{"id":"https://openalex.org/W4417169106","doi":"https://doi.org/10.1109/icecs66544.2025.11270675","title":"Ontology-Driven Semantic Honeypot with Digital Twin Integration for Context-Aware Cyber Deception in Industrial OT Systems","display_name":"Ontology-Driven Semantic Honeypot with Digital Twin Integration for Context-Aware Cyber Deception in Industrial OT Systems","publication_year":2025,"publication_date":"2025-11-17","ids":{"openalex":"https://openalex.org/W4417169106","doi":"https://doi.org/10.1109/icecs66544.2025.11270675"},"language":null,"primary_location":{"id":"doi:10.1109/icecs66544.2025.11270675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icecs66544.2025.11270675","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 32nd IEEE International Conference on Electronics, Circuits and Systems (ICECS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119834523","display_name":"Youness Ghazi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210113095","display_name":"\u00c9cole Marocaine des Sciences de l'Ing\u00e9nieur","ror":"https://ror.org/01d1pbg09","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210113095"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Youness Ghazi","raw_affiliation_strings":["EMSI Casablanca,LPRI Laboratory,Morocco"],"affiliations":[{"raw_affiliation_string":"EMSI Casablanca,LPRI Laboratory,Morocco","institution_ids":["https://openalex.org/I4210113095"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015679036","display_name":"Mohamed Tabaa","orcid":"https://orcid.org/0000-0003-3938-3566"},"institutions":[{"id":"https://openalex.org/I4210113095","display_name":"\u00c9cole Marocaine des Sciences de l'Ing\u00e9nieur","ror":"https://ror.org/01d1pbg09","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210113095"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mohamed Tabaa","raw_affiliation_strings":["EMSI Casablanca,LPRI Laboratory,Morocco"],"affiliations":[{"raw_affiliation_string":"EMSI Casablanca,LPRI Laboratory,Morocco","institution_ids":["https://openalex.org/I4210113095"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032445364","display_name":"Ghita Zaz","orcid":"https://orcid.org/0000-0003-0901-6677"},"institutions":[{"id":"https://openalex.org/I99297268","display_name":"University of Hassan II Casablanca","ror":"https://ror.org/001q4kn48","country_code":"MA","type":"education","lineage":["https://openalex.org/I99297268"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Ghita Zaz","raw_affiliation_strings":["Hassan II University,DELTA-Lab, ENSAM Casablanca,Casablanca,Morocco"],"affiliations":[{"raw_affiliation_string":"Hassan II University,DELTA-Lab, ENSAM Casablanca,Casablanca,Morocco","institution_ids":["https://openalex.org/I99297268"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080378493","display_name":"Mohamed Ennaji","orcid":"https://orcid.org/0000-0001-5353-6851"},"institutions":[{"id":"https://openalex.org/I99297268","display_name":"University of Hassan II Casablanca","ror":"https://ror.org/001q4kn48","country_code":"MA","type":"education","lineage":["https://openalex.org/I99297268"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mohamed Ennaji","raw_affiliation_strings":["Hassan II University,DELTA-Lab, ENSAM Casablanca,Casablanca,Morocco"],"affiliations":[{"raw_affiliation_string":"Hassan II University,DELTA-Lab, ENSAM Casablanca,Casablanca,Morocco","institution_ids":["https://openalex.org/I99297268"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5119834523"],"corresponding_institution_ids":["https://openalex.org/I4210113095"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.51313111,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.8831999897956848,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.8831999897956848,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.03060000017285347,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.008500000461935997,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.7573999762535095},{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.6809999942779541},{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.5267000198364258},{"id":"https://openalex.org/keywords/credibility","display_name":"Credibility","score":0.5224000215530396},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5212000012397766},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4668999910354614},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.44020000100135803},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4059000015258789},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.40310001373291016}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.7573999762535095},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7213000059127808},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.6809999942779541},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.5267000198364258},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.5224000215530396},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5212000012397766},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4668999910354614},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45809999108314514},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.44020000100135803},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4059000015258789},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.40310001373291016},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.3644999861717224},{"id":"https://openalex.org/C161301231","wikidata":"https://www.wikidata.org/wiki/Q3478658","display_name":"Knowledge representation and reasoning","level":2,"score":0.3637000024318695},{"id":"https://openalex.org/C202839342","wikidata":"https://www.wikidata.org/wiki/Q60740481","display_name":"Industrial Internet","level":3,"score":0.3452000021934509},{"id":"https://openalex.org/C2777986313","wikidata":"https://www.wikidata.org/wiki/Q1661989","display_name":"Industry 4.0","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3163999915122986},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2992999851703644},{"id":"https://openalex.org/C46743427","wikidata":"https://www.wikidata.org/wiki/Q1341685","display_name":"Inference engine","level":3,"score":0.2985999882221222},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C3746660","wikidata":"https://www.wikidata.org/wiki/Q1068763","display_name":"Rule of inference","level":2,"score":0.28679999709129333},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.27149999141693115},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.25690001249313354},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icecs66544.2025.11270675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icecs66544.2025.11270675","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 32nd IEEE International Conference on Electronics, Circuits and Systems (ICECS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2151584216","https://openalex.org/W4412830319"],"related_works":[],"abstract_inverted_index":{"The":[0,62],"growing":[1],"complexity":[2],"of":[3,9,37,47,82,105,129,154,163,177,184,189],"OT":[4],"architectures":[5],"and":[6,35,55,71,86,101,126,166,180],"the":[7,32,79,103,113,117,120,124,130,152,155,161,175,186],"rise":[8],"semantic":[10,164],"attacks":[11],"on":[12,51,137],"industrial":[13,39,48,90,191],"processes":[14],"require":[15],"new":[16,45],"cyber":[17,187],"deception":[18],"mechanisms.":[19],"Traditional":[20],"honeypots":[21,182],"capture":[22],"attacker":[23],"actions":[24],"but":[25],"lack":[26],"realism.":[27],"They":[28],"fail":[29],"to":[30,66,89,93,107,169],"reproduce":[31],"business":[33,53],"logic":[34],"dynamics":[36],"complex":[38],"environments.":[40],"This":[41,172],"article":[42],"presents":[43],"a":[44,52,59],"type":[46],"honeypot,":[49],"based":[50],"ontology":[54],"closely":[56],"associated":[57],"with":[58,112],"digital":[60,121],"twin.":[61],"ontology,":[63],"built":[64],"according":[65],"OWL":[67],"(Web":[68],"Ontology":[69],"Language)":[70,75],"SHACL":[72],"(Shapes":[73],"Constraint":[74],"standards,":[76],"allows":[77],"for":[78],"accurate":[80],"representation":[81],"equipment,":[83],"their":[84],"interactions,":[85],"rules":[87],"specific":[88],"operations.":[91],"Thanks":[92],"this":[94,149],"model,":[95],"an":[96,138],"inference":[97],"engine":[98],"can":[99],"analyze":[100],"understand":[102],"intentions":[104],"attackers":[106],"provide":[108],"realistic":[109],"responses":[110],"consistent":[111],"operational":[114],"context.":[115],"At":[116],"same":[118],"time,":[119],"twin":[122],"ensures":[123],"temporal":[125],"dynamic":[127],"consistency":[128],"simulated":[131],"responses.":[132],"Experimental":[133],"validation":[134],"carried":[135],"out":[136],"OPC":[139],"UA":[140],"(Open":[141],"Platform":[142],"Communications":[143],"Unified":[144],"Architecture)":[145],"environment":[146],"shows":[147],"that":[148],"approach":[150],"improves":[151,160],"credibility":[153],"honeypot":[156],"(Honeyscore":[157],"=":[158],"0.2),":[159],"detection":[162],"anomalies,":[165],"increases":[167],"resistance":[168],"fingerprinting":[170],"techniques.":[171],"contribution":[173],"opens":[174],"prospect":[176],"intelligent,":[178],"adaptive,":[179],"integrated":[181],"capable":[183],"strengthening":[185],"resilience":[188],"critical":[190],"infrastructures.":[192]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-09T00:00:00"}