{"id":"https://openalex.org/W3113064179","doi":"https://doi.org/10.1109/icps48405.2020.9274691","title":"Method for Assessment of Security-Relevant Settings in Anomaly-Based Intrusion Detection for Industrial Control Systems","display_name":"Method for Assessment of Security-Relevant Settings in Anomaly-Based Intrusion Detection for Industrial Control Systems","publication_year":2020,"publication_date":"2020-06-10","ids":{"openalex":"https://openalex.org/W3113064179","doi":"https://doi.org/10.1109/icps48405.2020.9274691","mag":"3113064179"},"language":"en","primary_location":{"id":"doi:10.1109/icps48405.2020.9274691","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icps48405.2020.9274691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Industrial Cyberphysical Systems (ICPS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.osti.gov/servlets/purl/1735459","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063942604","display_name":"Rob Gillen","orcid":"https://orcid.org/0000-0002-9002-1440"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert E. Gillen","raw_affiliation_strings":["Oak Ridge National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109843869","display_name":"Stephen L. Scott","orcid":null},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen L. Scott","raw_affiliation_strings":["Tennessee Technological University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Technological University","institution_ids":["https://openalex.org/I63920570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6998,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.65386226,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"6","issue":null,"first_page":"156","last_page":"161"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7477570176124573},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7065463066101074},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.6810153722763062},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.644210696220398},{"id":"https://openalex.org/keywords/extant-taxon","display_name":"Extant taxon","score":0.5852183103561401},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5356447696685791},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.5009982585906982},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.4953826665878296},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4788063168525696},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4779251217842102},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.46816369891166687},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4629536271095276},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.45151662826538086},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.426783949136734},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.41190004348754883},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.18984255194664001},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.183018296957016},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.172286719083786},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10639309883117676},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.10605800151824951},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09527638554573059}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7477570176124573},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7065463066101074},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.6810153722763062},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.644210696220398},{"id":"https://openalex.org/C178300618","wikidata":"https://www.wikidata.org/wiki/Q1898509","display_name":"Extant taxon","level":2,"score":0.5852183103561401},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5356447696685791},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.5009982585906982},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.4953826665878296},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4788063168525696},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4779251217842102},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.46816369891166687},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4629536271095276},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.45151662826538086},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.426783949136734},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.41190004348754883},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.18984255194664001},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.183018296957016},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.172286719083786},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10639309883117676},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.10605800151824951},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09527638554573059},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icps48405.2020.9274691","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icps48405.2020.9274691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Industrial Cyberphysical Systems (ICPS)","raw_type":"proceedings-article"},{"id":"pmh:oai:osti.gov:1735459","is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/1735459","pdf_url":"https://www.osti.gov/servlets/purl/1735459","source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:osti.gov:1735459","is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/1735459","pdf_url":"https://www.osti.gov/servlets/purl/1735459","source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5099999904632568,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320306250","display_name":"Battelle","ror":"https://ror.org/01h5tnr73"},{"id":"https://openalex.org/F4320316892","display_name":"UT-Battelle","ror":"https://ror.org/04nza6677"},{"id":"https://openalex.org/F4320338287","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3113064179.pdf","grobid_xml":"https://content.openalex.org/works/W3113064179.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W81693393","https://openalex.org/W125818563","https://openalex.org/W1990067238","https://openalex.org/W2046608104","https://openalex.org/W2060479059","https://openalex.org/W2094142833","https://openalex.org/W2113310679","https://openalex.org/W2131060714","https://openalex.org/W2150847526","https://openalex.org/W2154107003","https://openalex.org/W2266684752","https://openalex.org/W2608911009","https://openalex.org/W2611645847","https://openalex.org/W2623396859","https://openalex.org/W2776182532","https://openalex.org/W2932520042","https://openalex.org/W2981916141","https://openalex.org/W2987085812","https://openalex.org/W3029914026","https://openalex.org/W6747552121","https://openalex.org/W6769945504"],"related_works":["https://openalex.org/W4390282541","https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2996710020","https://openalex.org/W2390009783","https://openalex.org/W4254602698","https://openalex.org/W3084463301","https://openalex.org/W3161403725","https://openalex.org/W4223615774"],"abstract_inverted_index":{"Ensuring":[0],"the":[1,116,133,148,159,166,176,188,202,227,236,251,260],"integrity":[2],"of":[3,30,48,66,95,135,151,161,168,190,205,226,230,269],"Ethernet-based":[4],"networks":[5,22,61,125],"is":[6,15,245],"a":[7,39,64,197,223,254],"challenging":[8],"and":[9,44,73,129,141,180,233,258,266],"constantly":[10],"evolving":[11],"domain.":[12],"This":[13,217],"problem":[14],"exacerbated":[16],"for":[17,146,200,209],"those":[18],"operational":[19,220],"technology":[20,59],"(OT)":[21],"supporting":[23],"industrial":[24],"control":[25],"systems":[26,55,87,154,163,212],"(ICS)":[27],"since":[28],"much":[29],"that":[31,41,131,175,235,262],"equipment":[32],"was":[33,42],"originally":[34],"designed":[35],"to":[36,52,81,121,156,183,253,275],"be":[37,264,273],"on":[38],"network":[40],"isolated":[43],"generally":[45],"considered":[46],"free":[47],"malefactors.":[49],"Increasing":[50],"pressure":[51],"bridge":[53],"these":[54,85,96],"with":[56,77,164,222],"traditional":[57],"information":[58],"(IT)":[60],"has":[62],"introduced":[63],"bevy":[65],"new":[67],"threats.":[68],"In":[69,192],"response,":[70],"both":[71],"academia":[72],"industry":[74],"have":[75,126],"responded":[76],"security":[78,150,207],"solutions":[79,145],"tailored":[80],"ICS":[82,215],"environments.":[83,216],"Deploying":[84],"protection":[86],"often":[88,119],"involves":[89],"several":[90],"configuration":[91,170],"choices.":[92],"While":[93],"some":[94],"choices":[97],"are":[98,105,178,241],"clear":[99,224],"(e.g.,":[100],"block/enable":[101],"protocol":[102],"X)":[103],"others":[104],"far":[106],"more":[107,139],"subjective":[108],"(e.g.":[109],"alert":[110],"threshold":[111],"==":[112],"3.43).":[113],"Further":[114],"complicating":[115],"situation,":[117],"while":[118],"similar":[120],"IT":[122],"networks,":[123],"OT":[124],"unique":[127],"challenges":[128],"characteristics":[130],"make":[132],"task":[134],"protecting":[136],"them":[137,240],"simultaneously":[138],"difficult":[140],"straight":[142],"forward.":[143],"Extant":[144],"quantifying":[147,201],"relative":[149,203,228],"intrusion":[152,210],"detection":[153,211],"fail":[155],"effectively":[157],"support":[158],"operators":[160],"said":[162],"understanding":[165,225],"impact":[167,204,229],"various":[169,206],"changes.":[171],"Further,":[172],"they":[173,271],"assume":[174],"attacks":[177,237],"static":[179],"not":[181],"subject":[182],"manipulation":[184],"or":[185],"alteration":[186],"in":[187,247],"face":[189],"defenses.":[191],"this":[193],"paper,":[194],"we":[195,249],"present":[196],"threat-based":[198],"method":[199,218],"settings":[208,232],"(IDSs)":[213],"within":[214],"provides":[219],"staff":[221],"their":[231],"assumes":[234],"levied":[238],"against":[239],"dynamic.":[242],"The":[243],"model":[244,252],"described":[246],"detail,":[248],"apply":[250],"synthetic":[255],"data":[256],"set,":[257],"discuss":[259],"inferences":[261],"can":[263],"made":[265],"what":[267],"types":[268],"decisions":[270],"could":[272],"used":[274],"support.":[276]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}