{"id":"https://openalex.org/W4412444846","doi":"https://doi.org/10.1109/lnet.2025.3589273","title":"Explaining Intrusion Detection in Industrial Control Systems Through Rule Set Learning","display_name":"Explaining Intrusion Detection in Industrial Control Systems Through Rule Set Learning","publication_year":2025,"publication_date":"2025-07-15","ids":{"openalex":"https://openalex.org/W4412444846","doi":"https://doi.org/10.1109/lnet.2025.3589273"},"language":"en","primary_location":{"id":"doi:10.1109/lnet.2025.3589273","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lnet.2025.3589273","pdf_url":null,"source":{"id":"https://openalex.org/S4210234060","display_name":"IEEE Networking Letters","issn_l":"2576-3156","issn":["2576-3156"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Networking Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045813153","display_name":"Xinyu Xu","orcid":"https://orcid.org/0000-0002-5631-3458"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Xu","raw_affiliation_strings":["College of Computer Science, Beijing University of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5631-3458","affiliations":[{"raw_affiliation_string":"College of Computer Science, Beijing University of Technology, Beijing, China","institution_ids":["https://openalex.org/I37796252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062711732","display_name":"Yingxu Lai","orcid":"https://orcid.org/0000-0001-9844-1717"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]},{"id":"https://openalex.org/I78675632","display_name":"Beijing Information Science & Technology University","ror":"https://ror.org/04xnqep60","country_code":"CN","type":"education","lineage":["https://openalex.org/I78675632"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yingxu Lai","raw_affiliation_strings":["College of Computer Science and the Engineering Research Center of Intelligent Perception and Autonomous Control, Ministry of Education, Beijing University of Technology, Beijing, China","College of Computer Science, Beijing University of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9844-1717","affiliations":[{"raw_affiliation_string":"College of Computer Science and the Engineering Research Center of Intelligent Perception and Autonomous Control, Ministry of Education, Beijing University of Technology, Beijing, China","institution_ids":["https://openalex.org/I78675632"]},{"raw_affiliation_string":"College of Computer Science, Beijing University of Technology, Beijing, China","institution_ids":["https://openalex.org/I37796252"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090724509","display_name":"Xiao Yi Zhang","orcid":"https://orcid.org/0009-0006-3125-1226"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Zhang","raw_affiliation_strings":["College of Computer Science, Beijing University of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-3125-1226","affiliations":[{"raw_affiliation_string":"College of Computer Science, Beijing University of Technology, Beijing, China","institution_ids":["https://openalex.org/I37796252"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9389,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.77609306,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"7","issue":"3","first_page":"234","last_page":"238"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7115238904953003},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5382124781608582},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5285360217094421},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5006008148193359},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.46266603469848633},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.44083407521247864},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3015666902065277},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30141228437423706},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.08458542823791504},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.06624037027359009}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7115238904953003},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5382124781608582},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5285360217094421},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5006008148193359},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.46266603469848633},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.44083407521247864},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3015666902065277},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30141228437423706},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.08458542823791504},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.06624037027359009},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/lnet.2025.3589273","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lnet.2025.3589273","pdf_url":null,"source":{"id":"https://openalex.org/S4210234060","display_name":"IEEE Networking Letters","issn_l":"2576-3156","issn":["2576-3156"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Networking Letters","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1324068874","display_name":null,"funder_award_id":"L241049","funder_id":"https://openalex.org/F4320334977","funder_display_name":"Beijing Municipal Natural Science Foundation"},{"id":"https://openalex.org/G1822346322","display_name":null,"funder_award_id":"63272017","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4224648287","display_name":null,"funder_award_id":"62372017","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334977","display_name":"Beijing Municipal Natural Science Foundation","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1670263352","https://openalex.org/W2086359741","https://openalex.org/W2295598076","https://openalex.org/W2367397349","https://openalex.org/W2407991977","https://openalex.org/W2604247107","https://openalex.org/W2887195793","https://openalex.org/W2896487165","https://openalex.org/W2902060764","https://openalex.org/W2969863169","https://openalex.org/W3035727237","https://openalex.org/W3036583521","https://openalex.org/W3128032258","https://openalex.org/W3142044733","https://openalex.org/W4212795178","https://openalex.org/W4297957988","https://openalex.org/W4306317019","https://openalex.org/W4309941903","https://openalex.org/W4388052719","https://openalex.org/W4391878213","https://openalex.org/W4396941510","https://openalex.org/W4399387213"],"related_works":["https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2906422846","https://openalex.org/W2390009783","https://openalex.org/W2364419519","https://openalex.org/W2133389611","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146"],"abstract_inverted_index":{"With":[0],"the":[1,35,101,129,132,145],"increasing":[2],"openness":[3],"of":[4,37,62,112,131],"network":[5,107],"environments":[6],"in":[7,51,69,168],"industrial":[8,71,170],"control":[9],"systems,":[10],"cybersecurity":[11],"threats":[12],"have":[13],"become":[14],"increasingly":[15],"severe.":[16],"While":[17],"rule-based":[18],"intrusion":[19,98],"detection":[20,136,150],"remains":[21],"widely":[22],"used,":[23],"such":[24],"methods":[25],"are":[26],"limited":[27],"by":[28],"their":[29],"reliance":[30],"on":[31,139],"expert":[32],"knowledge":[33],"and":[34,93,160],"complexity":[36],"rule":[38,95],"generation,":[39],"hindering":[40],"effective":[41],"responses.":[42],"In":[43],"contrast,":[44],"deep":[45,85,105],"learning":[46,86],"has":[47],"demonstrated":[48],"strong":[49,164],"capabilities":[50],"capturing":[52],"complex":[53],"attack":[54,118],"patterns":[55],"from":[56],"large-scale":[57],"data,":[58],"but":[59],"its":[60,163],"lack":[61],"interpretability":[63,130],"poses":[64],"significant":[65],"challenges":[66],"for":[67,97,166],"deployment":[68,167],"safety-critical":[70],"settings.":[72],"To":[73],"address":[74],"these":[75],"challenges,":[76],"this":[77],"paper":[78],"proposes":[79],"a":[80,104,110],"novel":[81],"method":[82],"that":[83,144],"integrates":[84],"with":[87,117,152],"neuro-symbolic":[88],"representation":[89],"to":[90,108,127],"enable":[91],"automated":[92],"high-quality":[94],"generation":[96],"detection.":[99],"Specifically,":[100],"approach":[102],"leverages":[103],"neural":[106],"learn":[109],"set":[111],"candidate":[113],"rules":[114,133,147],"highly":[115],"correlated":[116],"behaviors.":[119],"A":[120],"heuristic":[121],"search":[122],"strategy":[123],"is":[124],"then":[125],"employed":[126],"enhance":[128],"while":[134,157],"maintaining":[135,158],"effectiveness.":[137],"Experiments":[138],"two":[140],"public":[141],"datasets":[142],"demonstrate":[143],"generated":[146],"achieve":[148],"high":[149],"accuracy":[151],"low":[153],"false":[154],"positive":[155],"rates,":[156],"simplicity":[159],"clarity,":[161],"highlighting":[162],"potential":[165],"real-world":[169],"environments.":[171]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}