{"id":"https://openalex.org/W7116394769","doi":"https://doi.org/10.1016/j.future.2025.108306","title":"Hybrid knowledge-based decision support system for intrusion response in industrial cyber-physical systems","display_name":"Hybrid knowledge-based decision support system for intrusion response in industrial cyber-physical systems","publication_year":2025,"publication_date":"2025-12-20","ids":{"openalex":"https://openalex.org/W7116394769","doi":"https://doi.org/10.1016/j.future.2025.108306"},"language":"en","primary_location":{"id":"doi:10.1016/j.future.2025.108306","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.future.2025.108306","pdf_url":null,"source":{"id":"https://openalex.org/S186357190","display_name":"Future Generation Computer Systems","issn_l":"0167-739X","issn":["0167-739X","1872-7115"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Generation Computer Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.future.2025.108306","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120895309","display_name":"Simone Guarino","orcid":null},"institutions":[{"id":"https://openalex.org/I155125353","display_name":"Universit\u00e0 Campus Bio-Medico","ror":"https://ror.org/04gqx4x78","country_code":"IT","type":"education","lineage":["https://openalex.org/I155125353"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Simone Guarino","raw_affiliation_strings":["University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy"],"raw_orcid":"https://orcid.org/0000-0001-8700-4749","affiliations":[{"raw_affiliation_string":"University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy","institution_ids":["https://openalex.org/I155125353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056066548","display_name":"Luca Faramondi","orcid":"https://orcid.org/0000-0002-3750-2405"},"institutions":[{"id":"https://openalex.org/I155125353","display_name":"Universit\u00e0 Campus Bio-Medico","ror":"https://ror.org/04gqx4x78","country_code":"IT","type":"education","lineage":["https://openalex.org/I155125353"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luca Faramondi","raw_affiliation_strings":["University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy"],"raw_orcid":"https://orcid.org/0000-0002-3750-2405","affiliations":[{"raw_affiliation_string":"University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy","institution_ids":["https://openalex.org/I155125353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012297844","display_name":"Gabriele Oliva","orcid":"https://orcid.org/0000-0001-7257-4079"},"institutions":[{"id":"https://openalex.org/I155125353","display_name":"Universit\u00e0 Campus Bio-Medico","ror":"https://ror.org/04gqx4x78","country_code":"IT","type":"education","lineage":["https://openalex.org/I155125353"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Gabriele Oliva","raw_affiliation_strings":["University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy"],"raw_orcid":"https://orcid.org/0000-0001-7257-4079","affiliations":[{"raw_affiliation_string":"University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy","institution_ids":["https://openalex.org/I155125353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080573530","display_name":"Ernesto Del Prete","orcid":null},"institutions":[{"id":"https://openalex.org/I1341049462","display_name":"Istituto Nazionale di Statistica","ror":"https://ror.org/05a5k9h08","country_code":"IT","type":"facility","lineage":["https://openalex.org/I1341049462"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Ernesto Del Prete","raw_affiliation_strings":["Italian National Institute for Insurance against Accidents at Work, Viale Stefano Gradi, 55, Rome, 00143, Italy"],"raw_orcid":"https://orcid.org/0009-0000-4786-9844","affiliations":[{"raw_affiliation_string":"Italian National Institute for Insurance against Accidents at Work, Viale Stefano Gradi, 55, Rome, 00143, Italy","institution_ids":["https://openalex.org/I1341049462"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037708866","display_name":"Francesco Flammini","orcid":"https://orcid.org/0000-0002-2833-7196"},"institutions":[{"id":"https://openalex.org/I15196421","display_name":"University of Applied Sciences and Arts of Southern Switzerland","ror":"https://ror.org/05ep8g269","country_code":"CH","type":"education","lineage":["https://openalex.org/I15196421"]},{"id":"https://openalex.org/I45084792","display_name":"University of Florence","ror":"https://ror.org/04jr1s763","country_code":"IT","type":"education","lineage":["https://openalex.org/I45084792"]}],"countries":["CH","IT"],"is_corresponding":false,"raw_author_name":"Francesco Flammini","raw_affiliation_strings":["Department of Mathematics and Informatics \u201cUlisse Dini\u201d, University of Florence, Viale Morgagni 67/a, Florence, 50134, Italy","IDSIA USI-SUPSI, University of Applied Sciences and Arts of Southern Switzerland, Via la Santa, 1, Lugano, 6962, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-2833-7196","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Informatics \u201cUlisse Dini\u201d, University of Florence, Viale Morgagni 67/a, Florence, 50134, Italy","institution_ids":["https://openalex.org/I45084792"]},{"raw_affiliation_string":"IDSIA USI-SUPSI, University of Applied Sciences and Arts of Southern Switzerland, Via la Santa, 1, Lugano, 6962, Switzerland","institution_ids":["https://openalex.org/I15196421"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120937809","display_name":"Roberto Setola","orcid":null},"institutions":[{"id":"https://openalex.org/I155125353","display_name":"Universit\u00e0 Campus Bio-Medico","ror":"https://ror.org/04gqx4x78","country_code":"IT","type":"education","lineage":["https://openalex.org/I155125353"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Roberto Setola","raw_affiliation_strings":["University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy"],"raw_orcid":"https://orcid.org/0000-0002-8792-2520","affiliations":[{"raw_affiliation_string":"University Campus Bio-Medico of Rome, Via Alvaro del Portillo 21, Rome, 00128, Italy","institution_ids":["https://openalex.org/I155125353"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5120895309"],"corresponding_institution_ids":["https://openalex.org/I155125353"],"apc_list":{"value":3000,"currency":"USD","value_usd":3000},"apc_paid":{"value":3000,"currency":"USD","value_usd":3000},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.44284175,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"179","issue":null,"first_page":"108306","last_page":"108306"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9444000124931335,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9444000124931335,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.027499999850988388,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6536999940872192},{"id":"https://openalex.org/keywords/decision-support-system","display_name":"Decision support system","score":0.5972999930381775},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5882999897003174},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5454999804496765},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4277999997138977},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.41429999470710754},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.3684000074863434},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.34200000762939453}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8575999736785889},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6536999940872192},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.5972999930381775},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5882999897003174},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5454999804496765},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5338000059127808},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4277999997138977},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.41429999470710754},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.3684000074863434},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.34200000762939453},{"id":"https://openalex.org/C50897621","wikidata":"https://www.wikidata.org/wiki/Q2665508","display_name":"Hybrid system","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C87345402","wikidata":"https://www.wikidata.org/wiki/Q485202","display_name":"Analytic hierarchy process","level":2,"score":0.32829999923706055},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.3172000050544739},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.31610000133514404},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27959999442100525},{"id":"https://openalex.org/C56397880","wikidata":"https://www.wikidata.org/wiki/Q6044094","display_name":"Intelligent decision support system","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C11105738","wikidata":"https://www.wikidata.org/wiki/Q1895805","display_name":"Multiple-criteria decision analysis","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.25380000472068787}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.future.2025.108306","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.future.2025.108306","pdf_url":null,"source":{"id":"https://openalex.org/S186357190","display_name":"Future Generation Computer Systems","issn_l":"0167-739X","issn":["0167-739X","1872-7115"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Generation Computer Systems","raw_type":"journal-article"},{"id":"pmh:oai:flore.unifi.it:2158/1452976","is_oa":false,"landing_page_url":"https://hdl.handle.net/2158/1452976","pdf_url":null,"source":{"id":"https://openalex.org/S4306402033","display_name":"Florence Research (University of Florence)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45084792","host_organization_name":"University of Florence","host_organization_lineage":["https://openalex.org/I45084792"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1016/j.future.2025.108306","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.future.2025.108306","pdf_url":null,"source":{"id":"https://openalex.org/S186357190","display_name":"Future Generation Computer Systems","issn_l":"0167-739X","issn":["0167-739X","1872-7115"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Generation Computer Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4087016662","display_name":null,"funder_award_id":"C83C22001460001","funder_id":"https://openalex.org/F4320324633","funder_display_name":"Istituto Nazionale per l'Assicurazione Contro Gli Infortuni sul Lavoro"},{"id":"https://openalex.org/G5807701697","display_name":null,"funder_award_id":"101121842","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"},{"id":"https://openalex.org/G6574763509","display_name":null,"funder_award_id":"101175856","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320324633","display_name":"Istituto Nazionale per l'Assicurazione Contro Gli Infortuni sul Lavoro","ror":"https://ror.org/01t264m74"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2010838115","https://openalex.org/W2043534247","https://openalex.org/W2046078150","https://openalex.org/W2114386757","https://openalex.org/W2156352116","https://openalex.org/W2176849474","https://openalex.org/W2460941602","https://openalex.org/W2490447569","https://openalex.org/W2527760048","https://openalex.org/W2600058599","https://openalex.org/W2799725809","https://openalex.org/W2886018600","https://openalex.org/W2888563510","https://openalex.org/W2896459013","https://openalex.org/W2924379078","https://openalex.org/W2931139464","https://openalex.org/W2997128470","https://openalex.org/W3035085177","https://openalex.org/W3037974900","https://openalex.org/W3089096050","https://openalex.org/W3119687955","https://openalex.org/W3196299211","https://openalex.org/W3216443832","https://openalex.org/W4313479509","https://openalex.org/W4318825842","https://openalex.org/W4321103596","https://openalex.org/W4322753628","https://openalex.org/W4323022372","https://openalex.org/W4378071514","https://openalex.org/W4386320385","https://openalex.org/W4387925112","https://openalex.org/W4410886861"],"related_works":[],"abstract_inverted_index":{"As":[0],"Industrial":[1],"Cyber-Physical":[2],"Systems":[3,49],"(ICPS)":[4],"become":[5],"increasingly":[6],"interconnected,":[7],"they":[8],"are":[9],"exposed":[10],"to":[11,123,156,201],"a":[12,52,104,192,220,225],"growing":[13],"array":[14],"of":[15,152,163],"hybrid":[16,106],"threats":[17,39],"that":[18,36,92],"target":[19],"both":[20,125,203],"digital":[21],"and":[22,31,86,127,160,206,235],"physical":[23],"assets.":[24],"A":[25,166],"central":[26],"challenge":[27],"lies":[28],"in":[29,67,112,237],"identifying":[30],"implementing":[32],"effective":[33],"security":[34,65],"countermeasures":[35],"mitigate":[37],"such":[38],"without":[40],"disrupting":[41],"critical":[42],"operations.":[43],"In":[44,196],"this":[45],"context,":[46],"Decision":[47],"Support":[48],"(DSS)":[50],"offer":[51],"promising":[53],"avenue":[54],"for":[55,109],"enhancing":[56],"incident":[57],"response.":[58],"This":[59,230],"can":[60],"be":[61],"done":[62],"by":[63,174,190],"assisting":[64],"operators":[66],"selecting":[68],"optimal":[69,185],"mitigation":[70],"strategies.":[71],"However,":[72],"existing":[73],"DSS":[74,108,216],"solutions":[75],"often":[76],"face":[77],"significant":[78],"limitations,":[79],"including":[80],"poor":[81],"scalability,":[82],"high":[83],"computational":[84,128],"demands,":[85],"dependence":[87],"on":[88,211,224],"simulated":[89],"attack":[90],"scenarios":[91],"may":[93],"not":[94],"reflect":[95],"real-world":[96,226],"conditions.":[97],"To":[98],"overcome":[99],"these":[100],"challenges,":[101],"we":[102],"propose":[103],"novel":[105],"knowledge-based":[107],"intrusion":[110],"response":[111,186],"ICPSs.":[113],"Our":[114],"approach":[115],"integrates":[116],"expert-driven":[117],"evaluations":[118],"with":[119,179],"dynamic":[120],"risk":[121,205],"assessment":[122],"ensure":[124],"scalability":[126],"efficiency.":[129],"Risk":[130],"is":[131,141,188,217],"continuously":[132],"assessed":[133],"using":[134],"multiple":[135],"Bayesian":[136],"Networks.":[137],"Moreover,":[138],"expert":[139],"knowledge":[140],"incorporated":[142],"through":[143,219],"an":[144],"adapted":[145],"Analytic":[146],"Hierarchy":[147],"Process":[148],"(AHP)":[149],"framework,":[150],"capable":[151],"handling":[153],"incomplete":[154],"information,":[155],"evaluate":[157],"the":[158,172,198,207],"effectiveness":[159],"operational":[161],"impact":[162,210],"available":[164],"countermeasures.":[165],"cyber-physical":[167],"detection":[168,182],"module":[169],"further":[170],"enhances":[171],"system":[173],"providing":[175],"detected":[176],"events":[177],"along":[178],"their":[180],"associated":[181],"probabilities.":[183],"The":[184,214],"strategy":[187],"selected":[189],"solving":[191],"bi-objective":[193],"optimization":[194],"problem.":[195],"particular,":[197],"problem":[199],"amounts":[200],"minimizing":[202],"residual":[204],"potential":[208],"negative":[209],"ICPS":[212],"functionality.":[213],"proposed":[215],"validated":[218],"proof-of-concept":[221],"implementation":[222],"based":[223],"laboratory":[227],"case":[228],"study.":[229],"demonstrates":[231],"its":[232],"practical":[233],"applicability":[234],"robustness":[236],"complex":[238],"industrial":[239],"environments.":[240]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-12-21T00:00:00"}