{"id":"https://openalex.org/W4416965835","doi":"https://doi.org/10.1109/jiot.2025.3639897","title":"AIAF: An Automated ICP-Based Attack Framework for Industrial Control Systems","display_name":"AIAF: An Automated ICP-Based Attack Framework for Industrial Control Systems","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416965835","doi":"https://doi.org/10.1109/jiot.2025.3639897"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2025.3639897","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3639897","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058500183","display_name":"Jie Meng","orcid":"https://orcid.org/0009-0002-1111-8074"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Meng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-1111-8074","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]},{"raw_affiliation_string":"College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039792504","display_name":"Zeyu Yang","orcid":"https://orcid.org/0000-0002-1596-6890"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zeyu Yang","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design, Tampines, Singapore","iTrust, Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-1596-6890","affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Tampines, Singapore","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083185861","display_name":"Ruilong Deng","orcid":"https://orcid.org/0000-0002-8158-150X"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruilong Deng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8158-150X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]},{"raw_affiliation_string":"College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051951845","display_name":"Peng Cheng","orcid":"https://orcid.org/0000-0002-4221-2162"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Cheng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4221-2162","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]},{"raw_affiliation_string":"College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100726041","display_name":"Jiming Chen","orcid":"https://orcid.org/0000-0003-3155-3145"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiming Chen","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3155-3145","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology and the College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]},{"raw_affiliation_string":"College of Control Science and Engineering, State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008266220","display_name":"Jianying Zhou","orcid":"https://orcid.org/0000-0003-0594-0432"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jianying Zhou","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design, Tampines, Singapore","iTrust, Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-0594-0432","affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Tampines, Singapore","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.41023279,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"3","first_page":"4653","last_page":"4667"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9516000151634216,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9516000151634216,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.021900000050663948,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.007799999788403511,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.7466999888420105},{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"Programmable logic controller","score":0.6175000071525574},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.48410001397132874},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.39489999413490295},{"id":"https://openalex.org/keywords/control-system","display_name":"Control system","score":0.3804999887943268},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.3799000084400177},{"id":"https://openalex.org/keywords/negotiation","display_name":"Negotiation","score":0.3691999912261963},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.3402999937534332},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.3314000070095062}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7886999845504761},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.7466999888420105},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6657000184059143},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.6175000071525574},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.48410001397132874},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.39489999413490295},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.3804999887943268},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3799000084400177},{"id":"https://openalex.org/C199776023","wikidata":"https://www.wikidata.org/wiki/Q202875","display_name":"Negotiation","level":2,"score":0.3691999912261963},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.36570000648498535},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.3314000070095062},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.32710000872612},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.3181999921798706},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2987000048160553},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2985999882221222},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2906999886035919},{"id":"https://openalex.org/C206274596","wikidata":"https://www.wikidata.org/wiki/Q1063837","display_name":"Programmable logic device","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.27630001306533813},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C95203288","wikidata":"https://www.wikidata.org/wiki/Q221682","display_name":"Semaphore","level":2,"score":0.26179999113082886},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.25679999589920044},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.25189998745918274},{"id":"https://openalex.org/C2776350369","wikidata":"https://www.wikidata.org/wiki/Q843479","display_name":"Control logic","level":2,"score":0.251800000667572},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3639897","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3639897","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1013764773","display_name":null,"funder_award_id":"226-2025-00165","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G164987038","display_name":null,"funder_award_id":"NRF-NCR25-NSOE05-0001","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"},{"id":"https://openalex.org/G2224863863","display_name":null,"funder_award_id":"62303411","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3545694276","display_name":null,"funder_award_id":"62293500","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4647544079","display_name":null,"funder_award_id":"ICT2024A13","funder_id":"https://openalex.org/F4320326952","funder_display_name":"State Key Laboratory of Industrial Control Technology"},{"id":"https://openalex.org/G6147820277","display_name":null,"funder_award_id":"ICT2025C04","funder_id":"https://openalex.org/F4320326952","funder_display_name":"State Key Laboratory of Industrial Control Technology"},{"id":"https://openalex.org/G6240486915","display_name":null,"funder_award_id":"BF2024065","funder_id":"https://openalex.org/F4320335956","funder_display_name":"Key Technologies Research and Development Program of Guangzhou"},{"id":"https://openalex.org/G6442699438","display_name":null,"funder_award_id":"62293502","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G698852458","display_name":null,"funder_award_id":"62293503","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7098366126","display_name":"\u65b0\u578b\u7535\u529b\u7cfb\u7edf\u7f51\u7edc\u5b89\u5168\u9632\u62a4\u7814\u7a76","funder_award_id":"LR23F030001","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320326952","display_name":"State Key Laboratory of Industrial Control Technology","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320335956","display_name":"Key Technologies Research and Development Program of Guangzhou","ror":null},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2002578057","https://openalex.org/W2285907671","https://openalex.org/W2288490641","https://openalex.org/W2590245887","https://openalex.org/W2594635183","https://openalex.org/W2608113618","https://openalex.org/W2945937333","https://openalex.org/W2952754944","https://openalex.org/W3000053734","https://openalex.org/W3108707471","https://openalex.org/W3138456218","https://openalex.org/W3177650213","https://openalex.org/W3200028754","https://openalex.org/W4206484832","https://openalex.org/W4283220312","https://openalex.org/W4285287442","https://openalex.org/W4292002670","https://openalex.org/W4292971819","https://openalex.org/W4312050970","https://openalex.org/W4317927927","https://openalex.org/W4383370901","https://openalex.org/W4389279166","https://openalex.org/W4390547604","https://openalex.org/W4391725314","https://openalex.org/W4391725320","https://openalex.org/W4396214384","https://openalex.org/W4401508647","https://openalex.org/W4411446879"],"related_works":[],"abstract_inverted_index":{"Recently":[0],"reported":[1],"attacks":[2,29,64,131],"against":[3],"Programmable":[4],"Logic":[5],"Controllers":[6],"(PLCs)":[7],"have":[8,98],"shown":[9],"that":[10,109,142],"the":[11,41,49,59,148],"exploitation":[12],"of":[13,87,116],"Industrial":[14],"Control":[15],"Protocols":[16],"(ICPs),":[17],"i.e.,":[18],"ICP-based":[19,28,63,73,94,130,153],"attacks,":[20],"poses":[21],"significant":[22],"threats":[23,60],"to":[24,47,65,147,152],"industrial":[25],"control":[26],"systems.":[27],"include":[30],"two":[31,50],"essential":[32],"steps:":[33],"generating":[34],"tailored":[35],"attack":[36,89,95,125],"payloads":[37,90],"and":[38,91,121,127],"breaking":[39],"through":[40,83],"session-ID-based":[42],"PLC":[43],"defenses.":[44],"Traditional":[45],"approaches":[46],"performing":[48],"steps":[51],"rely":[52],"on":[53],"laborious":[54],"manual":[55],"analysis.":[56],"To":[57],"analyze":[58],"posed":[61],"by":[62],"commercial-off-the-shelf":[66],"PLCs,":[67,104],"we":[68],"propose":[69],"AIAF,":[70],"an":[71,84,92],"Automated":[72],"Attack":[74],"Framework":[75],"leveraging":[76],"proprietary":[77],"binary":[78],"protocols,":[79,107],"which":[80],"operates":[81],"automatically":[82],"offline":[85],"construction":[86],"effective":[88],"online":[93],"test.":[96],"We":[97],"evaluated":[99],"AIAF":[100,110],"with":[101,132],"9":[102,106],"mainstream":[103],"covering":[105],"showing":[108],"can":[111],"reverse":[112],"engineer":[113],"12":[114],"kinds":[115],"session-ID":[117],"negotiation":[118],"(6":[119],"value-changed":[120],"6":[122],"value-same),":[123],"generate":[124],"payloads,":[126],"execute":[128],"35":[129],"a":[133],"94.29%":[134],"success":[135],"rate.":[136],"Our":[137],"further":[138],"Internet-wide":[139],"evaluation":[140],"reveals":[141],"over":[143],"28K":[144],"PLCs":[145],"exposed":[146],"Internet":[149],"are":[150],"vulnerable":[151],"attacks.":[154]},"counts_by_year":[],"updated_date":"2026-07-13T07:31:44.756512","created_date":"2025-12-03T00:00:00"}