The DOI matches its Crossref record; 18 of the 21 references it cites were found in a registry or an index.
Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“To simulate the control networks, e.g.Modbus, Allen-Bradley Data Highway, TASSCS uses Opnet tool and to simulate the operation behaviour; it uses PowerWorldi simulation system.”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
In the citing paper
“virtual testbed”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
In the citing paper
“Modbus”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [106]
Citations
Cites
Snort - Lightweight Intrusion Detection for Networks
Roesch, M. (1999) · Cited by 3,094
Security problems in the TCP/IP protocol suite
Bellovin, S. (1989) · ACM SIGCOMM Computer Communication Review · doi:10.1145/378444.378449 · Cited by 559
Using Model-based Intrusion Detection for SCADA Networks
Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321
On SCADA control system command and response injection and intrusion detection
Gao, W., Morris, T. H., Reaves, B., & Richey, D. (2010) · eCrime Researchers Summit (eCrime) · doi:10.1109/ecrime.2010.5706699 · Cited by 187
Stuxnet, the real start of cyber warfare? [Editor's Note]
Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5634434 · Cited by 168
A testbed for analyzing security of SCADA control systems (TASSCS)
Mallouhi, M., Al-Nashif, Y., Cox, D., Chadaga, T., & Hariri, S. (2011) · ISGT 2011 · doi:10.1109/isgt.2011.5759169 · Cited by 164
Modbus/DNP3 State-Based Intrusion Detection System
Fovino, I. N., Carcano, A., Murel, T. D. L., Trombetta, A., & Masera, M. (2010) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2010.86 · Cited by 153
Smart grids, smart cities need better networks [Editor's Note
Chen, T. (2010) · IEEE Network · doi:10.1109/mnet.2010.5430136 · Cited by 138
Tsang, C.-H., & Kwong, S. (2006) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit.2005.1600609 · Cited by 107
Communication pattern anomaly detection in process control systems
Valdes, A., & Cheung, S. (2009) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2009.5168010 · Cited by 106
Research works printed but not linked: 1
- D. Yang, A. Usynin, J. Hines, Anomaly-based intrusion detection for SCADA systems, in: Proceedings of the Fifth International Topical Meeting on Nuclear Plant Instrumentation, Control and Human–Machine Interface Technologies, 2006, pp. 12–16.
Cited by
Sorted by citations
Items 301–318 of 318
Slunjski, M. (2025) · International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME) · doi:10.1109/iceccme64568.2025.11277963
“Starting with Modbus, the literature summarises various intrusion detection mechanisms based on signature/anomaly detection and deep learning [18]-[19], numerous applications of TLS/SSL protocols [20], state-based and standalone intrusion detection rules and their application in open-source tools…”
Bonagura, V., Cavone, G., & Pascucci, F. (2025) · Conference proceedings/Conference proceedings - IEEE International Conference on Systems, Man, and Cybernetics · doi:10.1109/smc58881.2025.11342867
“DES models are incredibly effective at capturing complex system behaviors, making them ideal for anomaly detection [16].”
InfluentialMughairi, B. M. A., Kumar, G. K., & Maashri, S. A. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6150016
Analysis of Industrial Internet of Things Based on Current Technology Security Measures
William, P., Nirkhi, S. M., Almakki, M., Kumaraguru, S., Pushpa, S. X., & Thokal, P. V. (2026) · International Conference on Innovative Practices in Technology and Management (ICIPTM) · doi:10.1109/iciptm69057.2026.11465664
“One of the key enablers of IIoT is edge computing, which brings computational capabilities closer to the data source, allowing for faster processing, reduced latency, and enhanced scalability [8-10].”
Automatic Instrumentation of PLC Programs for Anomaly Detection in Industrial Control Systems
Alla, O., & Mocanu, S. (2026) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit64854.2026.11491028
“Goldenberg and Wool simulated Modbus/TCP interactions to identify anomalies with a low false-positive rate [7].”
Bui, N. T., Пащенко, Ф. Ф., & To, P. T. (2026) · Proceedings of Telecommunication Universities · doi:10.31854/1813-324x-2026-12-2-74-91
Work-in-Progress: Experimentation with Clustering Analysis on Industrial Control Systems
Khare, S., Ghosh, T., & Jagarapu, S. (2026) · ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SaT-CPS) · doi:10.1145/3806008.3811709
Implementation of embedded virtualization-based built-in defense for PLCs on Loongson architecture
YaZhe, W. A. N. G., Wang, W., Lei, R. E. N., Huiqun, W. A. N. G., ZHANG, Y., & Yingying, N. I. N. G. (2026) · Scientia Sinica Informationis · doi:10.1360/ssi-2025-0319
“IDS 是 ICS 中广泛应用的一类防御手段 , 其通过监控网络流量、系统日志等数据源 , 分析潜在的入侵行 为 [14 ∼ 16] , 以识别异常活动和安全威胁 .”
Wang, T., Wang, J., Wu, X., Yang, Y., Zhao, J., & Wang, M. (2026) · International Conference on Electronic Engineering and Informatics (EEI) · doi:10.1109/eei70303.2026.11640678
Fong, C. K., & Okano, M. T. (2026) · International Conference on Electrical, Computer and Energy Technologies (ICECET) · doi:10.1109/icecet65726.2026.11632353
“Early works explored specification-based and traffic-modeling techniques to capture legitimate command sequences and protocol behavior, enabling the detection of abnormal or malicious operations in industrial networks [17], [18].”
A Hardware-in-the-Loop Testbed for Security Analysis of Industrial Communication Protocols
Shuliakouskaya, A., Sosnowski, K., Sokół, T., & Graniszewski, W. (2026) · Progress in Applied Electrical Engineering (PAEE) · doi:10.1109/paee71887.2026.11660669
“Therefore, timing anomalies should be interpreted cautiously and not treated as universal indicators of malicious activity [8], [9].”
Characterizing Network Traffic to Justify NSM Implementation in OT Environments
Jankowicz, P., Sosnowski, K., & Graniszewski, W. (2026) · Progress in Applied Electrical Engineering (PAEE) · doi:10.1109/paee71887.2026.11660692
“To address such weaknesses, Goldenberg and Wool [6] show that per-transaction modelling of Modbus traffic with deterministic finite automaton achieves very low false positive rates on production PLCs, underscoring that deep, per-transaction protocol inspection can yield highly accurate…”
Toward Intelligent Infrastructure: MAIA, a Modular AI Architecture for Industrial Control Systems
Slunjski, M. (2026) · IEEE Access · doi:10.1109/access.2026.3728856
“The second strategy deploys external protective mechanisms, including SSL/TLS tunnelling, anomaly-or signature-based intrusion detection [33], [34], [35], [36], [37], and deep packet inspection [38], [39].”
de Souza, C. W., Rosa, G. M., & Gomes, O. S. (2026) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg_estendido.2026.27099
Ming, Z., Tang, D., Yuan, Y., Wang, H., Zhang, X., Kotsampopoulos, P. C., Shi, J., Guerrero, J. M., & Zio, E. (2026) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2026.113697
Metadata
- Authors
- Goldenberg, N., & Wool, A.
- Affiliations
- Tel Aviv University (IL)
- Corresponding author
- Wool, Avishai
- ORCID
- Wool, Avishai
- Venue
- International Journal of Critical Infrastructure Protection
- Publisher
- Elsevier BV
- Published
- 2013-06
- Volume
- 6
- Issue
- 2
- Pages
- 63-75
- ISSN
- 1874-5482 (ISSN-L)
- OpenAlex
- W2089944128
- Cited by
- 323
- References
- 21
- Citations by year
- 2026: 15 · 2025: 20 · 2024: 26 · 2023: 30 · 2022: 27 · 2021: 25 · 2020: 28 · 2019: 39 · 2018: 31 · 2017: 25 · 2016: 28 · 2015: 20 · 2014: 6 · 2013: 3
- FWCI
- 23.65
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- International Journal of Critical Infrastructure Protection (publishedVersion)
- RePEc: Research Papers in Economics (submittedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Engineering › Control and Systems Engineering › Industrial Automation and Control Systems
- Keywords
- Modbus TCP, SCADA security, intrusion detection, deterministic finite automata, industrial control network security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
