{"id":"https://openalex.org/W3216694154","doi":"https://doi.org/10.1109/isncc52172.2021.9615827","title":"Unsupervised Time-Series based Anomaly Detection in ICS/SCADA Networks","display_name":"Unsupervised Time-Series based Anomaly Detection in ICS/SCADA Networks","publication_year":2021,"publication_date":"2021-10-31","ids":{"openalex":"https://openalex.org/W3216694154","doi":"https://doi.org/10.1109/isncc52172.2021.9615827","mag":"3216694154"},"language":"en","primary_location":{"id":"doi:10.1109/isncc52172.2021.9615827","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc52172.2021.9615827","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001402484","display_name":"Ali Tekeoglu","orcid":"https://orcid.org/0000-0001-7638-0941"},"institutions":[{"id":"https://openalex.org/I2802946424","display_name":"Johns Hopkins University Applied Physics Laboratory","ror":"https://ror.org/029pp9z10","country_code":"US","type":"facility","lineage":["https://openalex.org/I145311948","https://openalex.org/I2802946424"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ali Tekeoglu","raw_affiliation_strings":["Applied Physics Laboratory, Johns Hopkins University"],"affiliations":[{"raw_affiliation_string":"Applied Physics Laboratory, Johns Hopkins University","institution_ids":["https://openalex.org/I2802946424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024360724","display_name":"Korkut Bekiroglu","orcid":"https://orcid.org/0000-0003-4582-0216"},"institutions":[{"id":"https://openalex.org/I90965887","display_name":"SUNY Polytechnic Institute","ror":"https://ror.org/000fxgx19","country_code":"US","type":"education","lineage":["https://openalex.org/I90965887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Korkut Bekiroglu","raw_affiliation_strings":["Electrical Engineering Technology, SUNY Polytechnic Institute"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering Technology, SUNY Polytechnic Institute","institution_ids":["https://openalex.org/I90965887"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020906054","display_name":"Chen-Fu Chiang","orcid":"https://orcid.org/0000-0001-8574-1665"},"institutions":[{"id":"https://openalex.org/I90965887","display_name":"SUNY Polytechnic Institute","ror":"https://ror.org/000fxgx19","country_code":"US","type":"education","lineage":["https://openalex.org/I90965887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen-Fu Chiang","raw_affiliation_strings":["Computer Science, SUNY Polytechnic Institute"],"affiliations":[{"raw_affiliation_string":"Computer Science, SUNY Polytechnic Institute","institution_ids":["https://openalex.org/I90965887"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110257342","display_name":"Sam Sengupta","orcid":null},"institutions":[{"id":"https://openalex.org/I90965887","display_name":"SUNY Polytechnic Institute","ror":"https://ror.org/000fxgx19","country_code":"US","type":"education","lineage":["https://openalex.org/I90965887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sam Sengupta","raw_affiliation_strings":["Computer Science, SUNY Polytechnic Institute"],"affiliations":[{"raw_affiliation_string":"Computer Science, SUNY Polytechnic Institute","institution_ids":["https://openalex.org/I90965887"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5001402484"],"corresponding_institution_ids":["https://openalex.org/I2802946424"],"apc_list":null,"apc_paid":null,"fwci":0.412,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.62423604,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8568196892738342},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.830386757850647},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7043097019195557},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6844609379768372},{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.6388845443725586},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.6358358860015869},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.560318648815155},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5247045755386353},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5090138912200928},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.4671351909637451},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.45274266600608826},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.434365451335907},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4204239249229431},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4008297622203827},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3260360360145569},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2740042805671692},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18184763193130493},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1803264617919922},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11352801322937012},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.11297857761383057},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.10878422856330872},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.09281644225120544}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8568196892738342},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.830386757850647},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7043097019195557},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6844609379768372},{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.6388845443725586},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.6358358860015869},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.560318648815155},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5247045755386353},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5090138912200928},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.4671351909637451},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.45274266600608826},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.434365451335907},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4204239249229431},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4008297622203827},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3260360360145569},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2740042805671692},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18184763193130493},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1803264617919922},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11352801322937012},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.11297857761383057},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.10878422856330872},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.09281644225120544},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isncc52172.2021.9615827","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc52172.2021.9615827","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Clean water and sanitation","score":0.8100000023841858,"id":"https://metadata.un.org/sdg/6"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1965555277","https://openalex.org/W1996960305","https://openalex.org/W2038194220","https://openalex.org/W2407991977","https://openalex.org/W2521705161","https://openalex.org/W2565678956","https://openalex.org/W2786881799","https://openalex.org/W2789828921","https://openalex.org/W2797742547","https://openalex.org/W2802074198","https://openalex.org/W2896487165","https://openalex.org/W2952589828","https://openalex.org/W2969402780","https://openalex.org/W2999743167","https://openalex.org/W3005893373","https://openalex.org/W3020448654","https://openalex.org/W3046011084","https://openalex.org/W3081325334","https://openalex.org/W3105750153","https://openalex.org/W6772902630"],"related_works":["https://openalex.org/W2237732271","https://openalex.org/W3004044356","https://openalex.org/W2240297857","https://openalex.org/W2568772275","https://openalex.org/W4312722626","https://openalex.org/W3123953333","https://openalex.org/W2570433379","https://openalex.org/W2973905387","https://openalex.org/W2959428502","https://openalex.org/W3216694154"],"abstract_inverted_index":{"Traditionally,":[0],"Industrial":[1,53],"Control":[2],"Systems":[3],"(ICS)":[4],"have":[5],"been":[6],"operated":[7],"as":[8,51],"air-gapped":[9],"networks,":[10],"without":[11],"a":[12,117,126,144,149],"necessity":[13],"to":[14,17,90],"connect":[15],"directly":[16],"the":[18,21,24,32,48,52,74,91,133],"Internet.":[19],"With":[20],"introduction":[22],"of":[23,26,55,155],"Internet":[25,54],"Things":[27,56],"(IoT)":[28],"paradigm,":[29],"along":[30],"with":[31,98],"cloud":[33],"computing":[34],"shift":[35],"in":[36,47,86,112],"traditional":[37],"IT":[38],"environments,":[39],"ICS":[40,60],"systems":[41],"went":[42],"through":[43],"an":[44],"adaptation":[45],"period":[46],"recent":[49],"years,":[50],"(IIoT)":[57],"became":[58],"popular.":[59],"systems,":[61],"also":[62],"called":[63],"Cyber-Physical-Systems":[64],"(CPS),":[65],"operate":[66],"on":[67,125],"physical":[68,87],"devices":[69],"(i.e.,":[70],"actuators,":[71],"sensors)":[72],"at":[73,158],"lowest":[75],"layer.":[76],"An":[77],"anomaly":[78,135],"that":[79,95],"effect":[80],"this":[81],"layer,":[82],"could":[83],"potentially":[84],"result":[85],"damage.":[88],"Due":[89],"new":[92],"attack":[93],"surfaces":[94],"came":[96],"about":[97],"IIoT":[99],"movement,":[100],"precise,":[101],"accurate,":[102],"and":[103],"prompt":[104],"intrusion/anomaly":[105,122],"detection":[106,123,136],"is":[107],"becoming":[108],"even":[109],"more":[110],"crucial":[111],"ICS.":[113],"This":[114],"paper":[115],"proposes":[116],"novel":[118],"method":[119],"for":[120],"real-time":[121],"based":[124],"cyber-physical":[127],"system":[128],"network":[129,145],"traffic.":[130],"To":[131],"evaluate":[132],"proposed":[134],"method&#x2019;s":[137],"efficiency,":[138],"we":[139],"run":[140],"our":[141],"implementation":[142],"against":[143],"trace":[146],"taken":[147],"from":[148],"Secure":[150],"Water":[151],"Treatment":[152],"Testbed":[153],"(SWAT)":[154],"iTrust":[156],"Laboratory":[157],"Singapore.":[159]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
