{"id":"https://openalex.org/W2133763271","doi":"https://doi.org/10.1109/cpre.2011.6035632","title":"How would we know?","display_name":"How would we know?","publication_year":2011,"publication_date":"2011-04-01","ids":{"openalex":"https://openalex.org/W2133763271","doi":"https://doi.org/10.1109/cpre.2011.6035632","mag":"2133763271"},"language":"en","primary_location":{"id":"doi:10.1109/cpre.2011.6035632","doi":"https://doi.org/10.1109/cpre.2011.6035632","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cpre.2011.6035632","pdf_url":null,"source":{"id":"https://openalex.org/S4306418003","display_name":"Conference for Protective Relay Engineers","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 64th Annual Conference for Protective Relay Engineers","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111708470","display_name":"Edmund O. Schweitzer","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405273072","display_name":"Schweitzer Engineering Laboratories (United States)","ror":"https://ror.org/057yrm276","country_code":"US","type":"company","lineage":["https://openalex.org/I4405273072"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edmund O. Schweitzer","raw_affiliation_strings":["Schweitzer Engineering Laboratories, Inc., Canada","SCHWEITZER ENGINEERING LABORATORIES, INC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Schweitzer Engineering Laboratories, Inc., Canada","institution_ids":["https://openalex.org/I4405273072"]},{"raw_affiliation_string":"SCHWEITZER ENGINEERING LABORATORIES, INC","institution_ids":["https://openalex.org/I4405273072"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089744697","display_name":"David E. Whitehead","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405273072","display_name":"Schweitzer Engineering Laboratories (United States)","ror":"https://ror.org/057yrm276","country_code":"US","type":"company","lineage":["https://openalex.org/I4405273072"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Whitehead","raw_affiliation_strings":["Schweitzer Engineering Laboratories, Inc., Canada","SCHWEITZER ENGINEERING LABORATORIES, INC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Schweitzer Engineering Laboratories, Inc., Canada","institution_ids":["https://openalex.org/I4405273072"]},{"raw_affiliation_string":"SCHWEITZER ENGINEERING LABORATORIES, INC","institution_ids":["https://openalex.org/I4405273072"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023534882","display_name":"Allen Risley","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405273072","display_name":"Schweitzer Engineering Laboratories (United States)","ror":"https://ror.org/057yrm276","country_code":"US","type":"company","lineage":["https://openalex.org/I4405273072"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Allen Risley","raw_affiliation_strings":["Schweitzer Engineering Laboratories, Inc., Canada","SCHWEITZER ENGINEERING LABORATORIES, INC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Schweitzer Engineering Laboratories, Inc., Canada","institution_ids":["https://openalex.org/I4405273072"]},{"raw_affiliation_string":"SCHWEITZER ENGINEERING LABORATORIES, INC","institution_ids":["https://openalex.org/I4405273072"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011533957","display_name":"Rhett Smith","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405273072","display_name":"Schweitzer Engineering Laboratories (United States)","ror":"https://ror.org/057yrm276","country_code":"US","type":"company","lineage":["https://openalex.org/I4405273072"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rhett Smith","raw_affiliation_strings":["Schweitzer Engineering Laboratories, Inc., Canada","SCHWEITZER ENGINEERING LABORATORIES, INC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Schweitzer Engineering Laboratories, Inc., Canada","institution_ids":["https://openalex.org/I4405273072"]},{"raw_affiliation_string":"SCHWEITZER ENGINEERING LABORATORIES, INC","institution_ids":["https://openalex.org/I4405273072"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4405273072"],"apc_list":null,"apc_paid":null,"fwci":1.3508,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.79331097,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"310","last_page":"321"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.7269999980926514},{"id":"https://openalex.org/keywords/power-systems","display_name":"power systems","score":0.7820000052452087},{"id":"https://openalex.org/keywords/critical-infrastructure-security","display_name":"critical infrastructure security","score":0.8920000195503235},{"id":"https://openalex.org/keywords/power-system-monitoring-and-control","display_name":"power system monitoring and control","score":0.5770000219345093},{"id":"https://openalex.org/keywords/access-logs","display_name":"access logs","score":0.7570000290870667},{"id":"https://openalex.org/keywords/syslog","display_name":"syslog","score":0.8799999952316284},{"id":"https://openalex.org/keywords/precision-timing","display_name":"precision timing","score":0.6449999809265137},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.5649999976158142}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.8273310661315918},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7764207124710083},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6793388724327087},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.6643902063369751},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6106970310211182},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.5970669984817505},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.562129557132721},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.4931187331676483},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.45553281903266907},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4293457269668579},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.4136240482330322},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.40560048818588257},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4038253724575043},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.383549302816391},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.32831698656082153},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.19447776675224304},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.13082367181777954},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cpre.2011.6035632","doi":"https://doi.org/10.1109/cpre.2011.6035632","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cpre.2011.6035632","pdf_url":null,"source":{"id":"https://openalex.org/S4306418003","display_name":"Conference for Protective Relay Engineers","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 64th Annual Conference for Protective Relay Engineers","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6773999929428101,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W48497080","https://openalex.org/W653955946","https://openalex.org/W1532383469","https://openalex.org/W1567792833","https://openalex.org/W2109884590","https://openalex.org/W2117223931","https://openalex.org/W2320130105","https://openalex.org/W2325916121","https://openalex.org/W2515955025","https://openalex.org/W6699623257"],"related_works":["https://openalex.org/W3158763619","https://openalex.org/W1514392214","https://openalex.org/W2154971967","https://openalex.org/W4406725970","https://openalex.org/W4285142628","https://openalex.org/W4387144178","https://openalex.org/W7095854773","https://openalex.org/W2772892608","https://openalex.org/W2975451204","https://openalex.org/W2525362053"],"abstract_inverted_index":{"Modern":[0],"power":[1,43,77],"system":[2,263],"monitoring,":[3],"protection,":[4],"automation,":[5],"and":[6,11,45,58,92,94,97,102,118,138,154,162,198,234,244,256],"control":[7,119,122],"rely":[8],"on":[9],"communications":[10],"computing":[12],"technology.":[13],"Along":[14],"with":[15],"the":[16,71,106,158,176,179,186,196,224,227,268,272,285],"benefits":[17],"of":[18,24,52,84,109,148,178,188,270],"these":[19],"technologies":[20],"come":[21],"some":[22,262,278],"risks":[23],"electronic":[25],"or":[26],"cyber":[27,53,85],"attack.":[28],"There":[29],"are":[30,60,90,99,135],"legitimate":[31],"concerns":[32],"about":[33],"how":[34,221],"inadequate":[35],"information":[36,251],"security":[37,54,86],"(cyber":[38],"security)":[39],"is":[40,127],"affecting":[41],"electric":[42,76],"systems":[44,214,235],"other":[46,155],"critical":[47,67,120],"infrastructure.":[48],"As":[49],"a":[50,82,146,165,192],"result":[51],"threats,":[55],"both":[56],"governments":[57],"industry":[59],"putting":[61],"forth":[62],"significant":[63],"effort":[64],"to":[65,104,114,174,210,222],"improve":[66],"infrastructure":[68,121],"security.":[69],"In":[70,181],"United":[72],"States,":[73],"for":[74],"example,":[75],"utilities":[78],"must":[79],"now":[80],"follow":[81],"set":[83],"standards.":[87],"Security":[88],"practices":[89],"evolving":[91],"improving,":[93],"new":[95],"products":[96],"architectures":[98],"being":[100,136],"developed":[101],"applied":[103],"counter":[105,168],"ever-increasing":[107],"sophistication":[108],"attacker":[110,201],"exploits":[111],"that":[112,266,280],"attempt":[113],"access,":[115],"inspect,":[116],"manipulate,":[117],"systems.":[123],"A":[124],"fundamental":[125],"question":[126,225,273,286],"\u201cHow":[128,287],"would":[129,143,202,288],"we":[130,207,276,289],"know":[131],"if":[132],"our":[133,213],"assets":[134],"explored":[137],"exploited?\u201d":[139],"An":[140],"attack":[141],"strategy":[142],"likely":[144,203],"include":[145,241],"number":[147],"initial":[149],"probes,":[150],"data":[151],"collection,":[152],"tests,":[153],"activities":[156,177],"as":[157],"adversary":[159],"develops":[160],"intelligence":[161],"capabilities":[163],"against":[164],"target.":[166],"To":[167],"this":[169,183],"strategy,":[170],"asset":[171],"owners":[172],"need":[173],"detect":[175],"intruder.":[180],"part,":[182],"paper":[184,219],"takes":[185],"perspective":[187],"an":[189,200,294],"engineer":[190],"investigating":[191],"FICTITIOUS":[193],"incident,":[194],"using":[195,226],"records":[197],"\u201cfingerprints\u201d":[199],"leave":[204],"behind,":[205],"which":[206],"can":[208],"use":[209],"identify":[211],"when":[212],"have":[215],"been":[216],"compromised.":[217],"The":[218],"explains":[220],"answer":[223,284],"many":[228],"tools":[229,240],"readily":[230],"available":[231],"in":[232,236],"devices":[233],"service":[237],"today.":[238],"These":[239],"access":[242],"logs":[243],"syslogs,":[245],"event":[246],"reports,":[247,250],"sequential":[248],"events":[249],"at":[252],"adjacent":[253],"stations,":[254],"alarms,":[255],"precision":[257],"timing.":[258],"We":[259],"also":[260,292],"investigate":[261],"design":[264],"choices":[265],"make":[267,277,293],"process":[269],"answering":[271],"easier.":[274],"Finally,":[275],"recommendations":[279],"not":[281],"only":[282],"help":[283],"know?\u201d":[290],"but":[291],"adversary's":[295],"job":[296],"much":[297],"more":[298],"difficult.":[299]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2016-06-24T00:00:00"}