{"id":"https://openalex.org/W2908174900","doi":"https://doi.org/10.1109/smartgridcomm.2018.8587533","title":"EDMAND: Edge-Based Multi-Level Anomaly Detection for SCADA Networks","display_name":"EDMAND: Edge-Based Multi-Level Anomaly Detection for SCADA Networks","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2908174900","doi":"https://doi.org/10.1109/smartgridcomm.2018.8587533","mag":"2908174900"},"language":"en","primary_location":{"id":"doi:10.1109/smartgridcomm.2018.8587533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm.2018.8587533","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004715823","display_name":"Wenyu Ren","orcid":null},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Wenyu Ren","raw_affiliation_strings":["University of Illinois Urbana-Champaign, Urbana, Illinois, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign, Urbana, Illinois, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017220441","display_name":"Timothy Yardley","orcid":null},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Timothy Yardley","raw_affiliation_strings":["University of Illinois Urbana-Champaign, Urbana, Illinois, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign, Urbana, Illinois, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074224097","display_name":"Klara Nahrstedt","orcid":"https://orcid.org/0000-0001-6813-3043"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Klara Nahrstedt","raw_affiliation_strings":["University of Illinois Urbana-Champaign, Urbana, Illinois, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign, Urbana, Illinois, USA","institution_ids":["https://openalex.org/I157725225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5004715823"],"corresponding_institution_ids":["https://openalex.org/I157725225"],"apc_list":null,"apc_paid":null,"fwci":2.3989,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.90139171,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.9777884483337402},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7523293495178223},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6784394979476929},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6000329256057739},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.5849184989929199},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5235199928283691},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4991743564605713},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.41151198744773865},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38029494881629944},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.20873364806175232},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10594043135643005}],"concepts":[{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.9777884483337402},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7523293495178223},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6784394979476929},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6000329256057739},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.5849184989929199},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5235199928283691},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4991743564605713},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.41151198744773865},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38029494881629944},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.20873364806175232},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10594043135643005},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/smartgridcomm.2018.8587533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm.2018.8587533","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W38537450","https://openalex.org/W182707955","https://openalex.org/W214166028","https://openalex.org/W1516506771","https://openalex.org/W1933020797","https://openalex.org/W1970856950","https://openalex.org/W2005468743","https://openalex.org/W2024094925","https://openalex.org/W2069285803","https://openalex.org/W2081544377","https://openalex.org/W2089944128","https://openalex.org/W2137928260","https://openalex.org/W2154107003","https://openalex.org/W2167710876","https://openalex.org/W2295637543","https://openalex.org/W2308271640","https://openalex.org/W2321143867","https://openalex.org/W2394912556","https://openalex.org/W2542991636","https://openalex.org/W2563453901","https://openalex.org/W6601553728","https://openalex.org/W6667864987","https://openalex.org/W6731062686"],"related_works":["https://openalex.org/W2615977515","https://openalex.org/W2146396794","https://openalex.org/W2809162650","https://openalex.org/W2115760278","https://openalex.org/W2388279172","https://openalex.org/W2807864071","https://openalex.org/W1983640558","https://openalex.org/W2617238897","https://openalex.org/W2055218442","https://openalex.org/W4386714408"],"abstract_inverted_index":{"Supervisory":[0],"Control":[1],"and":[2,26,75,85,101,135,171],"Data":[3,63],"Acquisition":[4],"(SCADA)":[5],"systems":[6,25,56],"play":[7],"a":[8,47,114],"critical":[9],"role":[10],"in":[11,23,64,105],"the":[12,143,162,168],"operation":[13],"of":[14,88,93,131,146,161,174],"large-scale":[15],"distributed":[16],"industrial":[17],"systems.":[18],"There":[19],"are":[20,149],"many":[21],"vulnerabilities":[22],"SCADA":[24,55,65,122],"inadvertent":[27],"events":[28],"or":[29,90],"malicious":[30],"attacks":[31,104],"from":[32],"outside":[33],"as":[34,36],"well":[35],"inside":[37],"could":[38],"lead":[39],"to":[40,50,58,99,156,166],"catastrophic":[41],"consequences.":[42],"Network-based":[43],"intrusion":[44],"detection":[45,87,119,139,169],"is":[46,96,164],"preferred":[48],"approach":[49],"provide":[51],"security":[52],"analysis":[53],"for":[54,121],"due":[57],"its":[59],"less":[60],"intrusive":[61],"nature.":[62],"network":[66,132],"traffic":[67,133],"can":[68],"be":[69],"generally":[70],"divided":[71],"into":[72],"transport,":[73],"operation,":[74],"content":[76],"levels.":[77,108],"Most":[78],"existing":[79],"solutions":[80],"only":[81],"focus":[82],"on":[83,142],"monitoring":[84],"event":[86],"one":[89],"two":[91],"levels":[92,130],"data,":[94],"which":[95],"not":[97],"enough":[98],"detect":[100],"reason":[102],"about":[103],"all":[106,128],"three":[107,129],"In":[109],"this":[110],"paper,":[111],"we":[112],"develop":[113],"novel":[115],"edge-based":[116],"multi-level":[117],"anomaly":[118,138],"framework":[120,163],"networks":[123],"named":[124],"EDMAND.":[125],"EDMAND":[126],"monitors":[127],"data":[134],"applies":[136],"appropriate":[137],"methods":[140],"based":[141],"distinct":[144],"characteristics":[145],"data.":[147],"Alerts":[148],"generated,":[150],"aggregated,":[151],"prioritized":[152],"before":[153],"sent":[154],"back":[155],"control":[157],"centers.":[158],"A":[159],"prototype":[160],"built":[165],"evaluate":[167],"ability":[170],"time":[172],"overhead":[173],"it.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}