The DOI matches its Crossref record; 18 of the 21 references it cites were found in a registry or an index.
Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“To simulate the control networks, e.g.Modbus, Allen-Bradley Data Highway, TASSCS uses Opnet tool and to simulate the operation behaviour; it uses PowerWorldi simulation system.”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
In the citing paper
“virtual testbed”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
In the citing paper
“Modbus”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
Citations
Cites
Snort - Lightweight Intrusion Detection for Networks
Roesch, M. (1999) · Cited by 3,094
Security problems in the TCP/IP protocol suite
Bellovin, S. (1989) · ACM SIGCOMM Computer Communication Review · doi:10.1145/378444.378449 · Cited by 559
Using Model-based Intrusion Detection for SCADA Networks
Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321
On SCADA control system command and response injection and intrusion detection
Gao, W., Morris, T. H., Reaves, B., & Richey, D. (2010) · eCrime Researchers Summit (eCrime) · doi:10.1109/ecrime.2010.5706699 · Cited by 187
Stuxnet, the real start of cyber warfare? [Editor's Note]
Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5634434 · Cited by 168
A testbed for analyzing security of SCADA control systems (TASSCS)
Mallouhi, M., Al-Nashif, Y., Cox, D., Chadaga, T., & Hariri, S. (2011) · ISGT 2011 · doi:10.1109/isgt.2011.5759169 · Cited by 164
Modbus/DNP3 State-Based Intrusion Detection System
Fovino, I. N., Carcano, A., Murel, T. D. L., Trombetta, A., & Masera, M. (2010) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2010.86 · Cited by 153
Smart grids, smart cities need better networks [Editor's Note
Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5430136 · Cited by 138
Tsang, C.-H., & Kwong, S. (2006) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit.2005.1600609 · Cited by 107
Communication pattern anomaly detection in process control systems
Valdes, A., & Cheung, S. (2009) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2009.5168010 · Cited by 106
Research works printed but not linked: 1
- D. Yang, A. Usynin, J. Hines, Anomaly-based intrusion detection for SCADA systems, in: Proceedings of the Fifth International Topical Meeting on Nuclear Plant Instrumentation, Control and Human–Machine Interface Technologies, 2006, pp. 12–16.
Cited by
Sorted by citations
Items 201–300 of 318
Apolinário, F., Escravana, N., Hervé, É., Pardal, M. L., & Correia, M. P. (2022) · ACM Symposium on Applied Computing · doi:10.1145/3477314.3507323 · Cited by 4
Implementation of a Stateful Network Protocol Intrusion Detection Systems
Seng, S., García-Alfaro, J., & Laarouci, Y. (2022) · International Conference on Security and Cryptography · doi:10.5220/0011327400003283 · Cited by 4
“The simplest and most common method to perform stateful monitoring is based on automata, especially FSM or its derivatives (Mealy machines, nondeterministic FSM, etc.) (Qin-Cui et al., 2009; Goldenberg and Wool, 2013).”
Utilising the capabilities of next-generation PLC controllers for ICSs protection from cyber threats
Slunjski, M., & Sumina, D. (2023) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit58465.2023.10143152 · Cited by 4
Whitelisting for Characterizing and Monitoring Process Control Communication
Paul, A., Schuster, F., & König, H. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-39828-5_2 · Cited by 4
A Physical Fingerprint-Based Intrusion Detection and Localization in Fieldbus Network
Qiu, S., Fei, J., Yang, H., Xiao, Y., & Zhang, X. (2023) · International Seminar on Artificial Intelligence, Networking and Information Technology (AINIT) · doi:10.1109/ainit59027.2023.10212629 · Cited by 4
“Intrusion detection systems (IDS) have been developed specifically for industrial protocols to detect and combat these attacks [1] [2].”
BackgroundA Human-in-the-Loop Anomaly Detection Architecture for Big Traffic Data of Cellular Network
Liu, S., Xia, Y., & Wang, D. (2024) · IEEE Access · doi:10.1109/access.2024.3376413 · Cited by 4
“Goldenberg and Wool [20] modeled the network traffic behavior of the Modbus protocol to perform intrusion detection, which can achieve an accuracy of 65% to 99%.”
BackgroundPower grid safety control via fine-grained multi-persona programmable logic controllers
Salles-Loustau, G., García, L. A. R., Sun, P., Dehnavi, M. M., & Zonouz, S. (2017) · IEEE International Conference on Smart Grid Communications (SmartGridComm) · doi:10.1109/smartgridcomm.2017.8340684 · Cited by 4
Some Considerations on Dependability Issues and Cyber-Security of Cyber-Physical Systems
Thiriet, J.-M., & Mocanu, S. (2018) · International Conference on Smart Communications in Network Technologies (SaCoNeT) · doi:10.1109/saconet.2018.8585452 · Cited by 4
“In the cyber domain, the communicationbased approaches [22, 23, 24, 25] are interested in the vocabulary and grammar of industrial protocols, these approaches are based on the knowledge we have about the protocol mechanisms and are really relevant in the case of deterministic processes.”
BackgroundA timing approach to network-based anomaly detection for SCADA systems
Lin, C. (2020) · Linköping studies in science and technology. Thesis · doi:10.3384/lic.diva-165155 · Cited by 4
Intrusion Detection System of industrial control networks using network telemetry
Ponomarev, S. (2015) · Cited by 4
Monitoring System of Saturation Line Based on Mixed Programming
Qiu, P., Xi-ping, Y., Gan, S. C., Zhang, J., & Yang, M. (2017) · International Conference on Computer Engineering, Information Science & Application Technology (ICCIA) · doi:10.2991/iccia-17.2017.23 · Cited by 4
“storage, data analysis and information release[1][2].”
Bernieri, G., Conti, M., & Pozzan, G. (2019) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3339252.3340521 · Cited by 4
“Finally, if ϕ ( pkt ) = { A 1 , A 2 , ... } Training Phase: the Statechart DFA is built by splitting the training in [6] on each of them to generate the respective Pattern DFA .”
MethodDetection of interruption attack in the wireless networked closed loop industrial control systems
Benisha, R. B., & Ratna, S. R. (2019) · Telecommunication Systems · doi:10.1007/s11235-019-00614-3 · Cited by 4
“Hence a piece of information from the sensors is collected to the SCADA through remote control [5].”
Challenges in Securing Industrial Control Systems Using Future Internet Technologies
Stojanović, M. D., & Rakas, S. V. B. (2020) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-2910-2.ch001 · Cited by 4
Utilizing Machine Learning Approaches for Anomaly Detection in Industrial Control Systems
More, P., Dhabliya, D., Kumar, J. R. R., Bhosale, S. A., Gaikwad, A. S., & Khapekar, S. V. (2023) · International Conference on Information Management & Machine Intelligence (ICIMMI) · doi:10.1145/3647444.3647928 · Cited by 3
You Can’t Protect What You Don’t Understand: Characterizing an Operational Gas SCADA Network
Qin, X., Rosso, M., Cárdenas, Á. A., Etalle, S., den Hartog, J., & Zambon, E. (2022) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw54247.2022.9833864 · Cited by 3
Cross-layer anomaly detection in industrial cyber-physical systems
Sándor, H., Genge, B., Haller, P., Duka, A.-V., & Crainicu, B. (2017) · International Conference on Software, Telecommunications and Computer Networks (SoftCOM) · doi:10.23919/softcom.2017.8115523 · Cited by 3
“The selection of these parameters is based on previous works, which demonstrated that industrial traffic is highly deterministic in terms of throughput, and packet delivery times [16].”
BackgroundVargas‐Salgado, C., Montuori, L., & Alcázar-Ortega, M. (2021) · E3S Web of Conferences · doi:10.1051/e3sconf/202123900007 · Cited by 3
Shim, K., Sohn, I., Lee, E., Seok, W., & Lee, W. (2021) · Journal of Web Engineering · doi:10.13052/jwe1540-9589.2011 · Cited by 3
Rethinking the Operation Pattern for Anomaly Detection in Industrial Cyber–Physical Systems
Cheng, Z., Cui, B., & Fu, J. (2023) · Applied Sciences · doi:10.3390/app13053244 · Cited by 3
“Goldenberg et al. [13] proposed using the DFA to describe the normal operation sequence for each master–slave channel.”
InfluentialDeveloping an ML Model for Detecting the Cyber Attacks in Electric Vehicles
Roopesh, Albert, B., Manuel, A. S., & Hemram, S. (2024) · International Conference on Cognitive Robotics and Intelligent Systems (ICC-ROBINS) · doi:10.1109/icc-robins60238.2024.10533886 · Cited by 3
“This initiative is important because it has the ability to strengthen the security against malicious activity that could jeopardize the integrity of AI-powered electric vehicles[1].”
BackgroundRuiz-Villafranca, S., Gómez, J. M. C., & Roldán-Gómez, J. (2024) · Internet of Things · doi:10.1016/j.iot.2024.101308 · Cited by 9
Security Monitoring of IoT Communication Using Flows
Matoušek, P., Ryšavý, O., & Grégr, M. (2019) · doi:10.1145/3352700.3352718 · Cited by 3
“Goldenberg and Wood [20] studied communication in industrial IoT and proposed DFA-based intrusion detection system that by observing the regular communication creates a detailed traffic model which is very sensitive to anomalies.”
BackgroundResearch on Data Integrity Protection Technology of Industrial Control Network
wu, Y., Zhang, X., & Li, W. (2020) · International Conference on Mechanical, Control and Computer Engineering (ICMCCE) · doi:10.1109/icmcce51767.2020.00166 · Cited by 3
Real-Time Intrusion Detection Method Based on Bidirectional Access of Modbus/TCP Protocol
Xin, X., Liu, C., & Wang, B. (2017) · International Conference on Cryptography, Security and Privacy (CSP) · doi:10.1145/3058060.3058069 · Cited by 3
“INTRODUCTION A industrial control system is typically composed of human-machine interface (HMI) controllers (such as PLC) actuatorssensors and?telecommunication?line [1, 2].”
BackgroundThe comparison network model for cyber anomaly detection
Qu, H., Qin, J., & Chen, H. (2019) · Intelligent Data Analysis · doi:10.3233/ida-184391 · Cited by 3
“The OCSVM algorithm had a wide range of applications for anomaly detection [28,29].”
Simulation and Analysis of Cyber-Attack on Modbus Protocol for Smart Grids in Virtual EnvironmentPreprint
Banik, T., Manicavasagam, R., Banik, S., & Banik, S. (2023) · Preprints.org · doi:10.20944/preprints202309.0984.v2 · Cited by 3
DEFENDING THE SCADA NETWORK CONTROLLING THE ELECTRICAL GRID FROM ADVANCED PERSISTENT THREATS
Lemay, A. (2013) · PolyPublie (École Polytechnique de Montréal) · Cited by 3
Chamotra, S., & Barbhuiya, F. A. (2025) · ACM Transactions on Internet of Things · doi:10.1145/3769011 · Cited by 2
“To address these limitations, researchers have explored inite automata-based approaches, which provide structured protocol modeling and logically consistent response generation [20, 28].”
Slunjski, M., & Sumina, D. (2023) · International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME) · doi:10.1109/iceccme57830.2023.10253072 · Cited by 2
Raj, R. S., & Jin, D. (2025) · ACM International Conference on Future Energy Systems (e-Energy) · doi:10.1145/3679240.3734619 · Cited by 2
“Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are popular approaches in detecting and safeguarding against malicious traffic ([35], [13], [12]).”
Clasificación de Errores en una Red de Comunicación Industrial (Modbus TCP/IP)
Acevedo, C. M. D., & Rivera, E. J. L. (2015) · BISTUA REVISTA DE LA FACULTAD DE CIENCIAS BASICAS · doi:10.24054/01204211.v1.n1.2015.1668 · Cited by 2
Whitelisting Cyber Attack Detection according to Estimated Operational States for CPS
Nakai, T., Ichikawa, S., Kobayashi, N., Hata, K., & Sawada, K. (2019) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin41052.2019.8972198 · Cited by 2
“Therefore, several works propose the method to generate the detection rules from communication data on CPS network [15][16].”
MethodA High-Performance Access Control Model for Urban Street Lamp Internet of Things
Chi, S., Bi, S., Dong, M., Sun, B., & Xie, C. (2019) · IEEE International Conference on Real-time Computing and Robotics (RCAR) · doi:10.1109/rcar47638.2019.9043936 · Cited by 2
“2) The communication between street lamp device and cloud platform adopts private protocol customized based on Modbus protocol [4].”
MethodResearch on self-learning method on generation and optimization of industrial firewall rules
Shang, W., Wan, M., Zeng, P., & Qiao, Q. (2015) · International Conference on Information Security and Cyber Forensics (InfoSec) · doi:10.1109/infosec.2015.7435505 · Cited by 2
Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol
Wan, M., Shang, W., & Zeng, P. (2017) · Advances in intelligent systems and computing · doi:10.1007/978-3-319-65978-7_40 · Cited by 2
SCADA: Analysis of Attacks on Communication Protocols
Pramod, T. C., & Sunitha, N. R. (2018) · Springer eBooks · doi:10.1007/978-3-319-75683-7_17 · Cited by 2
Extracting Function-Driven Tracing Characteristics for Optimized SVM Classification
Wan, M., Xu, X., Song, Y. X., Li, Q., & Li, J. (2021) · Mobile Information Systems · doi:10.1155/2021/6839179 · Cited by 2
“Correspondingly, they are the most direct connection with the changing laws of function codes in Modbus TCP data traffic [21].”
BackgroundSimulation and Analysis of Cyber-Attack on Modbus Protocol for Smart Grids in Virtual Environment
Banik, S., Manicavasagam, R., Banik, S., & Banik, S. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-62277-9_25 · Cited by 2
Intrusion detection in networked control systems : from system knowledge to network security
Caselli, M. (2016) · doi:10.3990/1.9789036541770 · Cited by 2
On Ladder Logic Bombs in Industrial Control SystemsPreprint
Govil, N., Agrawal, A., & Tippenhauer, N. O. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1702.05241 · Cited by 2
“A similar IDS is proposed in [8], where the authors model periodic communication between HMI and PLCs using a deterministic finite automata.”
BackgroundWang, H., & Lau, N. K. C. (2022) · Proceedings of the Human Factors and Ergonomics Society Annual Meeting · doi:10.1177/1071181322661173 · Cited by 1
“The data transmission simulation includes all required fields to be sufficiently representative given that MODBUS is the commonly used protocol in SCADA (Goldenberg & Wool, 2013; Zhu et al., 2011) and MODBUS ADU covers all necessary functions of SCADA systems.”
MethodFingerCI: Writing industrial process specifications from network traffic
Apolinário, F., Escravana, N., Hervé, É., Pardal, M. L., & Correia, M. P. (2024) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2024.100725 · Cited by 1
Questioning the Myth: Investigating ICS Traffic Homogeneity from an Anomaly Detection Perspective
Schuster, F., & König, H. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-84260-3_2 · Cited by 1
Communication Protocols in PLC-Based Data Acquisition for Wastewater Management
Kaittan, K. H., & Mohammed, S. J. (2024) · International Conference on Advances in Engineering Science and Technology (AEST) · doi:10.1109/aest63017.2024.10959998 · Cited by 1
“Whenever a data block of any size is subjected to an n-bit CRC calculation, it may detect every error burst that is shorter than n bits, and approximately the proportion of more extended error bursts it can identify would be about (1 − 2− n ) [18],[22].”
InfluentialAnomaly Detection Approach based on Function Code Traffic by Using CUSUM Algorithm
Wan, M., Shang, W., & Zeng, P. (2016) · National Conference on Electrical, Electronics and Computer Engineering (NCEECE) · doi:10.2991/nceece-15.2016.270 · Cited by 1
“The vulnerabilities of this protocol are increasingly exposed in recent years [12,13], and can be concluded as follows: firstly, Modbus/TCP lacks the authentication, and any Modbus master can use an illegal IP address and one function code to establish a Modbus session; secondly, Modbus/TCP does not consider the autho…”
BackgroundSecurity authentication mechanism based on symmetric polynomials for SCADA systems
Lu, Y., Chen, X., & Chen, C. (2016) · International Conference on Security of Smart Cities, Industrial Control System and Communications (SSIC) · doi:10.1109/ssic.2016.7571806 · Cited by 1
“Modbus TCP communication is built by Winsock, which is represented by protocol, address and ports [18, 19].”
MethodResearch on Detecting Abnormal Energy Consumption in Energy Management System
Li, S., Zuo, Y. N., & Tao, F. (2016) · Communications in computer and information science · doi:10.1007/978-981-10-2669-0_26 · Cited by 1
Inside the Closed World: User and Device Profile Analytics for SCADA Security
Zhou, X., Xu, Z., Wang, L., Chen, K., Chen, C., & Zhang, W. (2018) · MATEC Web of Conferences · doi:10.1051/matecconf/201817303039 · Cited by 1
Measuring the Growth in Complexity of Models from Industrial Control Networks
Faisal, M. A., & Cárdenas, Á. A. (2018) · IEEE International Conference on Information Reuse and Integration (IRI) · doi:10.1109/iri.2018.00014 · Cited by 1
“For Modbus/TCP, state data is defined as in [1]: a 4tuple < Query/Response(1 bit), function code(8 bits), reference number(16 bits), bit/word count(8 bits) >.”
BackgroundMethodInfluentialResearch on Soft PLC Programming System Based on IEC61131-3 Standard
Zhao, K., & Zhang, Y. (2019) · Lecture notes in electrical engineering · doi:10.1007/978-981-32-9682-4_31 · Cited by 1
MUbus: A new secure industrial communication protocol based on ModBus and Ubus protocols
Cherifi, T., Cherifi, W., Challal, K., Abbad, L., Bouterfas, M., & Gramez, A. (2021) · International Conference on Artificial Intelligence for Cyber Security Systems and Privacy (AI-CSP) · doi:10.1109/ai-csp52968.2021.9671085 · Cited by 1
A Trusted Approach to Design a Network Monitor
Shimizu, K., Yamaguchi, T., Nakai, T., Ueda, T., Kobayashi, N., & Boyer, B. (2017) · IEEE/ACM International Conference on Formal Methods in Software Engineering (FormaliSE) · doi:10.1109/formalise.2017.3 · Cited by 1
“One of the advantages of the methods proposed in [4], [5] is their capability to automatically build the model with a relatively few sample packets observed in a real network.”
BackgroundMethodAnomaly Detection for Industrial Control Networks Using Hamming Distance
Pandey, R. K., & Das, T. K. (2022) · Lecture notes in networks and systems · doi:10.1007/978-3-031-13150-9_24 · Cited by 1
Design of Secure Communication Protocol in Energy Internet Scenario
Chen, Z., Binbin, D., Mao, D., Rao, H., Wang, J., & Jiang, Y. (2022) · Youth Academic Annual Conference of Chinese Association of Automation (YAC) · doi:10.1109/yac57282.2022.10023768 · Cited by 1
“Goldenberg N et al . have analyzed the security of Modbus TCP/IP protocol in an industrial control system, and put forward the research direction for solving security problems, but do not give the concrete protective measures[9-12].”
BackgroundCYBERSECURITY ANALYSIS OF INDUSTRIAL CONTROL SYSTEMS
Shikhaliyev, R. (2023) · Problems of Information Society · doi:10.25045/jpis.v14.i2.06 · Cited by 1
“For ICSs, the focus is on defining discovery models based on protocol specifications (Wojciech, 2013, Niv and et al., 2013).”
A Survey on Data Security and Privacy for Fog-Based Smart Grid Applications
Ganesan, S., Laxmi, P., & Ganesan, S. (2024) · Advances in computer and electrical engineering book series · doi:10.4018/979-8-3693-2869-9.ch010 · Cited by 1
Behavior-Based Intrusion Detection Approach Deployed on a Naval Testbed
Hotellier, E., Boukhobza, N., Sicard, F., Francq, J., & Mocanu, S. (2024) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa61755.2024.10710831 · Cited by 1
A self-contained emulator for the forensic examination of IoE scenarios
Ruiz-Villafranca, S., Gómez, J. M. C., Carrillo-Mondéjar, J., Roldán-Gómez, J., & Martínez, J. L. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103718 · Cited by 1
Development of a Practical Secondary Control for Hardware Microgrids
Chakraborty, S., Wang, J., Ganguly, S., & Kroposki, B. (2024) · IEEE Energy Conversion Congress and Exposition (ECCE) · doi:10.1109/ecce55643.2024.10860894 · Cited by 1
Detecting Anomalies in Printed Intelligence Factory Network
Mantere, M., Sailio, M., & Noponen, S. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-17127-2_1 · Cited by 1
Enabling software defined networking experiments in networked critical infrastructures
Genge, B., & Gál, Z. (2014) · University of Debrecen Electronic Archive (University of Debrecen) · Cited by 1
Making everybody comfortable with Erlang: a SCADA system for thermal control
Castro, L. M., Fernández, J. D., & Pampín, C. L. (2016) · doi:10.1145/2975969.2975976 · Cited by 1
“A more controversial issue, however, is that of security, in which many issues need to be considered [2].”
BackgroundTroubleshooting Test Method Based on Industrial Control Grammar Model
Cai, J., Li, Q., Chen, Y., Liu, Y., Xia, Y., & Rahmany, S. (2019) · IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC) · doi:10.1109/cse/euc.2019.00082 · Cited by 1
Metric Learning with Neural Network for Modbus/TCP Anomaly Detection
Qu, H., Zhou, J., & Qin, J. (2020) · International Conference on Industrial Control Network and System Engineering Research (ICNSER) · doi:10.1145/3411016.3411160 · Cited by 1
“In [16], an OCSVM was used for anomaly detection by creating a quadratic programming model, and [5] discussed the effect of several regularization techniques on the OCSVM model.”
MethodCritical Features Selection of Training Model for Intrusion Detection System
Li, J., Zheng, W., Chang, K. C., Wang, S., & Luo, Y. (2021) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-69717-4_34 · Cited by 1
Challenges in Securing Industrial Control Systems Using Future Internet Technologies
Stojanović, M. D., & Rakas, S. V. B. (2021) · IGI Global eBooks · doi:10.4018/978-1-6684-3698-1.ch026 · Cited by 1
Badruzzaman, Y., & Razaqi, R. A. (2023) · JURNAL INFOTEL · doi:10.20895/infotel.v15i2.937 · Cited by 1
“The Modbus/TCP protocol is generally used in SCADA systems for communication between Human Machine Interfaces (HMI) and Programmable Logic Controllers (PLCs) [27], [28].”
MethodAlmadani, B., Shawahna, A., & Qureshi, M. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.05692 · Cited by 1
“The authors in [20] exploited the static nature of control system network topology and network traffic pattern.”
BackgroundMethodImproving ICS security through Honeynets and Machine Learning techniquesPreprint
Ananbeh, O., Alomari, R., & Daniell, A. (2022) · Research Square · doi:10.21203/rs.3.rs-1333285/v1 · Cited by 1
Malicious Behavioural Detection in Scada Networks Based on Analyzing Modbus/Tcp Functions SequencesPreprint
Amer, E. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4792053 · Cited by 1
Reservoir based on Intelligent Monitoring and Forecasting System
Lin, Y. Q., Lin, Z., & Tian, J. (2016) · International Conference on Education, Management, Information and Management Society (EMIM) · doi:10.2991/emim-16.2016.128
Automatic Control System of Reservoir Gate
Lin, Y. Q., Lin, Z., & Tian, J. (2016) · Advances in intelligent systems research/Advances in Intelligent Systems Research · doi:10.2991/icemc-16.2016.17
Big Data Processing to Detect Abnormal Behavior in Smart Grids
Genge, B., Haller, P., & Kiss, I. (2016) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-319-47729-9_22
Detecting Network Attack Vectors On SCADA Specific Network Operating On Modbus TCP/IP Protocol
Pathak, N. H., & Patel, N. H. B. (2014)
Android Remote Monitoring System Based on Ioserver Data Collection
Zhang, L., Cheng, P., & Li, Z. (2017) · Advances in computer science research · doi:10.2991/mcei-17.2017.118
Online intrusion detection design and implementation for SCADA networks
Wang, H. (2017) · UVic’s Research and Learning Repository (University of Victoria)
Risk Data Analysis Based Anomaly Detection of Ship Information System (SIS)
Xing, B., Cao, S., & Chen, X. (2018) · IEEE International Conference on Environment and Electrical Engineering and IEEE Industrial and Commercial Power Systems Europe (EEEIC / I&CPS Europe) · doi:10.1109/eeeic.2018.8494233
Improved operation scheme for a radiant floor heating system to reduce overheating
Kim, S. H., Yoon, Y. R., & Moon, H. J. (2019) · IOP Conference Series Earth and Environmental Science · doi:10.1088/1755-1315/238/1/012071
Temporal Pattern-Based Malicious Activity Detection in SCADA Systems (Brief Announcement)
Kalech, M., Shlomo, A., & Moskovich, R. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-20951-3_26
Identifying and Detecting Attacks in Industrial Control Systems
Tuptuk, N. (2019) · UCL Discovery (University College London)
Integration of MicroSCADA SYS600 9.4 into Distribution Automation System
Truong, T. K., Le, K. H., Duong, M. Q., Truong-Bach, T., & Vo, V. P. (2020) · International Conference on Green Technology and Sustainable Development (GTSD) · doi:10.1109/gtsd50082.2020.9303069
“With the development of communication protocols based on TCP/IP communication protocol, IEC 60870-5-104 protocol was appeared to become a communication solution for SCADA systems, creating many advantages in implementation as well as high stability in communication [8-9].”
MethodOutlier Detection in Smart Grid CommunicationPreprint
Mutua, N. M., & Matoušek, P. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2108.12781
“Yang et al. [11], Goldenberg and Wool [12], and Kleinmann and Wool [13] used finite automata to model message sequences of IEC 104, Modbus TCP and S7 respectively.”
IoT-driven data extraction applications using common information model in a hybrid microgrid system
Bajpai, P., & Tekumalla, D. V. (2021) · Elsevier eBooks · doi:10.1016/b978-0-12-824555-2.00028-9
Clasificación de errores en una red de comunicación industrial (Modbus TCP/IP)
Acevedo, C. M. D., & Rivera, E. J. L. (2015) · LACCEI International Multi-Conference for Engineering, Education and Technology (LACCEI) · doi:10.18687/laccei2015.1.1.250
IBEMCS: IDS Baseado em Eventos Multi-Contexto para SCADA
D’Aquino, A. M., Carmo, L. F. R. D. C., Pìrmez, L., & Miceli, C. (2016) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg.2016.19302
Supervisory Control of the Sigfox Low Power Wide Area Network Technology
Koumboulis, F. N., Fragkoulis, D. G., & Palios, A. (2023) · IEEE International Conference on Intelligent Engineering Systems (INES) · doi:10.1109/ines59282.2023.10297811
Mitigating Resource Depletion and Message Sequencing Attacks in SCADA Systems
Hubballi, N., & Barsha, N. K. (2024) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-031-57870-0_4
Ten Years of Industrial Experiments with Frama-C at Mitsubishi Electric R&D Centre Europe
Lavillonnière, É., Mentré, D., & Boyer, B. (2024) · Computer science foundations and applied logic · doi:10.1007/978-3-031-55608-1_15
Xiang, J., Zhang, X.-M., Zheng, Q., Deng, L., Zhao, D., & Zhou, J. (2024) · Asia-Pacific Symposium on Internetware · doi:10.1145/3671016.3674812
“The Modbus/TCP communication is characterized by a bidirectional message exchange between a master, and a slave [10].”
Franco, D. J., & Akram, O. K. (2024) · International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME) · doi:10.1109/iceccme62383.2024.10796678
“These systems, which involve sensors and programmable logic controllers (PLCs), are critical due to the severe consequences of faults or malfunctions [2].”
TCP Protocol Validation and Optimization Through Automata Theory
Reddy, M. H., Ankireddypalli, O., Arella, M., Gujjula, S., & Panda, N. (2025) · International Conference on Advances in Modern Age Technologies for Health and Engineering Science (AMATHE) · doi:10.1109/amathe65477.2025.11081317
“Real-world testing on a production system demonstrated the system’s effectiveness in detecting configuration errors and unauthorized message sequences [6].”
Dynamic Data Driven Security Framework for Industrial Control Networks Using Programmable Switches
Raj, R. S., & Jin, D. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-94895-4_16
Detecting Anomalous DNP3 Commands Using Temporal Analysis
Qassim, Q. S., Askarbekova, N., & Toksanovna, A. S. (2025) · IEEE International Conference on Smart Information Systems and Technologies (SIST) · doi:10.1109/sist61657.2025.11139291
“The article by Goldenberg [13] presents a model-based intrusion detection system that is tailored for Modbus/TCP networks.”
Intrusion Detection in an Industrial Control System Using Unsupervised Machine Learning Algorithms
Roopraj, K., Pillay, N., & Singh, N. R. (2025) · Conference on Information Communications Technology and Society (ICTAS) · doi:10.1109/ictas64866.2025.11155324
“Once a connection is established, Protocol Data Units (PDUs) are exchanged within TCP segments, enabling seamless data transfer [4].”
de Moura, R. L., Franqueira, V. N. L., Pessin, G., & Filho, R. L. M. (2025) · De Gruyter eBooks · doi:10.1515/9783111436548-004
Chakraborty, S., Wang, J., Ganguly, S., & Kroposki, B. (2025) · IEEE Access · doi:10.1109/access.2025.3643737
“It stores the information in Modbus holding registers so that the data can be read/write externally [52].”
Metadata
- Authors
- Goldenberg, N., & Wool, A.
- Affiliations
- Tel Aviv University (IL)
- Corresponding author
- Wool, Avishai
- ORCID
- Wool, Avishai
- Venue
- International Journal of Critical Infrastructure Protection
- Publisher
- Elsevier BV
- Published
- 2013-06
- Volume
- 6
- Issue
- 2
- Pages
- 63-75
- ISSN
- 1874-5482 (ISSN-L)
- OpenAlex
- W2089944128
- Cited by
- 323
- References
- 21
- Citations by year
- 2026: 15 · 2025: 20 · 2024: 26 · 2023: 30 · 2022: 27 · 2021: 25 · 2020: 28 · 2019: 39 · 2018: 31 · 2017: 25 · 2016: 28 · 2015: 20 · 2014: 6 · 2013: 3
- FWCI
- 23.65
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- International Journal of Critical Infrastructure Protection (publishedVersion)
- RePEc: Research Papers in Economics (submittedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Engineering › Control and Systems Engineering › Industrial Automation and Control Systems
- Keywords
- Modbus TCP, SCADA security, intrusion detection, deterministic finite automata, industrial control network security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
