{"id":"https://openalex.org/W2996462208","doi":"https://doi.org/10.1109/access.2019.2960497","title":"Analysis of Machine Learning Methods in EtherCAT-Based Anomaly Detection","display_name":"Analysis of Machine Learning Methods in EtherCAT-Based Anomaly Detection","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2996462208","doi":"https://doi.org/10.1109/access.2019.2960497","mag":"2996462208"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2960497","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2960497","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08936397.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08936397.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066573773","display_name":"Kevser Ovaz Akpinar","orcid":"https://orcid.org/0000-0002-9859-6855"},"institutions":[{"id":"https://openalex.org/I103703290","display_name":"Sakarya University","ror":"https://ror.org/04ttnw109","country_code":"TR","type":"education","lineage":["https://openalex.org/I103703290"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Kevser Ovaz Akpinar","raw_affiliation_strings":["Department of Computer Engineering, Sakarya University, Sakarya, Turkey"],"raw_orcid":"https://orcid.org/0000-0002-9859-6855","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey","institution_ids":["https://openalex.org/I103703290"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043591473","display_name":"\u0130brahim \u00d6z\u00e7eli\u0307k","orcid":"https://orcid.org/0000-0001-9985-5268"},"institutions":[{"id":"https://openalex.org/I103703290","display_name":"Sakarya University","ror":"https://ror.org/04ttnw109","country_code":"TR","type":"education","lineage":["https://openalex.org/I103703290"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ibrahim Ozcelik","raw_affiliation_strings":["Department of Computer Engineering, Sakarya University, Sakarya, Turkey"],"raw_orcid":"https://orcid.org/0000-0001-9985-5268","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey","institution_ids":["https://openalex.org/I103703290"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I103703290"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.0211,"has_fulltext":true,"cited_by_count":41,"citation_normalized_percentile":{"value":0.92297331,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"184365","last_page":"184374"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.7910361886024475},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7782341241836548},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7301123142242432},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.6148602366447449},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.5192070603370667},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5151890516281128},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.41343531012535095},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.34232524037361145},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34106042981147766},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21035686135292053},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.193029522895813}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.7910361886024475},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7782341241836548},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7301123142242432},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.6148602366447449},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.5192070603370667},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5151890516281128},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.41343531012535095},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.34232524037361145},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34106042981147766},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21035686135292053},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.193029522895813}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2019.2960497","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2960497","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08936397.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:acikerisim.sakarya.edu.tr:20.500.12619/69619","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ACCESS.2019.2960497","pdf_url":null,"source":{"id":"https://openalex.org/S7407055276","display_name":"Sakarya \u00dcniversitesi Kurumsal A\u00e7\u0131k Akademik Ar\u015fivi","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:ed170c170e714d8689290d4adcd9a6a9","is_oa":true,"landing_page_url":"https://doaj.org/article/ed170c170e714d8689290d4adcd9a6a9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 184365-184374 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2960497","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2960497","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08936397.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6299999952316284,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1419833539","display_name":null,"funder_award_id":"2015-50-02-025","funder_id":"https://openalex.org/F4320322660","funder_display_name":"Sakarya \u00dcniversitesi"},{"id":"https://openalex.org/G8060729162","display_name":"SCADA Sistemlerinde Kullan\u0131lan EtherCAT Protokol\u00fcne AitYeni Bir Sald\u0131r\u0131 Tespit Sistemi","funder_award_id":"118E263","funder_id":"https://openalex.org/F4320322626","funder_display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu"}],"funders":[{"id":"https://openalex.org/F4320322626","display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu","ror":"https://ror.org/04w9kkr77"},{"id":"https://openalex.org/F4320322660","display_name":"Sakarya \u00dcniversitesi","ror":"https://ror.org/04ttnw109"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W655508245","https://openalex.org/W1509129286","https://openalex.org/W1966809779","https://openalex.org/W1970856950","https://openalex.org/W1985987493","https://openalex.org/W1996960305","https://openalex.org/W2012446724","https://openalex.org/W2060479059","https://openalex.org/W2069285803","https://openalex.org/W2076507042","https://openalex.org/W2086037832","https://openalex.org/W2103502342","https://openalex.org/W2106925367","https://openalex.org/W2107348121","https://openalex.org/W2119290091","https://openalex.org/W2122217421","https://openalex.org/W2128006558","https://openalex.org/W2153517517","https://openalex.org/W2167710876","https://openalex.org/W2278186031","https://openalex.org/W2289626424","https://openalex.org/W2400995703","https://openalex.org/W2542991636","https://openalex.org/W2611432412","https://openalex.org/W2619874920","https://openalex.org/W2659323128","https://openalex.org/W2732102719","https://openalex.org/W2766717610","https://openalex.org/W2770072680","https://openalex.org/W2799754875","https://openalex.org/W2810107741","https://openalex.org/W6667864987","https://openalex.org/W6676317966","https://openalex.org/W6702042868"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2171408034","https://openalex.org/W2076723621","https://openalex.org/W2150641169","https://openalex.org/W3123953333","https://openalex.org/W2904439179","https://openalex.org/W3161403725","https://openalex.org/W4223615774","https://openalex.org/W79658127","https://openalex.org/W4386231780"],"abstract_inverted_index":{"Today,":[0],"the":[1,15,33,41,62,72,96,103,106,112,161,164,209,223,240,249,255,269],"use":[2],"of":[3,17,35,45,64,74,102,105,163,180,198],"Ethernet-based":[4],"protocols":[5,39,77,113],"in":[6,115,203,265],"industrial":[7,75],"control":[8,26,190],"systems":[9],"(ICS)":[10],"communications":[11,76],"has":[12,168],"led":[13],"to":[14,71,246,253,283,289],"emergence":[16],"attacks":[18,46],"based":[19],"on":[20,24,47,173,208],"information":[21],"technology":[22],"(IT)":[23],"supervisory":[25],"and":[27,37,40,43,52,67,91,119,124,140,206,227,262,271,293],"data":[28,285],"acquisition":[29],"systems.":[30],"In":[31,145,244],"addition,":[32],"familiarity":[34],"Ethernet":[36],"TCP/IP":[38],"diversity":[42],"success":[44],"them":[48],"raises":[49],"security":[50],"risks":[51],"cyber":[53,143],"threats":[54],"for":[55,79,135,153,157,177,216,276,286],"ICS.":[56,159],"This":[57],"issue":[58],"is":[59,128,132,281],"compounded":[60],"by":[61,111],"absence":[63],"encryption,":[65],"authorization,":[66],"authentication":[68],"mechanisms":[69],"due":[70,288],"development":[73],"only":[78],"performance":[80],"purposes.":[81],"Recent":[82],"zero-day":[83],"attacks,":[84],"such":[85],"as":[86,93,95],"Triton,":[87],"Stuxnet,":[88],"Havex,":[89],"Dragonfly,":[90],"Blackenergy,":[92],"well":[94],"Ukraine":[97],"cyber-attack,":[98],"are":[99,151,251,263],"possible":[100],"because":[101],"vulnerabilities":[104],"systems;":[107],"these":[108],"attacksare":[109],"carried":[110],"used":[114,215,275],"communication":[116],"between":[117],"PLC":[118],"I/O":[120],"units":[121],"or":[122],"HMI":[123],"engineering":[125],"stations.":[126],"It":[127],"evident":[129],"that":[130,138,222],"there":[131,167],"a":[133,196],"need":[134],"robust":[136],"solutions":[137],"detect":[139],"prevent":[141],"protocol-based":[142],"threats.":[144],"this":[146],"paper,":[147],"machine":[148,174,230],"learning":[149,175],"methods":[150,250],"evaluated":[152],"anomaly":[154,178,184,217],"detection,":[155,185],"particularly":[156],"EtherCAT-based":[158,187],"To":[160],"best":[162,238],"author's":[165],"knowledge,":[166],"been":[169],"no":[170],"research":[171],"focusing":[172],"algorithms":[176],"detection":[179],"EtherCAT.":[181],"Before":[182],"testing":[183],"an":[186],"water":[188],"level":[189],"system":[191],"testbed":[192],"was":[193,214],"developed.":[194],"Then,":[195],"total":[197],"16":[199],"events":[200,272],"were":[201],"generated":[202],"four":[204],"categories":[205],"applied":[207],"testbed.":[210],"The":[211,219],"dataset":[212,270],"created":[213],"detection.":[218],"results":[220],"showed":[221],"k-nearest":[224],"neighbors":[225],"(k-NN)":[226],"support":[228],"vector":[229],"with":[231],"genetic":[232],"algorithm":[233],"(SVM":[234],"GA)":[235],"models":[236],"perform":[237],"among":[239],"18":[241],"techniques":[242,261],"applied.":[243],"addition":[245],"detecting":[247],"anomalies,":[248],"able":[252],"flag":[254],"attack":[256],"types":[257],"better":[258],"than":[259],"other":[260],"applicable":[264],"EtherCAT":[266],"networks.":[267],"Also,":[268],"can":[273],"be":[274],"further":[277],"studies":[278],"since":[279],"it":[280],"difficult":[282],"obtain":[284],"ICS":[287],"its":[290],"critical":[291],"infrastructure":[292],"continuous":[294],"real-time":[295],"operation.":[296]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":4}],"updated_date":"2026-05-19T21:40:30.786675","created_date":"2025-10-10T00:00:00"}
