{"id":"https://openalex.org/W2562876364","doi":"https://doi.org/10.1109/icnp.2016.7784407","title":"Characterizing industrial control system devices on the Internet","display_name":"Characterizing industrial control system devices on the Internet","publication_year":2016,"publication_date":"2016-11-01","ids":{"openalex":"https://openalex.org/W2562876364","doi":"https://doi.org/10.1109/icnp.2016.7784407","mag":"2562876364"},"language":"en","primary_location":{"id":"doi:10.1109/icnp.2016.7784407","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp.2016.7784407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE 24th International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101917637","display_name":"Xuan Feng","orcid":"https://orcid.org/0000-0003-1661-6590"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xuan Feng","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, China","School of Computer and Information Technology, Beijing Jiaotong University, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"School of Computer and Information Technology, Beijing Jiaotong University, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100430015","display_name":"Q. Li","orcid":"https://orcid.org/0000-0002-8290-0517"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Li","raw_affiliation_strings":["School of Computer and Information Technology, Beijing Jiaotong University, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Technology, Beijing Jiaotong University, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100664241","display_name":"Haining Wang","orcid":"https://orcid.org/0000-0002-9665-7511"},"institutions":[{"id":"https://openalex.org/I86501945","display_name":"University of Delaware","ror":"https://ror.org/01sbq1a82","country_code":"US","type":"education","lineage":["https://openalex.org/I86501945"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haining Wang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Delaware, USA"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Delaware, USA","institution_ids":["https://openalex.org/I86501945"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101820083","display_name":"Limin Sun","orcid":"https://orcid.org/0000-0002-6578-0680"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Limin Sun","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5101917637"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I21193070","https://openalex.org/I4210156404"],"apc_list":null,"apc_paid":null,"fwci":6.0803,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":{"value":0.96602667,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.7887409925460815},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.7035836577415466},{"id":"https://openalex.org/keywords/ipv4","display_name":"IPv4","score":0.677379846572876},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6407443284988403},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5677006840705872},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.5199607610702515},{"id":"https://openalex.org/keywords/industrial-internet","display_name":"Industrial Internet","score":0.4111185073852539},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3599892556667328},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3188551664352417},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.24959295988082886},{"id":"https://openalex.org/keywords/ipv6","display_name":"IPv6","score":0.20287838578224182},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2017216980457306},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.18456408381462097},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13482362031936646}],"concepts":[{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.7887409925460815},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.7035836577415466},{"id":"https://openalex.org/C2779233093","wikidata":"https://www.wikidata.org/wiki/Q11103","display_name":"IPv4","level":4,"score":0.677379846572876},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6407443284988403},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5677006840705872},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.5199607610702515},{"id":"https://openalex.org/C202839342","wikidata":"https://www.wikidata.org/wiki/Q60740481","display_name":"Industrial Internet","level":3,"score":0.4111185073852539},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3599892556667328},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3188551664352417},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.24959295988082886},{"id":"https://openalex.org/C84555802","wikidata":"https://www.wikidata.org/wiki/Q2551624","display_name":"IPv6","level":3,"score":0.20287838578224182},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2017216980457306},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.18456408381462097},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13482362031936646}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icnp.2016.7784407","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp.2016.7784407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE 24th International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6499999761581421}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1486443221","https://openalex.org/W1491638588","https://openalex.org/W1506806321","https://openalex.org/W1511682410","https://openalex.org/W1576185228","https://openalex.org/W1598169875","https://openalex.org/W1782472225","https://openalex.org/W2009250465","https://openalex.org/W2067117154","https://openalex.org/W2096273775","https://openalex.org/W2104599106","https://openalex.org/W2106888311","https://openalex.org/W2112736324","https://openalex.org/W2114398364","https://openalex.org/W2131463233","https://openalex.org/W2144489971","https://openalex.org/W2147767253","https://openalex.org/W2159772324","https://openalex.org/W2162783010","https://openalex.org/W2170924378","https://openalex.org/W2204863282","https://openalex.org/W2578943040","https://openalex.org/W2999812538","https://openalex.org/W4321635961","https://openalex.org/W6629032807","https://openalex.org/W6634619446","https://openalex.org/W6635785157","https://openalex.org/W6677217071","https://openalex.org/W6732122053"],"related_works":["https://openalex.org/W4389485405","https://openalex.org/W313385724","https://openalex.org/W2796752342","https://openalex.org/W1967903162","https://openalex.org/W2990025694","https://openalex.org/W4211206025","https://openalex.org/W4200331022","https://openalex.org/W4285327734","https://openalex.org/W2971541747","https://openalex.org/W2967819419"],"abstract_inverted_index":{"Industrial":[0],"control":[1,65,93],"system":[2,142],"(ICS)":[3],"devices":[4,55,72,113,131,150],"with":[5],"IP":[6],"addresses":[7],"are":[8,196,212],"accessible":[9,53],"on":[10,56,143,166],"the":[11,37,57,67,101,115,120,127,152,167,180,187,190,197,213],"Internet":[12],"and":[13,79,95,146,209],"play":[14],"a":[15,27,44,77,97,133,174],"crucial":[16],"role":[17],"for":[18,156],"critical":[19,61],"infrastructures":[20],"like":[21],"power":[22],"grid.":[23],"However,":[24],"there":[25],"is":[26],"lack":[28],"of":[29,32,60,63,69,122,129,182,200,215],"deep":[30],"understanding":[31],"these":[33,52,206,216],"devices'":[34],"characteristics":[35],"in":[36,47,76,91,114,132,151,186],"cyberspace.":[38],"In":[39],"this":[40,48],"paper,":[41],"we":[42,83,109,137,172],"take":[43],"first":[45,84],"step":[46],"direction":[49],"by":[50],"investigating":[51],"industrial":[54,64,87,92,123],"Internet.":[58],"Because":[59],"nature":[62],"systems,":[66,94],"detection":[68,106],"online":[70,111,148],"ICS":[71,112,130,149,168,183,201,207,217],"should":[73],"be":[74],"done":[75],"real-time":[78],"non-intrusive":[80],"manner.":[81],"Thus,":[82],"analyze":[85],"17":[86],"protocols":[88],"widely":[89],"used":[90],"train":[96],"probability":[98],"model":[99],"through":[100],"learning":[102],"algorithm":[103],"to":[104,162,178,189],"improve":[105],"accuracy.":[107],"Then,":[108],"discover":[110],"IPv4":[116,154],"space":[117,155],"while":[118],"reducing":[119],"noise":[121],"honeypots.":[124],"To":[125],"observe":[126],"dynamics":[128],"relatively":[134],"long":[135],"run,":[136],"have":[138],"deployed":[139],"our":[140],"discovery":[141],"Amazon":[144],"EC2":[145],"detected":[147],"whole":[153],"eight":[157],"times":[158],"from":[159],"August":[160],"2015":[161],"March":[163],"2016.":[164],"Based":[165],"device":[169],"data":[170,176],"collection,":[171],"conduct":[173],"comprehensive":[175],"analysis":[177],"characterize":[179],"usage":[181],"devices,":[184,202,208],"especially":[185],"answer":[188],"following":[191],"three":[192],"questions:":[193],"(1)":[194],"what":[195,211],"distribution":[198],"features":[199],"(2)":[203],"who":[204],"use":[205],"(3)":[210],"functions":[214],"devices.":[218]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}