{"id":"https://openalex.org/W4415969099","doi":"https://doi.org/10.1109/iecon58223.2025.11221702","title":"P4-IDet: A Programmable Switch-Based Framework for Real-Time and High-Accuracy Traffic Anomaly Detection in ICPSs","display_name":"P4-IDet: A Programmable Switch-Based Framework for Real-Time and High-Accuracy Traffic Anomaly Detection in ICPSs","publication_year":2025,"publication_date":"2025-10-14","ids":{"openalex":"https://openalex.org/W4415969099","doi":"https://doi.org/10.1109/iecon58223.2025.11221702"},"language":null,"primary_location":{"id":"doi:10.1109/iecon58223.2025.11221702","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iecon58223.2025.11221702","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IECON 2025 \u2013 51st Annual Conference of the IEEE Industrial Electronics Society","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109652453","display_name":"Jiayu Luo","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiayu Luo","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011451620","display_name":"Zhengyan Zhou","orcid":"https://orcid.org/0000-0003-0536-3196"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengyan Zhou","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025754725","display_name":"Qinglai Tang","orcid":null},"institutions":[{"id":"https://openalex.org/I68986083","display_name":"Northwest Normal University","ror":"https://ror.org/00gx3j908","country_code":"CN","type":"education","lineage":["https://openalex.org/I68986083"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiaoxiong Tang","raw_affiliation_strings":["Northwest Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwest Normal University","institution_ids":["https://openalex.org/I68986083"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ruohan Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruohan Chen","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100441899","display_name":"Xiang Chen","orcid":"https://orcid.org/0000-0001-8187-636X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Chen","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401415","display_name":"Di Wang","orcid":"https://orcid.org/0000-0002-2712-1705"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Wang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086198510","display_name":"Xun Zhou","orcid":"https://orcid.org/0000-0003-4930-6572"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xun Zhou","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018991444","display_name":"Chao Pei","orcid":"https://orcid.org/0000-0002-8369-7346"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Pei","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100426664","display_name":"Yinan Zhang","orcid":"https://orcid.org/0000-0002-4538-4170"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinan Zhang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401867","display_name":"Wenwen Zhang","orcid":"https://orcid.org/0000-0002-9767-2959"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenwen Zhang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100636290","display_name":"Qiang Yang","orcid":"https://orcid.org/0000-0002-0761-4692"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Yang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101827341","display_name":"Wenhai Wang","orcid":"https://orcid.org/0000-0002-3089-5605"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhai Wang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101602014","display_name":"Haifeng Zhou","orcid":"https://orcid.org/0000-0002-8008-2805"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haifeng Zhou","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":13,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.3389355,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.3463999927043915,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.3463999927043915,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.23579999804496765,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.16830000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7955999970436096},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.5411999821662903},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5095000267028809},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.38749998807907104},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.36559998989105225},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.3562000095844269},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.35089999437332153},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.3463999927043915}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7955999970436096},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6661999821662903},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.5411999821662903},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5095000267028809},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4449999928474426},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44279998540878296},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.38749998807907104},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38029998540878296},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.376800000667572},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.36559998989105225},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.35089999437332153},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3463999927043915},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.313400000333786},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.3127000033855438},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.30970001220703125},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.26330000162124634},{"id":"https://openalex.org/C2777783341","wikidata":"https://www.wikidata.org/wiki/Q857141","display_name":"BeiDou Navigation Satellite System","level":4,"score":0.26109999418258667},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2533000111579895}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iecon58223.2025.11221702","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iecon58223.2025.11221702","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IECON 2025 \u2013 51st Annual Conference of the IEEE Industrial Electronics Society","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320326952","display_name":"State Key Laboratory of Industrial Control Technology","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1573358362","https://openalex.org/W1994926493","https://openalex.org/W2029608738","https://openalex.org/W2039148409","https://openalex.org/W2039370337","https://openalex.org/W2105818147","https://openalex.org/W2147118406","https://openalex.org/W2149713648","https://openalex.org/W2153635508","https://openalex.org/W2591712613","https://openalex.org/W2744693751","https://openalex.org/W2761338514","https://openalex.org/W2765905728","https://openalex.org/W2887434122","https://openalex.org/W2896851850","https://openalex.org/W2987793235","https://openalex.org/W2989178978","https://openalex.org/W3010176271","https://openalex.org/W3028069824","https://openalex.org/W3161403725","https://openalex.org/W3162639575","https://openalex.org/W3169508735","https://openalex.org/W3195258212","https://openalex.org/W4243404299","https://openalex.org/W4252573951","https://openalex.org/W4309047182","https://openalex.org/W4309226947","https://openalex.org/W4310494058","https://openalex.org/W4379380034"],"related_works":[],"abstract_inverted_index":{"The":[0],"rise":[1],"of":[2,132],"Industry":[3],"4.0":[4],"exposes":[5],"traditionally":[6],"isolated":[7],"Industrial":[8],"Cyber-Physical":[9],"Systems":[10],"(ICPSs)":[11],"to":[12,80,99,147],"increasing":[13],"network":[14],"attacks,":[15],"posing":[16],"serious":[17],"security":[18],"threats":[19],"and":[20,41,67,86,94,116,135,150,168,172,197],"potential":[21],"damage.":[22],"Traffic":[23],"anomaly":[24,56],"detection":[25,57,124,130,145],"is":[26],"essential":[27],"for":[28,102],"identifying":[29],"such":[30],"attacks.":[31],"Nevertheless,":[32],"existing":[33,144],"work":[34],"faces":[35],"a":[36,53,73,100,106,119,159,176,189],"dilemma":[37,50],"between":[38,129],"high":[39,65],"accuracy":[40,66,149,187],"real-time":[42,68,151,201],"performance.":[43,69,152,202],"In":[44],"this":[45,49],"paper,":[46],"we":[47,154],"resolve":[48],"through":[51],"P4-IDet,":[52],"novel":[54],"traffic":[55,84],"framework":[58],"based":[59,126],"on":[60,127,158,175],"programmable":[61],"switches,":[62],"achieving":[63],"both":[64],"P4-IDet":[70,139],"first":[71],"deploys":[72],"low-complexity":[74],"detector":[75],"in":[76,192,200],"the":[77,114,133,136,156,165],"data":[78],"plane":[79],"stamp":[81],"timestamps,":[82],"extract":[83],"features,":[85],"perform":[87],"line-rate":[88],"preliminary":[89],"detection.":[90],"Only":[91],"suspicious":[92],"packets":[93],"their":[95],"features":[96],"are":[97],"uploaded":[98],"server":[101],"fine-grained":[103],"analysis":[104],"by":[105],"high-accuracy":[107],"machine":[108,193],"learning":[109,194],"model.":[110],"To":[111],"further":[112],"reduce":[113],"upload":[115],"accelerate":[117],"detection,":[118],"Bayesian":[120],"optimizer":[121],"adaptively":[122],"tunes":[123],"rules":[125],"differences":[128],"results":[131],"switch":[134,163],"server.":[137],"Moreover,":[138],"can":[140],"be":[141],"integrated":[142],"with":[143,180],"models":[146],"enhance":[148],"Finally,":[153],"implement":[155],"prototype":[157],"Barefoot":[160],"Tofino":[161],"2.0":[162],"using":[164],"P4":[166],"language":[167],"an":[169],"x86":[170],"server,":[171],"validate":[173],"it":[174],"large-scale":[177],"ICPS":[178],"platform":[179],"real-world":[181],"industrial":[182],"systems.":[183],"Experiments":[184],"show":[185],"5.6\u201341.1%":[186],"gains,":[188],"28.93%":[190],"reduction":[191],"model":[195],"workload,":[196],"8.31\u201325.90%":[198],"improvements":[199]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-11-06T00:00:00"}