A survey of intrusion detection techniques for cyber-physical systems
Abstract
Pervasive healthcare systems, smart grids, and unmanned aircraft systems are examples of Cyber-Physical Systems (CPSs) that have become highly integrated in the modern world. As this integration deepens, the importance of securing these systems increases. In order to identify gaps and propose research directions in CPS intrusion detection research, we survey the literature of this area. Our approach is to classify modern CPS Intrusion Detection System (IDS) techniques based on two design dimensions: detection technique and audit material. We summarize advantages and drawbacks of each dimension’s options. We also summarize the most and least studied CPS IDS techniques in the literature and provide insight on the effectiveness of IDS techniques as they apply to CPSs. Finally, we identify gaps in CPS IDS research and suggest future research areas.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The focus of most of the surveys for CPS is on security and privacy.
“The focus of most of the surveys for CPS is on security and privacy (e.g., [84,85,93,96,102,112,113,119,124]).”
From A Systematic Review of Data Quality in CPS and IoT for Industry 4.0 (2023) · cites this paper as [119]
Anomaly detection can result in false alarm rate because it is difficult to find a correct model for general behaviour.
“However, this technique can result in false alarm rate because it is difficult to find a correct model for general behaviour [84].”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [84]
Cites
Cortes, C., & Vapnik, V. (1995) · Machine Learning · doi:10.1007/bf00994018 · Cited by 59,421 · see citing works
Lecture Notes in Computer Science 1205
(1999) · Industrial Robot the international journal of robotics research and application · doi:10.1108/ir.1999.04926fae.001 · Cited by 39,228 · see citing works
Cortes, C., & Vapnik, V. N. (1995) · Machine Learning · doi:10.1023/a:1022627411411 · Cited by 34,565 · see citing works
Rayward-Smith, V. J., Cormen, T. H., Leiserson, C. E., & Rivest, R. L. (1991) · Journal of the Operational Research Society · doi:10.2307/2583667 · Cited by 16,953 · see citing works
Chapelle, O., Schölkopf, B., & Zien, A. (2006) · The MIT Press eBooks · doi:10.7551/mitpress/9780262033589.001.0001 · Cited by 4,560 · see citing works
Bro: a system for detecting network intruders in real-time
Paxson, V. (1999) · Computer Networks · doi:10.1016/s1389-1286(99)00112-7 · Cited by 2,636 · see citing works
Outside the Closed World: On Using Machine Learning for Network Intrusion Detection
Sommer, R., & Paxson, V. (2010) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2010.25 · Cited by 2,316 · see citing works
Performance analysis of the CONFIDANT protocol
Buchegger, S., & Boudec, J. L. (2002) · doi:10.1145/513800.513828 · Cited by 1,498 · see citing works
Testing Intrusion detection systems
McHugh, J. (2000) · ACM Transactions on Privacy and Security · doi:10.1145/382912.382923 · Cited by 1,490 · see citing works
Activity Recognition in the Home Using Simple and Ubiquitous Sensors
Tapia, E. M., Intille, S. S., & Larson, K. (2004) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-24646-6_10 · Cited by 1,323 · see citing works
Principles of Information Security
Whitman, M. E., & Mattord, H. J. (2002) · DigitalCommons - Kennesaw State University (Kennesaw State University) · Cited by 995 · see citing works
Grossman, P. A. (1995) · doi:10.1007/978-1-349-13908-8_1 · Cited by 676 · see citing works
A Survey on Trust Management for Mobile Ad Hoc Networks
Cho, J.-H., Swami, A., & Chen, I.-R. (2010) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2011.092110.00088 · Cited by 672 · see citing works
Self-citationComparing anomaly-detection algorithms for keystroke dynamics
Killourhy, K. S., & Maxion, R. A. (2009) · 2009 IEEE/IFIP International Conference on Dependable Systems & Networks · doi:10.1109/dsn.2009.5270346 · Cited by 566 · see citing works
An Analysis of the 1999 DARPA/Lincoln Laboratory Evaluation Data for Network Anomaly Detection
Mahoney, M. V., & Chan, P. K. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-45248-5_13 · Cited by 536 · see citing works
Bao, F., Chen, I.-R., Chang, M., et al. (2012) · IEEE Transactions on Network and Service Management · doi:10.1109/tcomm.2012.031912.110179 · Cited by 453 · see citing works
Self-citationDistributed Intrusion Detection System in a Multi-Layer Network Architecture of Smart Grids
Zhang, Y., Wang, L., Sun, W., Green, R., & Alam, M. (2011) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2011.2159818 · Cited by 449 · see citing works
A revised taxonomy for intrusion-detection systems
Debar, H., Daciér, M., & Wespi, A. (2000) · Annals of Telecommunications · doi:10.1007/bf02994844 · Cited by 358 · see citing works
Using Model-based Intrusion Detection for SCADA Networks
Cheung, S. W., Dutertre, B., Fong, M. W., Lindqvist, U., Skinner, K., & Valdes, A. (2006) · Cited by 321 · see citing works
Unsupervised learning : foundations of neural computation
Hinton, G. E., & Sejnowski, T. J. (1999) · Cited by 270 · see citing works
A Multidimensional Critical State Analysis for Detecting Intrusions in SCADA Systems
Carcano, A., Coletta, A., Guglielmi, M., Masera, M., Nai Fovino, I., & Trombetta, A. (2011) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2010.2099234 · Cited by 259 · see citing works
Neural Network based Intrusion Detection System for critical infrastructures
Linda, O., Vollmer, T., & Manic, M. (2009) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2009.5178592 · Cited by 242 · see citing works
Cooperating security managers: a peer-based intrusion detection system
White, G. B., Fisch, E. A., & Pooch, U. W. (1996) · IEEE Network · doi:10.1109/65.484228 · Cited by 220 · see citing works
Dynamic Trust Management for Delay Tolerant Networks and Its Application to Secure Routing
Chen, I.-R., Bao, F., Chang, M., & Cho, J.-H. (2013) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2013.116 · Cited by 203 · see citing works
Self-citationEnhanced Reputation Mechanism for Mobile Ad Hoc Networks
Liu, J., & Issarny, V. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24747-0_5 · Cited by 189 · see citing works
On SCADA control system command and response injection and intrusion detection
Gao, W., Morris, T. H., Reaves, B., & Richey, D. (2010) · eCrime Researchers Summit (eCrime) · doi:10.1109/ecrime.2010.5706699 · Cited by 187 · see citing works
Effect of Intrusion Detection and Response on Reliability of Cyber Physical Systems
Mitchell, R., & Chen, I.-R. (2013) · IEEE Transactions on Reliability · doi:10.1109/tr.2013.2240891 · Cited by 184 · see citing works
Self-citationBehavior-Rule Based Intrusion Detection Systems for Safety Critical Smart Grid Applications
Mitchell, R., & Chen, I.-R. (2013) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2013.2258948 · Cited by 184 · see citing works
Self-citationAn Intrusion Detection System for IEC61850 Automated Substations
Premaratne, U. K., Samarabandu, J. K., Sidhu, T. S., Beresh, R., & Tan, J. (2010) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2010.2050076 · Cited by 159 · see citing works
An Experimental Study of Hierarchical Intrusion Detection for Wireless Industrial Sensor Networks
Shin, S., Kwon, T., Jo, G.-Y., Park, Y.-M., & Rhy, H. (2010) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2010.2051556 · Cited by 156 · see citing works
Modbus/DNP3 State-Based Intrusion Detection System
Fovino, I. N., Carcano, A., Murel, T. D. L., Trombetta, A., & Masera, M. (2010) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2010.86 · Cited by 153 · see citing works
Experiences with Specification-Based Intrusion Detection
Uppuluri, P., & Sekar, R. (2001) · Lecture notes in computer science · doi:10.1007/3-540-45474-8_11 · Cited by 152 · see citing works
ADEPTS: Adaptive Intrusion Response Using Attack Graphs in an E-Commerce Environment
Foo, B., Wu, Y., Mao, Y.-C., et al. (2005) · IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) · doi:10.1109/dsn.2005.17 · Cited by 146 · see citing works
Modeling and analysis of trust management with trust chain optimization in mobile ad hoc networks
Cho, J.-H., Swami, A., & Chen, I.-R. (2011) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2011.03.016 · Cited by 124 · see citing works
Self-citationTrust-Based Intrusion Detection in Wireless Sensor Networks
Bao, F., Chen, I.-R., Chang, M., et al. (2011) · International Conference on Communications · doi:10.1109/icc.2011.5963250 · Cited by 122 · see citing works
Self-citationTime-based intrusion detection in cyber-physical systems
Zimmer, C. J., Bhat, B., Mueller, F., et al. (2010) · ACM/IEEE International Conference on Cyber-Physical Systems (ICCPS) · doi:10.1145/1795194.1795210 · Cited by 110 · see citing works
Tsang, C.-H., & Kwong, S. (2006) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit.2005.1600609 · Cited by 107 · see citing works
Safeguarding SCADA Systems with Anomaly Detection
Bigham, J., Gamez, D., & Lü, N. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-45215-7_14 · Cited by 94 · see citing works
N-Gram against the Machine: On the Feasibility of the N-Gram Network Analysis for Binary Protocols
Hadžiosmanović, D., Simionato, L., Bolzoni, D., Zambon, E., & Etalle, S. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-33338-5_18 · Cited by 91 · see citing works
A distributed intrusion detection system for resource-constrained devices in ad-hoc networks
Lauf, A. P., Peters, R. A., & Robinson, W. H. (2009) · Ad Hoc Networks · doi:10.1016/j.adhoc.2009.08.002 · Cited by 88 · see citing works
Trust Management for Encounter-Based Routing in Delay Tolerant Networks
Chen, I.-R., Bao, F., Chang, M., et al. (2010) · IEEE Global Telecommunications Conference (GLOBECOM) · doi:10.1109/glocom.2010.5683235 · Cited by 83 · see citing works
Self-citationThe Design and Implementation of Host-Based Intrusion Detection System
Ou, Y.-J., Lin, Y., Zhang, Y., et al. (2010) · International Symposium on Intelligent Information Technology and Security Informatics · doi:10.1109/iitsi.2010.127 · Cited by 79 · see citing works
Chen, I.-R., Speer, A. P., & Eltoweissy, M. (2010) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2009.54 · Cited by 79 · see citing works
Self-citationKillourhy, K. S., & Maxion, R. A. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-15512-3_14 · Cited by 76 · see citing works
Verba, J., & Milvich, M. (2008) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2008.4534498 · Cited by 72 · see citing works
Al-Hamadi, H., & Chen, I.-R. (2013) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2013.043013.120282 · Cited by 69 · see citing works
Self-citationCho, J.-H., Chen, I.-R., & Feng, P.-G. (2010) · IEEE Transactions on Reliability · doi:10.1109/tr.2010.2040534 · Cited by 67 · see citing works
Self-citationState-Based Network Intrusion Detection Systems for SCADA Protocols: A Proof of Concept
Carcano, A., Fovino, I. N., Masera, M., & Trombetta, A. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-14379-3_12 · Cited by 66 · see citing works
Hadeli, H., Schierholz, R., Braendle, M., & Tuduce, C. (2009) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2009.5347134 · Cited by 66 · see citing works
Cho, J.-H., Swami, A., & Chen, I.-R. (2009) · doi:10.1109/cse.2009.68 · Cited by 65 · see citing works
Self-citationIntrusion Detection and Event Monitoring in SCADA Networks
Oman, P., & Phillips, M. (2007) · IFIP International Federation for Information Processing · doi:10.1007/978-0-387-75462-8_12 · Cited by 62 · see citing works
Cyber-Critical Infrastructure Protection Using Real-Time Payload-Based Anomaly Detection
Düssel, P., Gehl, C., Laskov, P., Bußer, J.-U., Stoermann, C., & Kästner, J. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-14379-3_8 · Cited by 62 · see citing works
Intrusion Detection in SCADA Networks
Barbosa, R. R. R., & Pras, A. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-13986-4_23 · Cited by 61 · see citing works
Li, Y., & Chen, I.-R. (2010) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2010.166 · Cited by 57 · see citing works
Self-citationWhy did my detector do that?!: predicting keystroke-dynamics error rates
Killourhy, K. S., & Maxion, R. A. (2010) · Cited by 55 · see citing works
On the reliability of AI planning software in real-time applications
Chen, I.-R., Bastani, F., & Tsao, T. (1995) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/69.368522 · Cited by 54 · see citing works
Self-citationA Distributed Architecture for Online Power Systems Security Analysis
Santo, M. D., Vaccaro, A., Villacci, D., & Zimeo, E. (2004) · IEEE Transactions on Industrial Electronics · doi:10.1109/tie.2004.837862 · Cited by 53 · see citing works
Hinton, G. E., & Sejnowski, T. J. (1999) · Cited by 50 · see citing works
Effect of artificial-intelligence planning-procedures on system reliability
Chen, I.-R., & Bastani, F. (1991) · IEEE Transactions on Reliability · doi:10.1109/24.85458 · Cited by 45 · see citing works
Self-citationA clustering approach to wireless network intrusion detection
Zhong, S. S., Khoshgoftaar, T. M., & Nath, S. (2005) · Proceedings - International Conference on Tools with Artificial Intelligence, TAI · doi:10.1109/ictai.2005.5 · Cited by 45 · see citing works
Gu, B., & Chen, I.-R. (2005) · Mobile Networks and Applications · doi:10.1007/s11036-005-1557-x · Cited by 44 · see citing works
Self-citationPerformance Evaluation of Forwarding Strategies for Location Management in Mobile Networks
Chen, I. R. (1998) · The Computer Journal · doi:10.1093/comjnl/41.4.243 · Cited by 43 · see citing works
Self-citationReliability of systems with fuzzy-failure criterion
Bastani, F., Chen, I.-R., & Tsao, T. (2002) · Proceedings, annual Reliability and Maintainability Symposium/Proceedings. Annual Reliability and Maintainability Symposium · doi:10.1109/rams.1994.291149 · Cited by 41 · see citing works
Self-citationUsing data mining to discover signatures in network-based intrusion detection
Han, H. L., Lu, X.-L., & Ren, L.-Y. (2003) · International Conference on Machine Learning and Cybernetics · doi:10.1109/icmlc.2002.1176698 · Cited by 41 · see citing works
Analyzing dynamic voting using Petri nets
Chen, I.-R., & Wang, D.-C. (2002) · Proceedings/Proceedings - Symposium on Reliable Distributed Systems · doi:10.1109/reldis.1996.559695 · Cited by 38 · see citing works
Self-citationAnalysis of Replicated Data with Repair Dependency
Chen, I.-R. (1996) · The Computer Journal · doi:10.1093/comjnl/39.9.767 · Cited by 37 · see citing works
Self-citationZhang, Y., Wang, L., Sun, W., Green, R., & Alam, M. (2011) · IEEE Power Engineering Society General Meeting · doi:10.1109/pes.2011.6039697 · Cited by 37 · see citing works
Proceedings of 8th International Conference on Tools with Artificial Intelligence
(1996) · Proceedings - International Conference on Tools with Artificial Intelligence, TAI · doi:10.1109/tai.1996.560387 · Cited by 36 · see citing works
Specification based intrusion detection for unmanned aircraft systems
Mitchell, R., & Chen, I.-R. (2012) · doi:10.1145/2248326.2248334 · Cited by 34 · see citing works
Self-citationThe affect of fuzzification on neural networks intrusion detection system
Alheeti, K. M. A., Samawi, V. W., & Rababaa, M. S. A. (2009) · IEEE Conference on Industrial Electronics and Applications (ICIEA) · doi:10.1109/iciea.2009.5138399 · Cited by 33 · see citing works
Energy efficient learning solution for intrusion detection in Wireless Sensor Networks
Misra, S., Krishna, P. V., & Abraham, K. I. (2010) · doi:10.1109/comsnets.2010.5431976 · Cited by 29 · see citing works
Gong, Y., Mabu, S., Chen, C., et al. (2009) · 2009 ICCAS-SICE · Cited by 28 · see citing works
Amini, M.-R., & Usunier, N. (2015) · Springer eBooks · doi:10.1007/978-3-319-15726-9_3 · Cited by 26 · see citing works
On Survivability of Mobile Cyber Physical Systems with Intrusion Detection
Mitchell, R., & Chen, I.-R. (2012) · Wireless Personal Communications · doi:10.1007/s11277-012-0528-3 · Cited by 25 · see citing works
Self-citationHost-based anomaly detection for pervasive medical systems
Asfaw, B., Bekele, D., Eshete, B., Villafiorita, A., & Weldemariam, K. (2010) · International Conference on Risks and Security of Internet and Systems (CRiSIS) · doi:10.1109/crisis.2010.5764923 · Cited by 24 · see citing works
Xiao, K., Chen, N., Ren, S., Shen, L., Sun, X., Kwiat, K., & Macalik, M. (2007) · International Workshop on Software Engineering for Secure Systems (SESS) · doi:10.1109/sess.2007.3 · Cited by 23 · see citing works
A hierarchical performance model for intrusion detection in cyber-physical systems
Mitchell, R., & Chen, I.-R. (2011) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc.2011.5779477 · Cited by 22 · see citing works
Self-citationBehavior Rule Based Intrusion Detection for Supporting Secure Medical Cyber Physical Systems
Mitchell, R., & Chen, I.-R. (2012) · Proceedings/Proceedings - International Conference on Computer Communications and Networks · doi:10.1109/icccn.2012.6289192 · Cited by 21 · see citing works
Self-citationLearning intrusion detection based on adaptive bayesian algorithm
Farid, D. M., & Rahman, M. Z. (2008) · International Conference on Computer and Information Technology (ICCIT) · doi:10.1109/iccitechn.2008.4803036 · Cited by 21 · see citing works
Smart grid monitoring for intrusion and fault detection with new locally optimum testing procedures
He, Q., & Blum, R. S. (2011) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp.2011.5947192 · Cited by 20 · see citing works
Wireless Intrusion Detection System Using a Lightweight Agent
Haddadi, F., & Sarram, M. A. (2010) · doi:10.1109/iccnt.2010.26 · Cited by 19 · see citing works
An Unsupervised Intrusion Detection Method Combined Clustering with Chaos Simulated Annealing
Ni, L., & Zheng, H. (2007) · International Conference on Machine Learning and Cybernetics · doi:10.1109/icmlc.2007.4370702 · Cited by 14 · see citing works
Survey on the Research of Cyber-Physical Systems(CPS)
Zhang, J. (2011) · Cited by 8 · see citing works
A Product Machine Model for Anomaly Detection of Interposition Attacks on Cyber-Physical Systems
Bellettini, C., & Rrushi, J. L. (2008) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-09699-5_19 · Cited by 7 · see citing works
Quantifying resiliency and detection latency of intrusion detection structures
Striki, M., Manousakis, K., Kindred, D., et al. (2009) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2009.5379997 · Cited by 7 · see citing works
The Research of Bayesian Classifier Algorithms in Intrusion Detection System
Yang-xia, L. (2010) · International Conference on E-Business and E-Government · doi:10.1109/icee.2010.550 · Cited by 5 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
A survey of intrusion detection in Internet of Things
Zarpelão, B. B., Miani, R. S., Kawakani, C. T., & de Alvarenga, S. C. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.02.009 · Cited by 1,022 · see citing works
A survey of physics-based attack detection in cyber-physical systems
Giraldo, J., Urbina, D., Cardenas, A., Valente, J., Faisal, M., Ruths, J., Tippenhauer, N. O., Sandberg, H., & Candell, R. (2019) · ACM Computing Surveys · doi:10.1145/3203245 · Cited by 535 · see citing works
Cyber physical systems security: analysis, challenges and solutions
Ashibani, Y., & Mahmoud, Q. H. (2017) · Computers & Security · doi:10.1016/j.cose.2017.04.005 · Cited by 447 · see citing works
Chained Anomaly Detection Models for Federated Learning: An Intrusion Detection Case Study
Preuveneers, D., Rimmer, V., Tsingenopoulos, I., Spooren, J., Joosen, W., & Ilie-Zudor, E. (2018) · Applied Sciences · doi:10.3390/app8122663 · Cited by 323 · see citing works
Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations
Yaacoub, J.-P. A., Noura, H. N., Salman, O., & Chehab, A. (2022) · International Journal of Information Security · doi:10.1007/s10207-021-00545-8 · Cited by 320 · see citing works
Securing internet of medical things systems: limitations, issues and recommendations
Yaacoub, J.-P. A., Noura, M., Noura, H. N., Salman, O., Yaacoub, E., Couturier, R., & Chehab, A. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2019.12.028 · Cited by 308 · see citing works
Security and privacy in cyber-physical systems: A survey of surveys
Giraldo, J., Sarkar, E., Cardenas, A. A., Maniatakos, M., & Kantarcioglu, M. (2017) · IEEE Design & Test · doi:10.1109/mdat.2017.2709310 · Cited by 289 · see citing works
Architecture and security of SCADA systems: A review
Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261 · see citing works
Cybersecurity of industrial cyber-physical systems: A review
Kayan, H., Nunes, M., Rana, O., Burnap, P., & Perera, C. (2022) · ACM Computing Surveys · doi:10.1145/3510410 · Cited by 261 · see citing works
Safety and Security in Cyber-Physical Systems and Internet-of-Things Systems
Wolf, M., & Serpanos, D. (2018) · Proceedings of the IEEE · doi:10.1109/jproc.2017.2781198 · Cited by 250 · see citing works
Kravchik, M., & Shabtai, A. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3050101 · Cited by 224 · see citing works
A survey of intrusion detection on industrial control systems
Hu, Y., Yang, A., Li, H., Sun, Y., & Sun, L. (2018) · International Journal of Distributed Sensor Networks · doi:10.1177/1550147718794615 · Cited by 185 · see citing works
Cyber security of critical infrastructures
Maglaras, L. A., Kim, K.-H., Janicke, H., Ferrag, M. A., Rallis, S., Fragkou, P., Maglaras, A., & Cruz, T. J. (2018) · ICT Express · doi:10.1016/j.icte.2018.02.001 · Cited by 178 · see citing works
Hao, W., Yang, T., & Yang, Q. (2023) · IEEE Transactions on Automation Science and Engineering · doi:10.1109/tase.2021.3073396 · Cited by 143 · see citing works
Model-based security engineering for cyber-physical systems: A systematic mapping study
Nguyen, P. H., Ali, S., & Yue, T. (2017) · Information and Software Technology · doi:10.1016/j.infsof.2016.11.004 · Cited by 107 · see citing works
A Systematic Review of Data Quality in CPS and IoT for Industry 4.0
Goknil, A., Nguyen, P., Sen, S., Politaki, D., Niavis, H., Pedersen, K. J., Suyuthi, A., Anand, A., & Ziegenbein, A. (2023) · ACM Computing Surveys · doi:10.1145/3593043 · Cited by 68 · see citing works
A Systematic Analysis of Enhancing Cyber Security Using Deep Learning for Cyber Physical Systems
Gaba, S., Budhiraja, I., Kumar, V., Martha, S., Khurmi, J., Singh, A., Singh, K. K., Askar, S. S., & Abouhawwash, M. (2024) · IEEE Access · doi:10.1109/access.2023.3349022 · Cited by 62 · see citing works
Insider threat detection in cyber-physical systems: a systematic literature review
Al-Mhiqani, M. N., Alsboui, T., Al-Shehari, T., Abdulkareem, K. H., Ahmad, R., & Mohammed, M. A. (2024) · Computers and Electrical Engineering · doi:10.1016/j.compeleceng.2024.109489 · Cited by 53 · see citing works
Towards Quantum-Enhanced Machine Learning for Network Intrusion Detection
Gouveia, A., & Correia, M. (2020) · 2020 IEEE 19th International Symposium on Network Computing and Applications (NCA) · doi:10.1109/nca51143.2020.9306691 · Cited by 52 · see citing works
ADT: Time series anomaly detection for cyber-physical systems via deep reinforcement learning
Yang, X., Howley, E., & Schukat, M. (2024) · Computers & Security · doi:10.1016/j.cose.2024.103825 · Cited by 47 · see citing works
Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems
Xue, Y., Pan, J., Geng, Y., Yang, Z., Liu, M., & Deng, R. (2024) · IEEE Transactions on Industrial Cyber-Physical Systems · doi:10.1109/ticps.2024.3406505 · Cited by 43 · see citing works
Krzysztoń, M., & Marks, M. (2020) · Simulation Modelling Practice and Theory · doi:10.1016/j.simpat.2019.102041 · Cited by 25 · see citing works
Add-On Anomaly Threshold Technique for Improving Unsupervised Intrusion Detection on SCADA Data
Almalawi, A., Fahad, A., Tari, Z., Khan, A. I., Alzahrani, N., Bakhsh, S. T., Alassafi, M. O., Alshdadi, A., & Qaiyum, S. (2020) · Electronics · doi:10.3390/electronics9061017 · Cited by 14 · see citing works
Improving Method of Anomaly Detection Performance for Industrial IoT Environment
Kim, J., Shin, J., Park, K.-W., & Taek Seo, J. (2022) · Computers, Materials & Continua · doi:10.32604/cmc.2022.026619 · Cited by 8 · see citing works
Abnormal Behavioral Pattern Detection in Closed-Loop Robotic Systems for Zero-Day Deceptive Threats
Gorbenko, A., & Popov, V. (2020) · 2020 International Conference on Industrial Engineering, Applications and Manufacturing (ICIEAM) · doi:10.1109/icieam48468.2020.9112054 · Cited by 9 · see citing works
- Authors
- Mitchell, R., & Chen, I.-R.
- Affiliations
- Virginia Tech (US)
- ORCID
- Chen, Ing-Ray
- Venue
- ACM Computing Surveys
- Published
- 2014-03
- Volume
- 46
- Issue
- 4
- Pages
- 1-29
- ISSN
- 0360-0300 (ISSN-L)
- 1557-7341
- OpenAlex
- W2161630727
- Cited by
- 768
- References
- 88
- Citations by year
- 2026: 73 · 2025: 58 · 2024: 51 · 2023: 62 · 2022: 68 · 2021: 102 · 2020: 80 · 2019: 84 · 2018: 80 · 2017: 56 · 2016: 27 · 2015: 17 · 2014: 8 · 2013: 1
- FWCI
- 41.40
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- ACM Computing Surveys (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Biomedical Engineering › Artificial Immune Systems Applications
- Keywords
- intrusion detection systems, cyber-physical systems, smart grid, unmanned aircraft systems, IDS classification, research gaps, cyber-physical security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
