{"id":"https://openalex.org/W4415968554","doi":"https://doi.org/10.1109/iecon58223.2025.11221180","title":"Adapting IEC 62443 for Steganographic Threat Detection in ICS Environments","display_name":"Adapting IEC 62443 for Steganographic Threat Detection in ICS Environments","publication_year":2025,"publication_date":"2025-10-14","ids":{"openalex":"https://openalex.org/W4415968554","doi":"https://doi.org/10.1109/iecon58223.2025.11221180"},"language":"en","primary_location":{"id":"doi:10.1109/iecon58223.2025.11221180","doi":"https://doi.org/10.1109/iecon58223.2025.11221180","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iecon58223.2025.11221180","pdf_url":null,"source":{"id":"https://openalex.org/S4210172894","display_name":"Annual Conference of the IEEE Industrial Electronics Society (IECON)","issn_l":"1553-572X","issn":["1553-572X","2577-1647"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IECON 2025 \u2013 51st Annual Conference of the IEEE Industrial Electronics Society","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085803746","display_name":"Natasha Cecilia Edeh","orcid":"https://orcid.org/0000-0001-9627-7001","observed_orcids":["https://orcid.org/0000-0001-9627-7001"]},"institutions":[{"id":"https://openalex.org/I4210109057","display_name":"Framatome (Germany)","ror":"https://ror.org/01hfye903","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210109057","https://openalex.org/I4400008936"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Natasha Edeh","raw_affiliation_strings":["Framatome,Erlangen,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Framatome,Erlangen,Germany","institution_ids":["https://openalex.org/I4210109057"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Esin \u00d6zt\u00fcrk","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210109057","display_name":"Framatome (Germany)","ror":"https://ror.org/01hfye903","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210109057","https://openalex.org/I4400008936"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Esin \u00d6zt\u00fcrk","raw_affiliation_strings":["Framatome,Erlangen,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Framatome,Erlangen,Germany","institution_ids":["https://openalex.org/I4210109057"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080010025","display_name":"Karl Waedt","orcid":"https://orcid.org/0009-0001-9006-925X","observed_orcids":["https://orcid.org/0009-0001-9006-925X"]},"institutions":[{"id":"https://openalex.org/I4210109057","display_name":"Framatome (Germany)","ror":"https://ror.org/01hfye903","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210109057","https://openalex.org/I4400008936"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Karl Waedt","raw_affiliation_strings":["Framatome,Erlangen,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Framatome,Erlangen,Germany","institution_ids":["https://openalex.org/I4210109057"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210109057"],"apc_list":null,"apc_paid":null,"fwci":0.7599,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.59624824,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iec-62443","display_name":"IEC 62443","score":0.9819999933242798},{"id":"https://openalex.org/keywords/industrial-control-systems","display_name":"industrial control systems","score":0.878000020980835},{"id":"https://openalex.org/keywords/ics-cybersecurity","display_name":"ICS cybersecurity","score":0.8090000152587891},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.9089999794960022},{"id":"https://openalex.org/keywords/cicids2017-dataset","display_name":"CICIDS2017 dataset","score":0.8399999737739563},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.7850000262260437},{"id":"https://openalex.org/keywords/smote-oversampling","display_name":"SMOTE oversampling","score":0.9139999747276306},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.8130000233650208},{"id":"https://openalex.org/keywords/malicious-traffic-detection","display_name":"malicious traffic detection","score":0.6539999842643738},{"id":"https://openalex.org/keywords/critical-infrastructure-protection","display_name":"critical infrastructure protection","score":0.5989999771118164}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.572700023651123},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.5288000106811523},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5192999839782715},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4487000107765198},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.4219000041484833},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.3828999996185303},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.3634999990463257},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.35510000586509705},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3089999854564667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30160000920295715},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.28369998931884766},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.25200000405311584},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iecon58223.2025.11221180","doi":"https://doi.org/10.1109/iecon58223.2025.11221180","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iecon58223.2025.11221180","pdf_url":null,"source":{"id":"https://openalex.org/S4210172894","display_name":"Annual Conference of the IEEE Industrial Electronics Society (IECON)","issn_l":"1553-572X","issn":["1553-572X","2577-1647"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IECON 2025 \u2013 51st Annual Conference of the IEEE Industrial Electronics Society","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.7207000255584717}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2808741097","https://openalex.org/W2990623250","https://openalex.org/W3009315908","https://openalex.org/W3012810218","https://openalex.org/W3037174305","https://openalex.org/W3049266245","https://openalex.org/W3082731807","https://openalex.org/W3188455844","https://openalex.org/W3196283616","https://openalex.org/W3207898807","https://openalex.org/W4200331022","https://openalex.org/W4206497059","https://openalex.org/W4232682743","https://openalex.org/W4280642129","https://openalex.org/W4295832265","https://openalex.org/W4298015862","https://openalex.org/W4303987491","https://openalex.org/W4304587309","https://openalex.org/W4307592886","https://openalex.org/W4387167394","https://openalex.org/W4388018155","https://openalex.org/W4390861261","https://openalex.org/W4402873754","https://openalex.org/W4405109416","https://openalex.org/W4408955270","https://openalex.org/W4409236211","https://openalex.org/W4409416621"],"related_works":["https://openalex.org/W4302308343","https://openalex.org/W4406457647","https://openalex.org/W7112960186","https://openalex.org/W4406870816","https://openalex.org/W4401888432","https://openalex.org/W7215767789","https://openalex.org/W7211926726","https://openalex.org/W4416873873","https://openalex.org/W4403331590","https://openalex.org/W3197634927"],"abstract_inverted_index":{"The":[0,93,117],"growth":[1],"of":[2,11,164],"technological":[3],"advancements":[4],"in":[5,33,37,123],"Critical":[6],"infrastructures":[7],"including":[8],"the":[9,52,90,162],"assimilation":[10],"information":[12],"technology":[13],"networks":[14],"with":[15,168],"industrial":[16],"control":[17],"systems":[18],"(ICS)":[19],"exposes":[20],"it":[21],"to":[22,39,83,132,141],"sophisticated":[23,137],"cyber":[24],"threats":[25],"such":[26],"as":[27],"stegomalware,":[28],"which":[29,56,104],"conceals":[30],"dangerous":[31],"payloads":[32],"seemingly":[34],"innocuous":[35],"communication":[36],"order":[38,140],"avoid":[40],"detection.":[41],"Using":[42],"machine":[43,120],"learning":[44,153],"(ML)-based":[45],"anomaly":[46],"detection,":[47],"this":[48,146],"study":[49,147],"suggests":[50,148],"improving":[51],"IEC":[53,166],"62443":[54,167],"standard":[55],"outlines":[57],"requirements":[58],"and":[59,63,110,135,155],"procedures":[60],"for":[61,114],"implementing":[62],"maintaining":[64],"electronically":[65],"secure":[66],"ICS.":[67],"To":[68],"solve":[69],"class":[70],"imbalance,":[71],"a":[72,85,106],"balanced":[73],"dataset":[74],"made":[75],"by":[76,98,128],"synthetic":[77],"minority":[78],"oversampling":[79],"(SMOTE)":[80],"was":[81,96],"used":[82],"train":[84],"Random":[86],"Forest":[87],"Classifier":[88],"on":[89],"CICIDS2017":[91],"dataset.":[92],"model\u2019s":[94],"resilience":[95],"proven":[97],"augmented":[99],"scenarios":[100],"using":[101],"stegomalware":[102,134],"samples,":[103],"yielded":[105],"98%":[107],"accuracy":[108],"rate":[109],"excellent":[111],"precision-recall":[112],"performance":[113],"malicious":[115],"traffic.":[116],"findings":[118],"emphasize":[119],"learning\u2019s":[121],"significance":[122],"enhancing":[124],"ICS":[125,157],"cybersecurity":[126],"frameworks":[127],"demonstrating":[129],"its":[130],"capacity":[131],"identify":[133],"other":[136],"threats.":[138],"In":[139],"handle":[142],"changing":[143],"threat":[144],"landscapes,":[145],"more":[149],"research":[150],"into":[151],"deep":[152],"techniques":[154],"actual":[156],"environments.":[158],"It":[159],"also":[160],"emphasizes":[161],"viability":[163],"augmenting":[165],"ML-driven":[169],"solutions.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2025-11-06T00:00:00"}