{"id":"https://openalex.org/W4396941583","doi":"https://doi.org/10.1109/tii.2024.3393528","title":"ICS Anomaly Detection Based on Sensor Patterns and Actuator Rules in Spatiotemporal Dependency","display_name":"ICS Anomaly Detection Based on Sensor Patterns and Actuator Rules in Spatiotemporal Dependency","publication_year":2024,"publication_date":"2024-05-15","ids":{"openalex":"https://openalex.org/W4396941583","doi":"https://doi.org/10.1109/tii.2024.3393528"},"language":"en","primary_location":{"id":"doi:10.1109/tii.2024.3393528","doi":"https://doi.org/10.1109/tii.2024.3393528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2024.3393528","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-b","jufo-3","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100743431","display_name":"Jun Cai","orcid":"https://orcid.org/0000-0003-3293-6658","observed_orcids":["https://orcid.org/0000-0003-3293-6658"]},"institutions":[{"id":"https://openalex.org/I4210122543","display_name":"Guangdong Polytechnic Normal University","ror":"https://ror.org/02pcb5m77","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210122543"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Cai","raw_affiliation_strings":["School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3293-6658","affiliations":[{"raw_affiliation_string":"School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China","institution_ids":["https://openalex.org/I4210122543"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080313622","display_name":"Zeheng Wei","orcid":"https://orcid.org/0009-0001-6462-7908","observed_orcids":["https://orcid.org/0009-0001-6462-7908"]},"institutions":[{"id":"https://openalex.org/I4210122543","display_name":"Guangdong Polytechnic Normal University","ror":"https://ror.org/02pcb5m77","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210122543"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zeheng Wei","raw_affiliation_strings":["School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0001-6462-7908","affiliations":[{"raw_affiliation_string":"School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China","institution_ids":["https://openalex.org/I4210122543"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017488654","display_name":"Jianzhen Luo","orcid":"https://orcid.org/0000-0002-5123-1306","observed_orcids":["https://orcid.org/0000-0002-5123-1306"]},"institutions":[{"id":"https://openalex.org/I4210122543","display_name":"Guangdong Polytechnic Normal University","ror":"https://ror.org/02pcb5m77","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210122543"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianzhen Luo","raw_affiliation_strings":["School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5123-1306","affiliations":[{"raw_affiliation_string":"School of Cyber Security, Guangdong Polytechnic Normal University, Guangzhou, China","institution_ids":["https://openalex.org/I4210122543"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210122543"],"apc_list":{"value":2495,"currency":"USD","value_usd":2495},"apc_paid":null,"fwci":5.4063,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.96421883,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"20","issue":"8","first_page":"10647","last_page":"10656"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.46000000834465027,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.46000000834465027,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.45969998836517334,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10876","display_name":"Fault Detection and Control Systems","score":0.034299999475479126,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-control-systems","display_name":"industrial control systems","score":0.9330000281333923},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.8370000123977661},{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.902999997138977},{"id":"https://openalex.org/keywords/spatiotemporal-dependencies","display_name":"spatiotemporal dependencies","score":0.9300000071525574}],"concepts":[{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.7614452838897705},{"id":"https://openalex.org/C172707124","wikidata":"https://www.wikidata.org/wiki/Q423488","display_name":"Actuator","level":2,"score":0.6975455284118652},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6413916349411011},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5729649662971497},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5694736838340759},{"id":"https://openalex.org/C184720557","wikidata":"https://www.wikidata.org/wiki/Q7825049","display_name":"Topology (electrical circuits)","level":2,"score":0.5278021097183228},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4864354133605957},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.4856235086917877},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47152194380760193},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.4672180414199829},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.46143007278442383},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.43712225556373596},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3822749853134155},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3536566495895386},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3240131139755249},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2629028558731079},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.20282825827598572},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.12863287329673767},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.10171490907669067},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.07892227172851562},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C111368507","wikidata":"https://www.wikidata.org/wiki/Q43518","display_name":"Oceanography","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tii.2024.3393528","doi":"https://doi.org/10.1109/tii.2024.3393528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2024.3393528","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-b","jufo-3","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320324202","display_name":"Guangdong Science and Technology Department","ror":"https://ror.org/00tjzgn92"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2135123910","https://openalex.org/W2604247107","https://openalex.org/W2765308781","https://openalex.org/W2768947629","https://openalex.org/W2896487165","https://openalex.org/W3041393010","https://openalex.org/W3081497074","https://openalex.org/W3119781401","https://openalex.org/W3128032258","https://openalex.org/W3128634608","https://openalex.org/W3151000187","https://openalex.org/W3157286395","https://openalex.org/W3163273607","https://openalex.org/W3164160032","https://openalex.org/W3169450514","https://openalex.org/W3170937175","https://openalex.org/W3190748826","https://openalex.org/W3199473923","https://openalex.org/W3203444100","https://openalex.org/W3213426959","https://openalex.org/W3215290057","https://openalex.org/W3215878109","https://openalex.org/W4205236679","https://openalex.org/W4206805025","https://openalex.org/W4256497308","https://openalex.org/W4285299229","https://openalex.org/W4290943650","https://openalex.org/W4291034555","https://openalex.org/W4313898457","https://openalex.org/W4317821550","https://openalex.org/W4378697395","https://openalex.org/W6794315554"],"related_works":["https://openalex.org/W4407315417","https://openalex.org/W4391725261","https://openalex.org/W3000606509","https://openalex.org/W4385478240","https://openalex.org/W4417169707","https://openalex.org/W4402030095","https://openalex.org/W4404512982","https://openalex.org/W3035727237","https://openalex.org/W7125936349","https://openalex.org/W7164211900"],"abstract_inverted_index":{"Data-driven":[0],"methods,":[1],"such":[2],"as":[3],"deep":[4],"learning,":[5],"are":[6],"widely":[7],"adopted":[8],"to":[9,18,140,150],"detect":[10],"cyberattacks":[11],"for":[12,88,103,113],"Industrial":[13],"control":[14],"systems":[15],"(ICSs).":[16],"Due":[17],"the":[19,33,38,115,129],"neglect":[20],"of":[21,148],"entity":[22],"spatial":[23],"relationships":[24],"(ESR),":[25],"however,":[26],"there":[27],"is":[28],"a":[29,71],"potential":[30],"discrepancy":[31],"between":[32],"learned":[34],"device":[35],"topology":[36,100,106],"and":[37,50,82,91,107],"real":[39],"physical":[40],"process.":[41],"Meanwhile,":[42],"existing":[43],"methods":[44],"confuse":[45],"sensor":[46,80],"patterns,":[47],"actuator":[48,83],"rules,":[49,84],"some":[51],"interference":[52],"within":[53],"spatiotemporal":[54],"dependence,":[55],"suffering":[56],"from":[57],"undetected":[58,116,137,146],"attack":[59,109,117],"issue.":[60,118],"To":[61],"achieve":[62],"precise":[63],"detection":[64,75],"without":[65],"using":[66],"design":[67],"knowledge,":[68],"we":[69,96],"propose":[70,97],"sensor-actuator":[72],"separated":[73],"anomaly":[74],"method":[76,102,112],"(SA2)":[77],"that":[78,123],"distinguishes":[79],"patterns":[81],"constructing":[85],"prediction":[86],"models":[87],"sensors":[89],"(PM-SEN)":[90],"actuators":[92],"(PM-ACT)":[93],"separately.":[94],"Moreover,":[95],"an":[98,108,141,145],"ESR-based":[99],"construction":[101],"providing":[104],"process-conformed":[105],"span-based":[110],"evaluation":[111],"validating":[114],"The":[119],"experimental":[120],"results":[121],"show":[122],"SA2":[124],"outperforms":[125],"all":[126,134],"baselines":[127],"in":[128],"F1":[130],"score,":[131],"effectively":[132],"detecting":[133],"attacks":[135],"(zero":[136],"rate),":[138],"compared":[139],"optimal":[142],"baseline":[143],"with":[144],"rate":[147],"close":[149],"50%.":[151]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":23},{"year":2024,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-05-16T00:00:00"}