{"id":"https://openalex.org/W2782983291","doi":"https://doi.org/10.1109/bigdata.2017.8258360","title":"Exploratory studies into forensic logs for criminal investigation using case studies in industrial control systems in the power sector","display_name":"Exploratory studies into forensic logs for criminal investigation using case studies in industrial control systems in the power sector","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2782983291","doi":"https://doi.org/10.1109/bigdata.2017.8258360","mag":"2782983291"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2017.8258360","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258360","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100607443","display_name":"Asif Iqbal","orcid":"https://orcid.org/0000-0002-0682-8170"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Asif Iqbal","raw_affiliation_strings":["Kungliga Tekniska Hogskolan, Stockholm, SE"],"affiliations":[{"raw_affiliation_string":"Kungliga Tekniska Hogskolan, Stockholm, SE","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005761737","display_name":"Mirjam Ekstedt","orcid":"https://orcid.org/0000-0002-4108-391X"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Mathias Ekstedt","raw_affiliation_strings":["Kungliga Tekniska Hogskolan, Stockholm, SE"],"affiliations":[{"raw_affiliation_string":"Kungliga Tekniska Hogskolan, Stockholm, SE","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034298420","display_name":"Hanan Alobaidli","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149392","display_name":"Athena Group (United States)","ror":"https://ror.org/045nvsg67","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149392"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanan Alobaidli","raw_affiliation_strings":["Athena Labs"],"affiliations":[{"raw_affiliation_string":"Athena Labs","institution_ids":["https://openalex.org/I4210149392"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100607443"],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":1.9345,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.90209202,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"11","issue":null,"first_page":"3657","last_page":"3661"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6966887712478638},{"id":"https://openalex.org/keywords/exploratory-research","display_name":"Exploratory research","score":0.6770750284194946},{"id":"https://openalex.org/keywords/forensic-science","display_name":"Forensic science","score":0.582846999168396},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5785014033317566},{"id":"https://openalex.org/keywords/criminal-investigation","display_name":"Criminal investigation","score":0.5692520141601562},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5601680874824524},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5526071190834045},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.4931637644767761},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4406876266002655},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36481910943984985},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.3376455307006836},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2196219563484192},{"id":"https://openalex.org/keywords/criminology","display_name":"Criminology","score":0.12729927897453308},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.09830260276794434},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.0754246711730957},{"id":"https://openalex.org/keywords/mechanical-engineering","display_name":"Mechanical engineering","score":0.074181467294693}],"concepts":[{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6966887712478638},{"id":"https://openalex.org/C85973986","wikidata":"https://www.wikidata.org/wiki/Q1091731","display_name":"Exploratory research","level":2,"score":0.6770750284194946},{"id":"https://openalex.org/C140505726","wikidata":"https://www.wikidata.org/wiki/Q495304","display_name":"Forensic science","level":2,"score":0.582846999168396},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5785014033317566},{"id":"https://openalex.org/C117660856","wikidata":"https://www.wikidata.org/wiki/Q1964968","display_name":"Criminal investigation","level":2,"score":0.5692520141601562},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5601680874824524},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5526071190834045},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.4931637644767761},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4406876266002655},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36481910943984985},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3376455307006836},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2196219563484192},{"id":"https://openalex.org/C73484699","wikidata":"https://www.wikidata.org/wiki/Q161733","display_name":"Criminology","level":1,"score":0.12729927897453308},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09830260276794434},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0754246711730957},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.074181467294693},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2017.8258360","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258360","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7699999809265137,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1550805152","https://openalex.org/W2016124028","https://openalex.org/W2041078517","https://openalex.org/W2188079924","https://openalex.org/W2474685028","https://openalex.org/W2781892241","https://openalex.org/W2891220155","https://openalex.org/W6686678593","https://openalex.org/W6720871274","https://openalex.org/W6747649055","https://openalex.org/W6754903540"],"related_works":["https://openalex.org/W2115574256","https://openalex.org/W4221025859","https://openalex.org/W4230294240","https://openalex.org/W2377583391","https://openalex.org/W2269558259","https://openalex.org/W2470741444","https://openalex.org/W4283012902","https://openalex.org/W2380955830","https://openalex.org/W4205430722","https://openalex.org/W4396750995"],"abstract_inverted_index":{"This":[0],"is":[1,55],"a":[2,50],"set":[3],"of":[4,15,27,35,49],"work-in-progress":[5],"exploratory":[6],"studies":[7],"dealing":[8],"with":[9],"the":[10,25,33,46,60,69],"log":[11],"analysis":[12],"and":[13,37,57],"correlation":[14],"very":[16],"specialized":[17],"setups":[18],"in":[19,24,59],"industrial":[20],"control":[21],"systems":[22],"implemented":[23],"context":[26],"power":[28,75],"systems.":[29],"These":[30],"cases":[31],"consider":[32],"behavior":[34],"logs":[36],"their":[38],"ability":[39],"or":[40],"inability":[41],"to":[42],"shed":[43],"light":[44],"on":[45,72],"incriminating":[47],"nature":[48],"criminal":[51],"investigation.":[52],"Our":[53],"research":[54],"novel":[56],"unique":[58],"sense":[61],"that":[62],"no":[63],"such":[64],"previous":[65],"study":[66],"exists":[67],"detailing":[68],"forensic":[70],"investigation":[71],"ICS":[73],"within":[74],"sector.":[76]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}