{"id":"https://openalex.org/W4415400198","doi":"https://doi.org/10.1109/etfa65518.2025.11205588","title":"Security Gateway for Automated Micro-Segmentation and VPN Encryption in Industrial Legacy Systems","display_name":"Security Gateway for Automated Micro-Segmentation and VPN Encryption in Industrial Legacy Systems","publication_year":2025,"publication_date":"2025-09-09","ids":{"openalex":"https://openalex.org/W4415400198","doi":"https://doi.org/10.1109/etfa65518.2025.11205588"},"language":null,"primary_location":{"id":"doi:10.1109/etfa65518.2025.11205588","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205588","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107179019","display_name":"Sabrina Kaniewski","orcid":null},"institutions":[{"id":"https://openalex.org/I134656947","display_name":"Esslingen University of Applied Sciences","ror":"https://ror.org/056cezx90","country_code":"DE","type":"education","lineage":["https://openalex.org/I134656947"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sabrina Kaniewski","raw_affiliation_strings":["Esslingen University of Applied Sciences,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Esslingen University of Applied Sciences,Germany","institution_ids":["https://openalex.org/I134656947"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106548823","display_name":"Lukas Bechtel","orcid":"https://orcid.org/0000-0003-2635-8572"},"institutions":[{"id":"https://openalex.org/I134656947","display_name":"Esslingen University of Applied Sciences","ror":"https://ror.org/056cezx90","country_code":"DE","type":"education","lineage":["https://openalex.org/I134656947"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lukas Bechtel","raw_affiliation_strings":["Esslingen University of Applied Sciences,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Esslingen University of Applied Sciences,Germany","institution_ids":["https://openalex.org/I134656947"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120084390","display_name":"Pascal Kneisel","orcid":null},"institutions":[{"id":"https://openalex.org/I134656947","display_name":"Esslingen University of Applied Sciences","ror":"https://ror.org/056cezx90","country_code":"DE","type":"education","lineage":["https://openalex.org/I134656947"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pascal Kneisel","raw_affiliation_strings":["Esslingen University of Applied Sciences,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Esslingen University of Applied Sciences,Germany","institution_ids":["https://openalex.org/I134656947"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066802567","display_name":"Michael Menth","orcid":"https://orcid.org/0000-0002-3216-1015"},"institutions":[{"id":"https://openalex.org/I8087733","display_name":"University of T\u00fcbingen","ror":"https://ror.org/03a1kwz48","country_code":"DE","type":"education","lineage":["https://openalex.org/I8087733"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Menth","raw_affiliation_strings":["Chair of Communication Networks University of Tuebingen,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chair of Communication Networks University of Tuebingen,Germany","institution_ids":["https://openalex.org/I8087733"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065269908","display_name":"Tobias Heer","orcid":"https://orcid.org/0000-0003-3119-252X"},"institutions":[{"id":"https://openalex.org/I134656947","display_name":"Esslingen University of Applied Sciences","ror":"https://ror.org/056cezx90","country_code":"DE","type":"education","lineage":["https://openalex.org/I134656947"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Heer","raw_affiliation_strings":["Esslingen University of Applied Sciences,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Esslingen University of Applied Sciences,Germany","institution_ids":["https://openalex.org/I134656947"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3249,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81971479,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6155999898910522,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6155999898910522,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/legacy-system","display_name":"Legacy system","score":0.5437999963760376},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5400000214576721},{"id":"https://openalex.org/keywords/private-network","display_name":"Private network","score":0.5048999786376953},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.5022000074386597},{"id":"https://openalex.org/keywords/gateway","display_name":"Gateway (web page)","score":0.46140000224113464},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4307999908924103},{"id":"https://openalex.org/keywords/data-security","display_name":"Data security","score":0.4262000024318695},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.40779998898506165},{"id":"https://openalex.org/keywords/retrofitting","display_name":"Retrofitting","score":0.40209999680519104},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.3910999894142151}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6424999833106995},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6186000108718872},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.5437999963760376},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5400000214576721},{"id":"https://openalex.org/C117387248","wikidata":"https://www.wikidata.org/wiki/Q11186","display_name":"Private network","level":2,"score":0.5048999786376953},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.5022000074386597},{"id":"https://openalex.org/C2777710495","wikidata":"https://www.wikidata.org/wiki/Q5527195","display_name":"Gateway (web page)","level":2,"score":0.46140000224113464},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4307999908924103},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.4262000024318695},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.40779998898506165},{"id":"https://openalex.org/C2778368411","wikidata":"https://www.wikidata.org/wiki/Q24662","display_name":"Retrofitting","level":2,"score":0.40209999680519104},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.3910999894142151},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3831999897956848},{"id":"https://openalex.org/C178639896","wikidata":"https://www.wikidata.org/wiki/Q604035","display_name":"Logical security","level":5,"score":0.3626999855041504},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.361299991607666},{"id":"https://openalex.org/C187713609","wikidata":"https://www.wikidata.org/wiki/Q2465461","display_name":"Default gateway","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C14982408","wikidata":"https://www.wikidata.org/wiki/Q11006334","display_name":"Network Access Control","level":4,"score":0.35679998993873596},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.34139999747276306},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.31610000133514404},{"id":"https://openalex.org/C130881749","wikidata":"https://www.wikidata.org/wiki/Q586894","display_name":"Security association","level":5,"score":0.3061999976634979},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.30070000886917114},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2985999882221222},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.2980000078678131},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.290800005197525},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2906000018119812},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2874000072479248},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2782999873161316},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C2780405328","wikidata":"https://www.wikidata.org/wiki/Q1067099","display_name":"Internetworking","level":3,"score":0.27570000290870667},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.2732999920845032},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.2662999927997589}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/etfa65518.2025.11205588","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205588","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2288292231","https://openalex.org/W2407991977","https://openalex.org/W2537545643","https://openalex.org/W2612102454","https://openalex.org/W3009709460","https://openalex.org/W3198438389","https://openalex.org/W4205088899","https://openalex.org/W4205616317","https://openalex.org/W4312783981","https://openalex.org/W4403447675"],"related_works":[],"abstract_inverted_index":{"In":[0,42,70],"today\u2019s":[1],"industrial":[2,43],"networks,":[3,16,44],"secure":[4,161,167],"communication":[5,30],"among":[6],"participants":[7],"is":[8,67,88,109],"crucial.":[9],"Security":[10],"measures":[11,47,81],"commonly":[12],"employed":[13],"in":[14,90],"IT":[15],"e.g.,":[17],"network":[18,65,127],"segmentation":[19],"and":[20,35,96,103,115,163],"Virtual":[21],"Private":[22],"Networks":[23],"(VPN),":[24],"prevent":[25],"unauthorized":[26],"access":[27],"by":[28,39],"restricting":[29],"flows":[31],"within":[32],"logical":[33],"segments":[34],"ensure":[36],"data":[37],"confidentiality":[38],"encryption,":[40],"respectively.":[41],"however,":[45],"security":[46,66,80,84,148],"are":[48],"often":[49],"not":[50],"used":[51],"due":[52],"to":[53,60,158,165],"legacy":[54,94,170],"devices":[55],"lacking":[56],"the":[57,76,110,131,134,156,166],"required":[58],"capabilities":[59],"implement":[61],"them.":[62],"Thus,":[63],"maintaining":[64],"particularly":[68],"difficult.":[69],"this":[71,120],"work,":[72],"we":[73],"take":[74],"up":[75],"concept":[77],"of":[78,92,112,133,147,169],"retrofitting":[79,146],"using":[82,122],"a":[83,93,137,152,159],"gateway.":[85],"The":[86,140],"gateway":[87],"placed":[89],"front":[91],"device":[95],"takes":[97],"over":[98],"tasks":[99],"such":[100],"as":[101],"micro-segmentation":[102],"VPN":[104,116],"encryption.":[105],"A":[106],"resulting":[107],"challenge":[108,121],"derivation":[111],"appropriate":[113],"micro-segments":[114],"tunnels.":[117],"We":[118,129],"address":[119],"heuristics":[123],"based":[124],"on":[125],"observed":[126],"traffic.":[128],"demonstrate":[130],"feasibility":[132],"approach":[135,143],"through":[136],"Proof-of-Concept":[138],"(PoC).":[139],"proposed":[141],"semi-automated":[142],"allows":[144],"for":[145],"measures,":[149],"thereby":[150],"ensuring":[151],"seamless":[153],"migration":[154],"from":[155],"existing":[157],"more":[160],"infrastructure":[162],"contributing":[164],"integration":[168],"devices.":[171]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-22T00:00:00"}