{"id":"https://openalex.org/W10491193","doi":"https://doi.org/10.1007/978-3-642-38998-6_8","title":"Towards Learning Normality for Anomaly Detection in Industrial Control Networks","display_name":"Towards Learning Normality for Anomaly Detection in Industrial Control Networks","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W10491193","doi":"https://doi.org/10.1007/978-3-642-38998-6_8","mag":"10491193"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-642-38998-6_8","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-642-38998-6_8","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://inria.hal.science/hal-01489971","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079082892","display_name":"Franka Schuster","orcid":"https://orcid.org/0009-0008-0687-9155"},"institutions":[{"id":"https://openalex.org/I51783024","display_name":"Brandenburg University of Technology Cottbus-Senftenberg","ror":"https://ror.org/02wxx3e24","country_code":"DE","type":"education","lineage":["https://openalex.org/I51783024"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Franka Schuster","raw_affiliation_strings":["Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany"],"affiliations":[{"raw_affiliation_string":"Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany","institution_ids":["https://openalex.org/I51783024"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108345729","display_name":"Andreas Paul","orcid":null},"institutions":[{"id":"https://openalex.org/I51783024","display_name":"Brandenburg University of Technology Cottbus-Senftenberg","ror":"https://ror.org/02wxx3e24","country_code":"DE","type":"education","lineage":["https://openalex.org/I51783024"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Andreas Paul","raw_affiliation_strings":["Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany"],"affiliations":[{"raw_affiliation_string":"Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany","institution_ids":["https://openalex.org/I51783024"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032778004","display_name":"Hartmut K\u00f6nig","orcid":null},"institutions":[{"id":"https://openalex.org/I51783024","display_name":"Brandenburg University of Technology Cottbus-Senftenberg","ror":"https://ror.org/02wxx3e24","country_code":"DE","type":"education","lineage":["https://openalex.org/I51783024"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hartmut K\u00f6nig","raw_affiliation_strings":["Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany"],"affiliations":[{"raw_affiliation_string":"Computer Networks Group, Brandenburg University of Technology Cottbus, Cottbus, Germany","institution_ids":["https://openalex.org/I51783024"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5079082892"],"corresponding_institution_ids":["https://openalex.org/I51783024"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":7.9873,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.97483777,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"61","last_page":"72"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7720208168029785},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7536109685897827},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6529229283332825},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.6435388922691345},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.619656503200531},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.6078634262084961},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5315007567405701},{"id":"https://openalex.org/keywords/normality","display_name":"Normality","score":0.479775995016098},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.47180142998695374},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3850151300430298},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37464165687561035},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3505840301513672},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29966628551483154},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1069478988647461}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7720208168029785},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7536109685897827},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6529229283332825},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.6435388922691345},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.619656503200531},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.6078634262084961},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5315007567405701},{"id":"https://openalex.org/C2776157432","wikidata":"https://www.wikidata.org/wiki/Q1375683","display_name":"Normality","level":2,"score":0.479775995016098},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.47180142998695374},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3850151300430298},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37464165687561035},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3505840301513672},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29966628551483154},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1069478988647461},{"id":"https://openalex.org/C118552586","wikidata":"https://www.wikidata.org/wiki/Q7867","display_name":"Psychiatry","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-642-38998-6_8","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-642-38998-6_8","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:HAL:hal-01489971v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01489971","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"7th International Conference on Autonomous Infrastructure (AIMS), Jun 2013, Barcelona, Spain. pp.61-72, ⟨10.1007/978-3-642-38998-6_8⟩","raw_type":"Conference papers"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01489971v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01489971","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"7th International Conference on Autonomous Infrastructure (AIMS), Jun 2013, Barcelona, Spain. pp.61-72, ⟨10.1007/978-3-642-38998-6_8⟩","raw_type":"Conference papers"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6600000262260437}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W37932567","https://openalex.org/W58673367","https://openalex.org/W1483650506","https://openalex.org/W1504161274","https://openalex.org/W1560724230","https://openalex.org/W1563457267","https://openalex.org/W1575698026","https://openalex.org/W1675492461","https://openalex.org/W1678889691","https://openalex.org/W2005028112","https://openalex.org/W2006337672","https://openalex.org/W2043356179","https://openalex.org/W2069285803","https://openalex.org/W2078714626","https://openalex.org/W2100837440","https://openalex.org/W2111724279","https://openalex.org/W2119662014","https://openalex.org/W2122217421","https://openalex.org/W2135511047","https://openalex.org/W2138745909","https://openalex.org/W2141050228","https://openalex.org/W2149680511","https://openalex.org/W2156361298","https://openalex.org/W2161265013","https://openalex.org/W2171349127","https://openalex.org/W2475660944","https://openalex.org/W2495930550","https://openalex.org/W2497481114","https://openalex.org/W2500288818","https://openalex.org/W3144619878","https://openalex.org/W4237364139"],"related_works":["https://openalex.org/W2376886931","https://openalex.org/W2061466315","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426","https://openalex.org/W2377372927"],"abstract_inverted_index":{"Recent":[0],"trends":[1],"in":[2,26,30,39,74,122,139],"automation":[3,61],"technology":[4],"lead":[5],"to":[6,15,95,119,130],"a":[7,68],"rising":[8],"exposition":[9],"of":[10,22,35,60,71,84,125,134],"industrial":[11,140],"control":[12,141],"systems":[13],"(ICS)":[14],"new":[16],"vulnerabilities.":[17],"This":[18],"requires":[19],"the":[20,33,58,65,110,115,126],"introduction":[21],"proper":[23],"security":[24,44],"approaches":[25],"this":[27,75,78],"field.":[28,76],"Prevalent":[29],"ICS":[31,89],"is":[32,91],"use":[34],"access":[36],"control.":[37],"Especially":[38],"critical":[40],"infrastructures,":[41],"however,":[42],"preventive":[43],"measures":[45],"should":[46],"be":[47,120],"complemented":[48],"by":[49],"reactive":[50],"ones,":[51],"such":[52],"as":[53],"intrusion":[54,72],"detection.":[55],"Beginning":[56],"from":[57],"characteristics":[59],"networks":[62],"we":[63],"outline":[64],"implications":[66],"for":[67,82,88],"suitable":[69],"application":[70,107],"detection":[73,87],"On":[77],"basis,":[79],"an":[80],"approach":[81],"creation":[83],"self-learning":[85],"anomaly":[86],"protocols":[90],"presented.":[92],"In":[93],"contrast":[94],"other":[96],"approaches,":[97],"it":[98],"takes":[99],"all":[100],"network":[101,127],"data":[102,128],"into":[103],"account:":[104],"flow":[105],"information,":[106],"data,":[108],"and":[109],"packet":[111],"order.":[112],"We":[113],"discuss":[114],"challenges":[116],"that":[117],"have":[118],"solved":[121],"each":[123],"step":[124],"analysis":[129],"identify":[131],"future":[132],"aspects":[133],"research":[135],"towards":[136],"learning":[137],"normality":[138],"networks.":[142]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":2}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}