{"id":"https://openalex.org/W7221784345","doi":"https://doi.org/10.5281/zenodo.23374640","title":"Replication Package for \"Graph Neural Networks for Cyber-Physical Intrusion and Anomaly Detection in Industrial Control Systems: A Systematic Review\"","display_name":"Replication Package for \"Graph Neural Networks for Cyber-Physical Intrusion and Anomaly Detection in Industrial Control Systems: A Systematic Review\"","publication_year":2026,"publication_date":"2026-10-14","ids":{"openalex":"https://openalex.org/W7221784345","doi":"https://doi.org/10.5281/zenodo.23374640"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23374640","doi":"https://doi.org/10.5281/zenodo.23374640","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23374640","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"volume":null,"type":"dataset","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23374640","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092364198","display_name":"Hasibe Candan Kadem","orcid":"https://orcid.org/0000-0001-5722-0811","observed_orcids":["https://orcid.org/0000-0001-5722-0811"]},"institutions":[{"id":"https://openalex.org/I192257213","display_name":"Bursa Technical University","ror":"https://ror.org/03rdpn141","country_code":"TR","type":"education","lineage":["https://openalex.org/I192257213"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Candan Kadem, Hasibe","raw_affiliation_strings":["Bursa Technical University"],"raw_orcid":"https://orcid.org/0000-0001-5722-0811","affiliations":[{"raw_affiliation_string":"Bursa Technical University","institution_ids":["https://openalex.org/I192257213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035629555","display_name":"Mustafa \u00d6zg\u00fcr Cingiz","orcid":"https://orcid.org/0000-0003-4469-1440","observed_orcids":["https://orcid.org/0000-0003-4469-1440"]},"institutions":[{"id":"https://openalex.org/I192257213","display_name":"Bursa Technical University","ror":"https://ror.org/03rdpn141","country_code":"TR","type":"education","lineage":["https://openalex.org/I192257213"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"C\u0130NG\u0130Z, Mustafa \u00d6zg\u00fcr","raw_affiliation_strings":["Bursa Technical University"],"raw_orcid":"https://orcid.org/0000-0003-4469-1440","affiliations":[{"raw_affiliation_string":"Bursa Technical University","institution_ids":["https://openalex.org/I192257213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I192257213"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.5116999745368958,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.5116999745368958,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3668999969959259,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/graph-neural-networks","display_name":"graph neural networks","score":1.0},{"id":"https://openalex.org/keywords/industrial-control-systems","display_name":"industrial control systems","score":0.843999981880188},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.9649999737739563},{"id":"https://openalex.org/keywords/industrial-cybersecurity","display_name":"industrial cybersecurity","score":0.5830000042915344},{"id":"https://openalex.org/keywords/performance-indicators","display_name":"performance indicators","score":0.5889999866485596},{"id":"https://openalex.org/keywords/explainability","display_name":"explainability","score":0.7049999833106995},{"id":"https://openalex.org/keywords/hardware-in-the-loop-simulation","display_name":"hardware-in-the-loop","score":0.7699999809265137},{"id":"https://openalex.org/keywords/real-time-deployment","display_name":"real-time deployment","score":0.36399999260902405}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6653000116348267},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6384000182151794},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5925999879837036},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.5266000032424927},{"id":"https://openalex.org/C71008984","wikidata":"https://www.wikidata.org/wiki/Q2890076","display_name":"Rigour","level":2,"score":0.5110999941825867},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.5063999891281128},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.4756999909877777},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.46869999170303345},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.4634000062942505},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.44040000438690186},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.4172999858856201},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.38530001044273376},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.3758000135421753},{"id":"https://openalex.org/C177309310","wikidata":"https://www.wikidata.org/wiki/Q758917","display_name":"Information technology audit","level":5,"score":0.3734999895095825},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3700999915599823},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.36309999227523804},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3386000096797943},{"id":"https://openalex.org/C9357733","wikidata":"https://www.wikidata.org/wiki/Q6878417","display_name":"Missing data","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3328000009059906},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.33250001072883606},{"id":"https://openalex.org/C100253034","wikidata":"https://www.wikidata.org/wiki/Q196372","display_name":"Systematic error","level":2,"score":0.32820001244544983},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.3199000060558319},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.31630000472068787},{"id":"https://openalex.org/C197947376","wikidata":"https://www.wikidata.org/wiki/Q5155608","display_name":"Comparability","level":2,"score":0.3059000074863434},{"id":"https://openalex.org/C2776588390","wikidata":"https://www.wikidata.org/wiki/Q1334738","display_name":"International standard","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.30090001225471497},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C152541439","wikidata":"https://www.wikidata.org/wiki/Q5186693","display_name":"Critical appraisal","level":3,"score":0.2962000072002411},{"id":"https://openalex.org/C113644684","wikidata":"https://www.wikidata.org/wiki/Q1356717","display_name":"Statistical process control","level":3,"score":0.2890999913215637},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C49895821","wikidata":"https://www.wikidata.org/wiki/Q5227368","display_name":"Data verification","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C141330323","wikidata":"https://www.wikidata.org/wiki/Q2354820","display_name":"Evidence-based practice","level":3,"score":0.26919999718666077},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.26669999957084656},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26600000262260437},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2615000009536743},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.26100000739097595}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23374640","doi":"https://doi.org/10.5281/zenodo.23374640","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23374640","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},{"id":"doi:10.5281/zenodo.23374641","doi":"https://doi.org/10.5281/zenodo.23374641","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23374641","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23374640","doi":"https://doi.org/10.5281/zenodo.23374640","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23374640","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7162794294","https://openalex.org/W7134923530","https://openalex.org/W7164138101","https://openalex.org/W7221201303","https://openalex.org/W7213115693","https://openalex.org/W7172448742","https://openalex.org/W7103272921","https://openalex.org/W7222806135","https://openalex.org/W7103136008","https://openalex.org/W7167606230"],"abstract_inverted_index":{"This":[0],"replication":[1],"package":[2,60],"supports":[3],"the":[4,62,70,91,125,168],"systematic":[5],"review":[6],"\u201cGraph":[7],"Neural":[8],"Networks":[9],"for":[10,124],"Cyber-Physical":[11],"Intrusion":[12],"and":[13,38,55,66,86,96,108,130,137,146,152,159,174,209,215,234,257],"Anomaly":[14],"Detection":[15],"in":[16],"Industrial":[17],"Control":[18],"Systems:":[19],"A":[20],"Systematic":[21],"Review\u201d":[22],"(manuscript":[23],"reference:":[24],"COMPELECENG-D-26-07913).":[25],"The":[26,59,181],"final":[27],"evidence":[28,41,65,165,239,249],"base":[29],"comprises":[30,185],"346":[31,210],"eligible":[32],"primary":[33,212],"studies,":[34,119],"including":[35],"317":[36],"Direct":[37],"29":[39],"Proxy":[40],"records.":[42],"Evaluation":[43],"rigour":[44,217],"is":[45,245,265],"appraised":[46],"separately":[47],"from":[48,117],"eligibility,":[49],"with":[50,120],"3":[51],"High-,":[52],"65":[53],"Moderate-,":[54],"278":[56],"Low-rigour":[57],"studies.":[58,213],"contains":[61],"complete":[63,92],"study-level":[64,94,104],"audit":[67,175],"trail":[68],"underlying":[69],"review,":[71],"including:":[72],"\u2022":[73],"executed":[74],"search":[75],"strategies,":[76],"database/export":[77],"logs,":[78],"deduplication,":[79],"screening":[80],"registers,":[81],"citation":[82],"searching,":[83],"update-control":[84],"checks,":[85,145],"PRISMA":[87,183],"2020":[88],"flow":[89,184],"records;\u2022":[90,111],"N=346":[93],"taxonomy":[95],"coding":[97],"matrix;\u2022":[98],"evaluation-rigour":[99],"criteria,":[100],"operational":[101],"scoring":[102],"rules,":[103],"ratings,":[105],"sensitivity":[106],"analyses,":[107],"inter-rater":[109],"agreement":[110],"5,850":[112],"source-located":[113],"quantitative":[114],"performance-metric":[115],"records":[116,176,194],"333":[118],"descriptive":[121,233],"coverage":[122],"retained":[123],"full":[126],"corpus;\u2022":[127],"GNN":[128],"architecture":[129],"task":[131],"classifications;\u2022":[132],"hardware,":[133],"timing,":[134],"resource,":[135],"online-operation,":[136],"field/HIL":[138],"evidence;\u2022":[139],"comparative-validity":[140],"matrices,":[141],"graph-component":[142],"controls,":[143],"temporal/window/transform":[144],"timing":[147],"audits;\u2022":[148],"source-verified":[149],"explainability":[150],"cases":[151],"interpretation":[153],"limits;\u2022":[154],"publication-cutoff,":[155],"first-online-date,":[156],"Q2/Q4,":[157],"graph-access,":[158],"consistency":[160],"audits;":[161],"and\u2022":[162],"a":[163,251],"master":[164],"map":[166],"linking":[167],"principal":[169],"coding,":[170],"appraisal,":[171],"performance,":[172],"deployment,":[173],"by":[177],"persistent":[178],"study":[179,229],"identifier.":[180],"consolidated":[182],"12,798":[186],"identified":[187],"records,":[188],"3,293":[189],"duplicates":[190],"removed,":[191],"9,505":[192],"unique":[193],"screened,":[195],"667":[196],"reports":[197,200,204],"sought,":[198],"44":[199],"not":[201,236,246],"retrieved,":[202],"623":[203],"assessed,":[205],"277":[206],"full-text":[207],"exclusions,":[208],"included":[211],"Eligibility":[214],"evaluation":[216,225],"are":[218,232,235],"treated":[219,247],"as":[220,238,248],"separate":[221],"dimensions.":[222],"Direct/Proxy":[223],"denotes":[224],"directness":[226],"rather":[227],"than":[228],"quality.":[230],"Frequencies":[231],"interpreted":[237],"of":[240],"model":[241],"superiority.":[242],"Missing":[243],"reporting":[244],"that":[250],"methodological":[252],"safeguard":[253],"was":[254],"absent.":[255],"Search":[256],"update":[258],"cutoff:":[259],"13":[260],"October":[261],"2026.":[262],"Publication-date":[263],"eligibility":[264],"based":[266],"on":[267],"verified":[268],"first-online":[269],"publication":[270],"dates.":[271],"Repository":[272],"DOI:":[273],"10.5281/zenodo.23374641":[274]},"counts_by_year":[],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2026-10-15T00:00:00"}