Detecting cyberattacks based on deep neural network approaches in industrial control systems

The Kolmogorov-Smirnov Test for Goodness of Fit

Massey, F. J. (1951) · Journal of the American Statistical Association · doi:10.1080/01621459.1951.10500769 · Cited by 7,210 · see citing works

Framewise phoneme classification with bidirectional LSTM and other neural network architectures

Graves, A., & Schmidhuber, J. (2005) · Neural Networks · doi:10.1016/j.neunet.2005.06.042 · Cited by 5,882 · see citing works

Learning to Forget: Continual Prediction with LSTM

Gers, F. A., Schmidhuber, J., & Cummins, F. (2000) · Neural Computation · doi:10.1162/089976600300015015 · Cited by 5,869 · see citing works

Graph Neural Network-Based Anomaly Detection in Multivariate Time Series

Deng, A., & Hooi, B. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i5.16523 · Cited by 1,413 · see citing works

Recurrent Neural Networks for Time Series Forecasting: Current status and future directions

Hewamalage, H., Bergmeir, C., & Bandara, K. (2021) · International Journal of Forecasting · doi:10.1016/j.ijforecast.2020.06.008 · Cited by 1,371 · see citing works

MAD-GAN: Multivariate Anomaly Detection for Time Series Data with Generative Adversarial Networks

Li, D., Chen, D., Jin, B., Shi, L., Goh, J., & Ng, S.-K. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-30490-4_56 · Cited by 1,323 · see citing works

Long Short Term Memory Networks for Anomaly Detection in Time Series.

Malhotra, P., Vig, L., Shroff, G. M., & Agarwal, P. (2015) · The European Symposium on Artificial Neural Networks · Cited by 1,254 · see citing works

USAD: UnSupervised Anomaly Detection on Multivariate Time Series

Audibert, J., Michiardi, P., Guyard, F., Marti, S., & Zuluaga, M. A. (2020) · Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining · doi:10.1145/3394486.3403392 · Cited by 1,094 · see citing works

SWaT: a water treatment testbed for research and training on ICS security

Mathur, A. P., & Tippenhauer, N. O. (2016) · International Workshop on Cyber-Physical Systems for Smart Water Networks (CySWater) · doi:10.1109/cyswater.2016.7469060 · Cited by 974 · see citing works

Visualizing and Understanding Recurrent Networks

Karpathy, A., Johnson, J., & Fei-Fei, L. (2015) · arXiv · doi:10.48550/arxiv.1506.02078 · Cited by 845 · see citing works

Lessons Learned from the Maroochy Water Breach

Slay, J., & Miller, M. (2007) · Critical Infrastructure Protection · doi:10.1007/978-0-387-75462-8_6 · Cited by 721 · see citing works

The real story of stuxnet

Kushner, D. (2013) · IEEE Spectrum · doi:10.1109/mspec.2013.6471059 · Cited by 638 · see citing works

Deep Learning for Anomaly Detection in Time-Series Data: Review, Analysis, and Guidelines

Choi, K., Yi, J., Park, C., & Yoon, S. (2021) · IEEE Access · doi:10.1109/access.2021.3107975 · Cited by 621 · see citing works

WADI

Ahmed, C. M., Palleti, V. R., & Mathur, A. P. (2017) · International Workshop on Cyber-Physical Systems for Smart Water Networks (CySWater) · doi:10.1145/3055366.3055375 · Cited by 574 · see citing works

Detecting Cyber Attacks in Industrial Control Systems Using Convolutional Neural Networks

Kravchik, M., & Shabtai, A. (2018) · Workshop on Cyber-Physical Systems Security and PrivaCy (CPS-SPC) · doi:10.1145/3264888.3264896 · Cited by 393 · see citing works

Anomaly Detection for a Water Treatment System Using Unsupervised Machine Learning

Inoue, J., Yamagata, Y., Chen, Y., POSKITT, C. M., & Sun, J. (2017) · IEEE ... International Conference on Data Mining workshops · doi:10.1109/icdmw.2017.149 · Cited by 372 · see citing works

A survey on attack detection, estimation and control of industrial cyber–physical systems

Zhang, D., Wang, Q., Feng, G., Shi, Y., & Vasilakos, A. V. (2021) · ISA Transactions · doi:10.1016/j.isatra.2021.01.036 · Cited by 318 · see citing works

2010 IEEE International Conference on Data Mining Workshops

(2010) · doi:10.1109/icdmw18178.2010 · Cited by 225 · see citing works

Efficient cyber attack detection in industrial control systems using lightweight neural networks and pca

Kravchik, M., & Shabtai, A. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3050101 · Cited by 224 · see citing works

TABOR

Lin, Q., Adepu, S., Verwer, S., & Mathur, A. P. (2018) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3196494.3196546 · Cited by 157 · see citing works

Unsupervised Anomaly Detection for IoT-Based Multivariate Time Series: Existing Solutions, Performance Analysis and Future Directions

Belay, M. A., Blakseth, S. S., Rasheed, A., & Rossi, P. S. (2023) · Sensors · doi:10.3390/s23052844 · Cited by 137 · see citing works

GRU-Based Interpretable Multivariate Time Series Anomaly Detection in Industrial Control System

Tang, C., Xu, L., Yang, B., Tang, Y., & Zhao, D. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103094 · Cited by 134 · see citing works

A Comparative Study of Time Series Anomaly Detection Models for Industrial Control Systems

Kim, B., Alawami, M. A., Kim, E., Oh, S., Park, J., & Kim, H. (2023) · Sensors · doi:10.3390/s23031310 · Cited by 126 · see citing works

A Dual-Isolation-Forests-Based Attack Detection Framework for Industrial Control Systems

Elnour, M., Meskin, N., Khan, K. M., & Jain, R. K. (2020) · IEEE Access · doi:10.1109/access.2020.2975066 · Cited by 117 · see citing works

45th International Conference on Telecommunications and Signal Processing

(2022) · International Conference on Telecommunications and Signal Processing (TSP) · doi:10.1109/tsp55681.2022.9851290 · Cited by 114 · see citing works

CNN based method for the development of cyber-attacks detection algorithms in industrial control systems

Nedeljkovic, D. M., & Jakovljević, Ž. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102585 · Cited by 113 · see citing works

Evolutionary Adversarial Autoencoder for Unsupervised Anomaly Detection of Industrial Internet of Things

Zeng, G., Yang, Y.-W., Lu, K., Geng, G., & Weng, J. (2025) · IEEE Transactions on Reliability · doi:10.1109/tr.2025.3528256 · Cited by 109 · see citing works

Multivariate Abnormal Detection for Industrial Control Systems Using 1D CNN and GRU

Xie, X., Wang, B., Wan, T., & Tang, W. (2020) · IEEE Access · doi:10.1109/access.2020.2993335 · Cited by 91 · see citing works

Anomaly Detection for Industrial Control Systems Using Sequence-to-Sequence Neural Networks

Kim, J., Yun, J.-H., & Kim, H. C. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-42048-2_1 · Cited by 72 · see citing works

Anomaly Detection for Water Treatment System based on Neural Network with Automatic Architecture OptimizationPreprint

Shalyga, D., Filonov, P., & Lavrentyev, A. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1807.07282 · Cited by 64 · see citing works

Lightweight Long Short-Term Memory Variational Auto-Encoder for Multivariate Time Series Anomaly Detection in Industrial Control Systems

Fährmann, D., Damer, N., Kirchbuchner, F., & Kuijper, A. (2022) · Sensors · doi:10.3390/s22082886 · Cited by 59 · see citing works

Multi-Objective Discrete Extremal Optimization of Variable-Length Blocks-Based CNN by Joint NAS and HPO for Intrusion Detection in IIoT

Lu, K., Huang, J., Zeng, G., Chen, M.-R., Geng, G., & Weng, J. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3545363 · Cited by 58 · see citing works

Physics-informed gated recurrent graph attention unit network for anomaly detection in industrial cyber-physical systems

Wu, W., Song, C., Zhao, J., & Xu, Z. (2023) · Information Sciences · doi:10.1016/j.ins.2023.01.136 · Cited by 56 · see citing works

Intrusion response systems for cyber-physical systems: A comprehensive survey

Bashendy, M., Tantawy, A., & Erradi, A. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102984 · Cited by 55 · see citing works

EGNN: Energy-efficient anomaly detection for IoT multivariate time series data using graph neural network

Guo, H., Zhou, Z., Zhao, D., & Gaaloul, W. (2023) · Future Generation Computer Systems · doi:10.1016/j.future.2023.09.028 · Cited by 53 · see citing works

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

Macas, M., & Wu, C. (2019) · International Conference on Machine Learning and Applications · doi:10.1109/icmla.2019.00212 · Cited by 51 · see citing works

A novel anomaly detection method for digital twin data using deconvolution operation with attention mechanism

Li, Z., Duan, M., Xiao, B., & Yang, S. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3231923 · Cited by 45 · see citing works

Anomaly detection for a water treatment system based on one-class neural network

Aboah Boateng, E., Bruce, J. W., & Talbert, D. A. (2022) · IEEE Access · doi:10.1109/access.2022.3218624 · Cited by 44 · see citing works

SUSAN: A Deep Learning based anomaly detection framework for sustainable industry

Gómez, Á. L. P., Maimó, L. F., Celdrán, A. H., & Clemente, F. J. G. (2023) · Sustainable Computing Informatics and Systems · doi:10.1016/j.suscom.2022.100842 · Cited by 34 · see citing works

Projected Gradient Descent Adversarial Attack and Its Defense on a Fault Diagnosis System

Ayas, M. Ş., Ayas, S., & Djouadi, S. M. (2022) · International Conference on Telecommunications and Signal Processing (TSP) · doi:10.1109/tsp55681.2022.9851334 · Cited by 29 · see citing works

CPS-based Threat Modeling for Critical Infrastructure Protection

Ding, J., Atif, Y., Andler, S. F., Lindström, B., & Jeusfeld, M. A. (2017) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/3152042.3152080 · Cited by 27 · see citing works

Anomaly Detection Using an Ensemble of Multi-Point LSTMs

Lee, G., Yoon, Y., & Lee, K. (2023) · Entropy · doi:10.3390/e25111480 · Cited by 20 · see citing works

Conditional normalizing flow for multivariate time series anomaly detection

Guan, S., He, Z., Ma, S., & Gao, M. (2023) · ISA Transactions · doi:10.1016/j.isatra.2023.09.002 · Cited by 19 · see citing works

Detection of Cyber Attacks on a Water Treatment Process

Al-Dhaheri, M., Zhang, P., & Mikhaylenko, D. (2022) · IFAC-PapersOnLine · doi:10.1016/j.ifacol.2022.07.204 · Cited by 12 · see citing works

A Causality-Inspired Approach for Anomaly Detection in a Water Treatment Testbed

Koutroulis, G., Mutlu, B., & Kern, R. (2022) · Sensors · doi:10.3390/s23010257 · Cited by 12 · see citing works

Computer Security

Katsikas, S. K., Cuppens, F., Cuppens-Boulahia, N., Lambrinoudakis, C., Kalloniatis, C., Mylopoulos, J., Antón, A. I., Gritzalis, S., Pallas, F., Pohle, J., et al. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-42048-2 · Cited by 6 · see citing works

Alarm-Budgeted Event-Level Evaluation Of Ics Anomaly Detection: Lessons From Swat And Wadi

Heydari, V., & Nyarko, K. (2026) · IEEE Access · doi:10.1109/access.2026.3659034 · Cited by 4 · see citing works

Towards ICS Defense-In-Depth: Evaluating Real-Time Deep Learning-Based Anomaly Detection within Programmable Logic Controllers

Dobrády, Z., Nagy, S., Oren, Y., Routtenberg, T., & Puzis, R. (2026) · International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST) · doi:10.1109/icest71230.2026.11623646

Real-time anomaly detection in distributed manufacturing: a high-resolution statistical SCADA framework

Al-Hija’a, A. A., Szekeres, B. J., & Andó, M. (2026) · The International Journal of Advanced Manufacturing Technology · doi:10.1007/s00170-026-18904-x

Design and Evaluation of Secure Telecommunications Architectures for Legacy Industrial Control Systems in Critical Infrastructure: A Doctoral Research Overview

Lara, R. C. H., & Lozano, M. A. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-41327-7_16

Anomaly detection; Industrial control systems; convolutional neural networksPreprint

Kravchik, M., & Shabtai, A. (2018) · arXiv (Cornell University) · Cited by 1 · see citing works

Detecting Cyberattacks in Industrial Control Systems Using Convolutional Neural NetworksPreprint

Kravchik, M., & Shabtai, A. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1806.08110 · Cited by 8 · see citing works

Multivariate Deep Neural Networks for Anomaly Detection in Water Distribution Systems

Tharsanee, R. M., Soundariya, R. S., Vishnupriya, B., Gopal, S. M. N., & Aswini, K. R. N. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-97-8476-9_16

Unsupervised Diffusion-Guided LSTM for Anomaly Detection in Water Distribution Networks

Rustam, F., Jurcut, A. D., & Salauddin, M. (2026) · IEEE Access · doi:10.1109/access.2026.3683296

Securing Industrial Water Networks: Event-Level Anomaly Detection in SCADA Telemetry

Sony, R. I. (2025) · Journal of Computer Science and Technology Studies · doi:10.32996/jcsts.2025.7.12.51