{"id":"https://openalex.org/W7160833183","doi":"https://doi.org/10.1109/access.2026.3691986","title":"Deep Tabular and Sequential Models for Robust SCADA Cybersecurity Using the Custom-Built SCADANet Dataset","display_name":"Deep Tabular and Sequential Models for Robust SCADA Cybersecurity Using the Custom-Built SCADANet Dataset","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160833183","doi":"https://doi.org/10.1109/access.2026.3691986"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3691986","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691986","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3691986","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135906349","display_name":"Mustafa Tahsin Yilmaz","orcid":null},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mustafa Tahsin Yilmaz","raw_affiliation_strings":["Department of Industrial Engineering, Faculty of Engineering, King Abdulaziz University, Jeddah, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Industrial Engineering, Faculty of Engineering, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117539319","display_name":"Enes Alg\u00fcl","orcid":"https://orcid.org/0000-0003-1281-053X"},"institutions":[{"id":"https://openalex.org/I143910747","display_name":"TH Bingen University of Applied Sciences","ror":"https://ror.org/01pxkj057","country_code":"DE","type":"education","lineage":["https://openalex.org/I143910747"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Enes Algul","raw_affiliation_strings":["Department of Computer Engineering, Bingöl University, Bingöl, Türkiye"],"raw_orcid":"https://orcid.org/0000-0003-1281-053X","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Bingöl University, Bingöl, Türkiye","institution_ids":["https://openalex.org/I143910747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135889832","display_name":"Onur Polat","orcid":"https://orcid.org/0000-0001-9313-4910"},"institutions":[{"id":"https://openalex.org/I143910747","display_name":"TH Bingen University of Applied Sciences","ror":"https://ror.org/01pxkj057","country_code":"DE","type":"education","lineage":["https://openalex.org/I143910747"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Onur Polat","raw_affiliation_strings":["Department of Computer Engineering, Bingöl University, Bingöl, Türkiye"],"raw_orcid":"https://orcid.org/0000-0001-9313-4910","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Bingöl University, Bingöl, Türkiye","institution_ids":["https://openalex.org/I143910747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135841992","display_name":"Ferdi Dogan","orcid":"https://orcid.org/0000-0002-9203-697X"},"institutions":[{"id":"https://openalex.org/I198587356","display_name":"Ad\u0131yaman University","ror":"https://ror.org/02s4gkg68","country_code":"TR","type":"education","lineage":["https://openalex.org/I198587356"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ferd\u0131 Do\u011fan","raw_affiliation_strings":["Department of Computer Engineering, Adiyaman University, Adiyaman, Türkiye"],"raw_orcid":"https://orcid.org/0000-0002-9203-697X","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Adiyaman University, Adiyaman, Türkiye","institution_ids":["https://openalex.org/I198587356"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135887929","display_name":"Hakan Karateke","orcid":"https://orcid.org/0009-0004-9174-4271"},"institutions":[{"id":"https://openalex.org/I143910747","display_name":"TH Bingen University of Applied Sciences","ror":"https://ror.org/01pxkj057","country_code":"DE","type":"education","lineage":["https://openalex.org/I143910747"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hakan Karateke","raw_affiliation_strings":["Bingöl University, Bingöl, Türkiye"],"raw_orcid":"https://orcid.org/0009-0004-9174-4271","affiliations":[{"raw_affiliation_string":"Bingöl University, Bingöl, Türkiye","institution_ids":["https://openalex.org/I143910747"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.70488797,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"77736","last_page":"77755"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.19110000133514404,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.19110000133514404,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.14380000531673431,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.061400000005960464,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.7612000107765198},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.38040000200271606},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.352400004863739},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.27309998869895935},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.26429998874664307}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7750999927520752},{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.7612000107765198},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38109999895095825},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.38040000200271606},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3776000142097473},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.352400004863739},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.34860000014305115},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2734000086784363},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.27309998869895935},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2669999897480011},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2556999921798706},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.25270000100135803}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3691986","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691986","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2cd2f250710f491592d11976c9a1dde2","is_oa":true,"landing_page_url":"https://doaj.org/article/2cd2f250710f491592d11976c9a1dde2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 77736-77755 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3691986","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691986","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Supervisory":[0],"Control":[1],"and":[2,54,85,98,118,122,153,185,206,285,306],"Data":[3],"Acquisition":[4],"(SCADA)":[5],"systems":[6,42],"are":[7,213,240],"critical":[8],"for":[9,59,175,188,195,202,288,295,302],"managing":[10],"large-scale":[11],"industrial":[12],"facilities,":[13],"yet":[14],"their":[15],"increasing":[16],"connectivity":[17],"exposes":[18],"them":[19],"to":[20,92,148,229,233],"sophisticated":[21],"cyberattacks,":[22],"with":[23,74,106],"a":[24,64,70,109,192,216,256,260,292],"reported":[25],"44%":[26],"rise":[27],"in":[28,40,69,223,255,271],"incidents":[29],"by":[30,43,116],"2023.":[31],"This":[32],"study":[33],"addresses":[34],"the":[35,181,231,250,272,281],"challenge":[36],"of":[37,113,141,162,183,283],"intrusion":[38,197,297],"detection":[39,161,198,298],"SCADA":[41,132,189,235,264,289],"evaluating":[44],"four":[45],"advanced":[46],"deep":[47],"learning":[48],"models,":[49],"DCNv2_MoE,":[50],"EntityEmbeddingMLP":[51],"(EE-MLP),":[52],"RTDLResNet,":[53],"Temporal":[55],"Convolutional":[56],"Network":[57],"(TCN),":[58],"multi-class":[60],"attack":[61,76],"classification.":[62],"Using":[63],"custom":[65],"SCADANet":[66],"dataset,":[67,265],"generated":[68],"virtualized":[71,217],"lab":[72],"environment":[73],"nine":[75],"scenarios":[77],"(e.g.,":[78],"HTTP":[79],"flood,":[80],"SQL":[81],"injection,":[82],"port":[83],"scan)":[84],"normal":[86],"traffic,":[87],"we":[88],"applied":[89],"comprehensive":[90],"preprocessing":[91],"tackle":[93],"class":[94],"imbalance,":[95],"high":[96],"dimensionality,":[97],"temporal":[99],"dependencies.":[100],"The":[101],"models":[102,252],"achieved":[103],"near-perfect":[104],"performance,":[105],"RTDLResNet":[107],"attaining":[108],"Macro":[110,268],"Avg":[111,139,269],"F1-Score":[112],"1.00,":[114],"followed":[115],"DCNv2_MoE":[117],"EE-MLP":[119],"at":[120,124],"0.99,":[121],"TCN":[123],"0.96.":[125],"Cross-dataset":[126],"evaluation":[127],"on":[128,168,259],"an":[129],"independent":[130],"public":[131],"benchmark":[133],"further":[134],"confirmed":[135],"competitive":[136,267],"generalization":[137],"(Macro":[138],"F1-Scores":[140,270],"0.80–0.85),":[142],"although":[143],"performance":[144,167],"naturally":[145],"declined":[146],"due":[147],"domain":[149,276],"shift":[150],"between":[151],"laboratory-generated":[152],"real-world":[154,248],"traffic":[155],"patterns.":[156],"Class-specific":[157],"analysis":[158],"revealed":[159],"robust":[160],"volumetric":[163],"attacks":[164],"but":[165],"variable":[166],"scanning":[169],"attacks,":[170],"particularly":[171],"TCN’s":[172],"lower":[173],"precision":[174],"OS":[176],"scans.":[177],"These":[178,278],"findings":[179,279],"highlight":[180,280],"strengths":[182,282],"tabular":[184,284],"sequential":[186,286],"architectures":[187,287],"security,":[190,290],"offering":[191,291],"scalable":[193,293],"framework":[194,294],"real-time":[196,296],"while":[199,299],"identifying":[200,300],"areas":[201,301],"enhancing":[203,303],"model":[204,304],"robustness":[205,305],"generalizability":[207,307],"against":[208,308],"evolving":[209,309],"threats.":[210,310],"While":[211],"results":[212],"derived":[214],"from":[215],"laboratory":[218],"environment,":[219],"future":[220],"semi-real-world":[221],"validation":[222],"digital":[224],"twin":[225],"setups":[226],"is":[227],"planned":[228],"bridge":[230],"gap":[232],"operational":[234],"deployments,":[236],"ensuring":[237],"applicability":[238],"boundaries":[239],"clearly":[241],"defined.":[242],"To":[243],"partially":[244],"mitigate":[245],"concerns":[246],"regarding":[247],"applicability,":[249],"trained":[251],"were":[253],"evaluated":[254],"zero-shot":[257],"manner":[258],"publicly":[261],"available":[262],"SDN-based":[263],"achieving":[266],"0.80–0.85":[273],"range":[274],"despite":[275],"shift.":[277]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-12T00:00:00"}