{"id":"https://openalex.org/W4283258106","doi":"https://doi.org/10.1109/isdfs55398.2022.9800831","title":"The Digital Forensics of Cyber-Attacks at Electrical Power Grid Substation","display_name":"The Digital Forensics of Cyber-Attacks at Electrical Power Grid Substation","publication_year":2022,"publication_date":"2022-06-06","ids":{"openalex":"https://openalex.org/W4283258106","doi":"https://doi.org/10.1109/isdfs55398.2022.9800831"},"language":"en","primary_location":{"id":"doi:10.1109/isdfs55398.2022.9800831","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs55398.2022.9800831","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 10th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026753368","display_name":"Juha P\u00e4rssinen","orcid":"https://orcid.org/0000-0003-3766-1593"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":true,"raw_author_name":"Juha P\u00e4rssinen","raw_affiliation_strings":["VTT Technical Research Centre of Finland,Espoo,Finland","VTT Technical Research Centre of Finland, Espoo, Finland"],"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland,Espoo,Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Espoo, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089422859","display_name":"Petra Raussi","orcid":"https://orcid.org/0000-0001-9768-8312"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Petra Raussi","raw_affiliation_strings":["VTT Technical Research Centre of Finland,Espoo,Finland","VTT Technical Research Centre of Finland, Espoo, Finland"],"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland,Espoo,Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Espoo, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089864628","display_name":"Sami Noponen","orcid":"https://orcid.org/0000-0002-4798-3345"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Sami Noponen","raw_affiliation_strings":["VTT Technical Research Centre of Finland,Oulu,Finland","VTT Technical Research Centre of Finland, Oulu, Finland"],"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland,Oulu,Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Oulu, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048754367","display_name":"Mikael Opas","orcid":null},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Mikael Opas","raw_affiliation_strings":["VTT Technical Research Centre of Finland,Espoo,Finland","VTT Technical Research Centre of Finland, Espoo, Finland"],"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland,Espoo,Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Espoo, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030231522","display_name":"Jarno Salonen","orcid":null},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Jarno Salonen","raw_affiliation_strings":["VTT Technical Research Centre of Finland,Tampere,Finland","VTT Technical Research Centre of Finland, Tampere, Finland"],"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland,Tampere,Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Tampere, Finland","institution_ids":["https://openalex.org/I87653560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5026753368"],"corresponding_institution_ids":["https://openalex.org/I87653560"],"apc_list":null,"apc_paid":null,"fwci":0.8435,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.70948012,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9787999987602234,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7690682411193848},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7434771060943604},{"id":"https://openalex.org/keywords/iec-61850","display_name":"IEC 61850","score":0.7273330688476562},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7243970036506653},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6525811553001404},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.5705110430717468},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5200628638267517},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.4894215166568756},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.48454275727272034},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.4589027762413025},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.4286596179008484},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1591925024986267},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.08130791783332825}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7690682411193848},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7434771060943604},{"id":"https://openalex.org/C2778907243","wikidata":"https://www.wikidata.org/wiki/Q168160","display_name":"IEC 61850","level":3,"score":0.7273330688476562},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7243970036506653},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6525811553001404},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.5705110430717468},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5200628638267517},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.4894215166568756},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.48454275727272034},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.4589027762413025},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4286596179008484},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1591925024986267},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.08130791783332825},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isdfs55398.2022.9800831","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs55398.2022.9800831","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 10th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W180110257","https://openalex.org/W2041078517","https://openalex.org/W2163274247","https://openalex.org/W2184058014","https://openalex.org/W2552346784","https://openalex.org/W2586544129","https://openalex.org/W2591600547","https://openalex.org/W2615638777","https://openalex.org/W2746386264","https://openalex.org/W2781892241","https://openalex.org/W2902126042","https://openalex.org/W2983647526","https://openalex.org/W2990678899","https://openalex.org/W3011179411","https://openalex.org/W3017341171","https://openalex.org/W3117841597","https://openalex.org/W3133533400","https://openalex.org/W3137364915","https://openalex.org/W3140961078","https://openalex.org/W4301254020","https://openalex.org/W6642333326","https://openalex.org/W6683915950"],"related_works":["https://openalex.org/W4238452393","https://openalex.org/W2489557937","https://openalex.org/W2161391695","https://openalex.org/W3018602826","https://openalex.org/W2480188389","https://openalex.org/W4240498326","https://openalex.org/W4283205458","https://openalex.org/W4385257722","https://openalex.org/W2972427363","https://openalex.org/W2067681493"],"abstract_inverted_index":{"Our":[0],"research":[1],"presented":[2],"in":[3,11,66,81,122,129],"this":[4],"article":[5],"comprises":[6],"of":[7,16,59,119],"network":[8,44,97],"based":[9],"cyber-attacks":[10,39,48,95],"a":[12,17,23,73,88,130],"laboratory":[13],"setup":[14],"consisting":[15],"power":[18],"grid":[19],"substation":[20],"implemented":[21,65],"as":[22],"hardware-in-the-loop":[24],"simulation":[25],"with":[26],"hardware":[27],"(Intelligent":[28],"Electronic":[29],"Devices":[30],"a.k.a.":[31],"IEDs),":[32],"and":[33,54,57,126],"the":[34,50,60,93,104,109],"analysis":[35],"on":[36],"how":[37],"these":[38],"can":[40],"be":[41],"detected":[42],"using":[43],"forensics.":[45],"The":[46,83,100],"investigated":[47],"exploit":[49],"IEC":[51],"61850":[52],"MMS":[53],"GOOSE":[55],"protocols,":[56],"one":[58],"attacks":[61],"has":[62],"been":[63],"already":[64],"an":[67],"existing":[68],"malware.":[69],"Additionally":[70],"we":[71],"organized":[72],"cybersecurity":[74],"themed":[75],"workshop":[76,84,105],"for":[77,92,108],"energy":[78],"sector":[79],"companies":[80],"Finland.":[82],"participants":[85],"were":[86],"given":[87],"task":[89],"to":[90,115,124],"search":[91],"aforementioned":[94],"from":[96,103],"traffic":[98],"captures.":[99],"key":[101],"finding":[102],"is":[106,113],"that":[107],"domain":[110],"expert":[111],"it":[112],"crucial":[114],"know":[116],"different":[117],"kind":[118],"cyber-attack":[120],"scenarios":[121],"order":[123],"detect":[125],"mitigate":[127],"them":[128],"timely":[131],"manner.":[132]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}