{"id":"https://openalex.org/W2625285245","doi":"https://doi.org/10.1109/aiccsa.2016.7945692","title":"Anomaly behavior analysis for building automation systems","display_name":"Anomaly behavior analysis for building automation systems","publication_year":2016,"publication_date":"2016-11-01","ids":{"openalex":"https://openalex.org/W2625285245","doi":"https://doi.org/10.1109/aiccsa.2016.7945692","mag":"2625285245"},"language":"en","primary_location":{"id":"doi:10.1109/aiccsa.2016.7945692","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2016.7945692","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE/ACS 13th International Conference of Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021942394","display_name":"Zhiwen Pan","orcid":"https://orcid.org/0000-0002-7266-7264"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiwen Pan","raw_affiliation_strings":["Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074633812","display_name":"Jes\u00fas Pacheco","orcid":"https://orcid.org/0000-0002-8636-5902"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jesus Pacheco","raw_affiliation_strings":["Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057335897","display_name":"Salim Hariri","orcid":"https://orcid.org/0000-0003-3956-3401"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salim Hariri","raw_affiliation_strings":["Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, The University of Arizona, Tucson, Arizona, USA","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I138006243"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7362039089202881},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6625913977622986},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.620067298412323},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5753515362739563},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5736618041992188},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5529826879501343},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5303564667701721},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5299302935600281},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.49540889263153076},{"id":"https://openalex.org/keywords/building-automation","display_name":"Building automation","score":0.4704987704753876},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.46348100900650024},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.4451335370540619},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4202916920185089},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.4163908064365387},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4144865870475769},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.16210263967514038},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.13577041029930115},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.09998396039009094}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7362039089202881},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6625913977622986},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.620067298412323},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5753515362739563},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5736618041992188},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5529826879501343},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5303564667701721},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5299302935600281},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.49540889263153076},{"id":"https://openalex.org/C83931994","wikidata":"https://www.wikidata.org/wiki/Q1149653","display_name":"Building automation","level":2,"score":0.4704987704753876},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.46348100900650024},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.4451335370540619},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4202916920185089},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.4163908064365387},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4144865870475769},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.16210263967514038},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.13577041029930115},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.09998396039009094},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa.2016.7945692","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2016.7945692","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE/ACS 13th International Conference of Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W38537450","https://openalex.org/W1488038755","https://openalex.org/W1554695315","https://openalex.org/W1570448133","https://openalex.org/W1579488430","https://openalex.org/W1630964756","https://openalex.org/W1981769106","https://openalex.org/W2007827828","https://openalex.org/W2028210230","https://openalex.org/W2031519899","https://openalex.org/W2035203720","https://openalex.org/W2137059822","https://openalex.org/W2150523364","https://openalex.org/W2152977574","https://openalex.org/W2296425371","https://openalex.org/W2342641467","https://openalex.org/W2343987812","https://openalex.org/W2503352840","https://openalex.org/W2534900089","https://openalex.org/W2561935797","https://openalex.org/W6636614058"],"related_works":["https://openalex.org/W3089038912","https://openalex.org/W3123953333","https://openalex.org/W2991090559","https://openalex.org/W2994115976","https://openalex.org/W2365028815","https://openalex.org/W2301097441","https://openalex.org/W4311224517","https://openalex.org/W2492702919","https://openalex.org/W2265197000","https://openalex.org/W2159417232"],"abstract_inverted_index":{"Advanced":[0],"networking":[1],"technology":[2],"and":[3,19,40,79,89,99,121,172],"increasing":[4],"information":[5,105],"services":[6],"have":[7],"led":[8],"to":[9,38,55,83,130,149],"extensive":[10],"interconnection":[11],"between":[12],"Building":[13,161],"Automation":[14],"Systems":[15],"(BAS)":[16],"communication":[17],"protocols":[18],"Internet,":[20],"which":[21],"makes":[22],"Fog":[23],"computing":[24],"service":[25,97],"a":[26],"potential":[27],"solution":[28],"for":[29,96,170],"automation":[30],"of":[31,47,143,167,184],"building":[32,111],"end":[33],"devices.":[34],"However,":[35],"the":[36,45,48,56,60,104,159,165,181],"connection":[37],"Internet":[39],"public":[41],"networks":[42,50],"increases":[43],"significantly":[44],"risk":[46],"BAS":[49],"being":[51],"attacked":[52],"due":[53],"mainly":[54],"significant":[57],"increase":[58],"in":[59,158],"attack":[61],"surface.":[62],"In":[63],"this":[64],"paper,":[65],"we":[66],"present":[67],"an":[68],"anomaly":[69],"based":[70],"Intrusion":[71],"Detection":[72],"System":[73],"(IDS)":[74],"that":[75,106,179],"combines":[76],"context":[77],"awareness":[78],"Cyber":[80],"DNA":[81],"techniques":[82,129],"detect":[84,132],"network":[85],"misbehavior":[86],"from":[87,110],"security":[88],"functionality":[90,100],"perspectives.":[91],"We":[92,154],"developed":[93,163],"runtime":[94],"models":[95],"interactions":[98],"patterns":[101],"by":[102,136,175],"modeling":[103],"is":[107],"continuously":[108],"acquired":[109],"assets":[112],"into":[113],"two":[114],"novel":[115],"data":[116],"structures:":[117],"Protocol":[118],"Context":[119],"Aware":[120],"sensor-DNA.":[122],"Our":[123],"IDS":[124,148],"uses":[125],"Anomaly":[126],"Behavior":[127],"Analysis":[128],"accurately":[131],"anomalous":[133],"events":[134],"triggered":[135],"cyber-attacks":[137,178],"or":[138],"any":[139],"failure.":[140],"A":[141],"classification":[142],"detected":[144],"attacks":[145],"allow":[146],"our":[147,156],"automatically":[150],"launch":[151],"protective":[152],"countermeasures.":[153],"evaluate":[155],"approach":[157],"Smart":[160],"testbed":[162],"at":[164],"University":[166],"Arizona":[168],"Center":[169],"Cloud":[171],"Autonomic":[173],"Computing,":[174],"launching":[176],"several":[177],"exploit":[180],"generic":[182],"vulnerabilities":[183],"BAS.":[185]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}