., & Erceg, I. (2022) · IEEE Access · doi:10.1109/access.2022.3217797 · Cited by 18 · see citing works

Accurate Modeling of Modbus/TCP for Intrusion Detection in SCADA Systems (Extended abstract)

Goldenberg, N., & Wool, A. (2013)

Modeling Modbus TCP for intrusion detection

Faisal, M. A., Cárdenas, Á. A., & Wool, A. (2016) · IEEE Conference on Communications and Network Security · doi:10.1109/cns.2016.7860524 · Cited by 30 · see citing works

Real-Time Intrusion Detection Method Based on Bidirectional Access of Modbus/TCP Protocol

Xin, X., Liu, C., & Wang, B. (2017) · International Conference on Cryptography, Security and Privacy (CSP) · doi:10.1145/3058060.3058069 · Cited by 3 · see citing works

Accurate Modeling of The Siemens S7 SCADA Protocol For Intrusion Detection And Digital Forensic

Kleinmann, A., & Wool, A. (2014) · Cited by 8 · see citing works

A Support Vector Machine-based Intrusion Detection Method for SCADA System

Teng-fe, Z. (2015) · Huagong zidonghua ji yibiao · Cited by 1 · see citing works