{"id":"https://openalex.org/W4200523731","doi":"https://doi.org/10.1109/smartgridcomm51999.2021.9632304","title":"An IEC 61850 MMS Traffic Parser for Customizable and Efficient Intrusion Detection","display_name":"An IEC 61850 MMS Traffic Parser for Customizable and Efficient Intrusion Detection","publication_year":2021,"publication_date":"2021-10-25","ids":{"openalex":"https://openalex.org/W4200523731","doi":"https://doi.org/10.1109/smartgridcomm51999.2021.9632304"},"language":"en","primary_location":{"id":"doi:10.1109/smartgridcomm51999.2021.9632304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm51999.2021.9632304","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008404882","display_name":"Heng Chuan Tan","orcid":"https://orcid.org/0000-0002-1780-4078"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Heng Chuan Tan","raw_affiliation_strings":["Advanced Digital Sciences Center, Singapore"],"affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003638551","display_name":"Vyshnavi Mohanraj","orcid":null},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Vyshnavi Mohanraj","raw_affiliation_strings":["Advanced Digital Sciences Center, Singapore"],"affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100687673","display_name":"Binbin Chen","orcid":"https://orcid.org/0000-0002-9584-0082"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]},{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Binbin Chen","raw_affiliation_strings":["Advanced Digital Sciences Center, Singapore","Singapore University of Technology and Design, Singapore"],"affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Singapore","institution_ids":["https://openalex.org/I4210108443"]},{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049285151","display_name":"Daisuke Mashima","orcid":"https://orcid.org/0000-0003-1946-1790"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Daisuke Mashima","raw_affiliation_strings":["Advanced Digital Sciences Center, Singapore"],"affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048841233","display_name":"Shing Kham Shing Nan","orcid":null},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shing Kham Shing Nan","raw_affiliation_strings":["Singapore University of Technology and Design, Singapore"],"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027188144","display_name":"Aobo Yang","orcid":"https://orcid.org/0009-0008-2233-7743"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Aobo Yang","raw_affiliation_strings":["Singapore University of Technology and Design, Singapore"],"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5008404882"],"corresponding_institution_ids":["https://openalex.org/I4210108443"],"apc_list":null,"apc_paid":null,"fwci":0.824,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.73419033,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"194","last_page":"200"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8461755514144897},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7302276492118835},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.6247177720069885},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5467272996902466},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5438997149467468},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.4640563726425171},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.44496819376945496},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.42060425877571106},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.41837337613105774},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3912392258644104},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3816520571708679},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21830153465270996},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17869150638580322},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.13467681407928467},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.07914185523986816}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8461755514144897},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7302276492118835},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.6247177720069885},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5467272996902466},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5438997149467468},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.4640563726425171},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.44496819376945496},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.42060425877571106},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.41837337613105774},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3912392258644104},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3816520571708679},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21830153465270996},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17869150638580322},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.13467681407928467},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.07914185523986816},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/smartgridcomm51999.2021.9632304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm51999.2021.9632304","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1892079978","https://openalex.org/W2024094925","https://openalex.org/W2128055782","https://openalex.org/W2141950720","https://openalex.org/W2565053249","https://openalex.org/W2798389100","https://openalex.org/W2803585697","https://openalex.org/W2887195793","https://openalex.org/W2889300760","https://openalex.org/W2912726523","https://openalex.org/W2941500089","https://openalex.org/W2946143761","https://openalex.org/W2982140757","https://openalex.org/W2991517675","https://openalex.org/W3113410850","https://openalex.org/W3116973444","https://openalex.org/W6758745253","https://openalex.org/W6787621456","https://openalex.org/W6788175245"],"related_works":["https://openalex.org/W1667647204","https://openalex.org/W2404647514","https://openalex.org/W4247536566","https://openalex.org/W4241418540","https://openalex.org/W2018477250","https://openalex.org/W3119814709","https://openalex.org/W1508895727","https://openalex.org/W2725786787","https://openalex.org/W1590965489","https://openalex.org/W4312925165"],"abstract_inverted_index":{"Manufacturing":[0],"Message":[1],"Specification":[2],"(MMS)":[3],"protocol":[4,49],"is":[5,29],"widely":[6],"used":[7,137,195],"in":[8,128],"IEC":[9],"61850-based":[10],"substations":[11],"to":[12,21,30,36,53,61,80,99,131,148,156,179,187],"improve":[13],"process":[14],"automation.":[15],"However,":[16,42],"it":[17],"could":[18],"be":[19,194],"vulnerable":[20],"various":[22],"cyber":[23],"threats.":[24],"A":[25],"common":[26],"defense":[27],"solution":[28],"deploy":[31],"intrusion":[32,142],"detection":[33],"systems":[34],"(IDSes)":[35],"analyze":[37,100],"network":[38],"traffic":[39,102],"for":[40,46,51,94,141,196],"anomalies.":[41],"several":[43],"challenges":[44,109],"remain":[45],"designing":[47,197],"a":[48,184],"parser":[50,93,130],"IDS":[52,79,98,198],"dissect":[54],"MMS":[55,64,74,92,101,112,134,169],"packets,":[56],"such":[57],"as":[58],"the":[59,67,78,82,95,108,121,190],"need":[60],"support":[62],"many":[63],"services":[65],"and":[66,84,103,114,153,160,175],"complex":[68],"data":[69,192],"structure.":[70],"Moreover,":[71],"processing":[72,122],"every":[73],"packet":[75],"may":[76],"overwhelm":[77],"impact":[81],"throughput":[83,159,174],"latency.":[85,161],"In":[86],"this":[87],"work,":[88],"we":[89,124],"develop":[90],"an":[91],"open-source":[96],"Zeek":[97,139],"detect":[104],"intrusions.":[105],"We":[106,144,182],"explain":[107],"of":[110,168],"parsing":[111],"packets":[113,135,170],"detail":[115],"our":[116,129,150],"design":[117],"choices.":[118],"To":[119],"reduce":[120],"load,":[123],"implement":[125],"filtering":[126,167],"rules":[127,140],"customize":[132],"which":[133],"are":[136],"by":[138],"analysis.":[143],"formulated":[145],"test":[146],"cases":[147],"validate":[149],"parser's":[151],"correctness":[152],"conducted":[154],"experiments":[155],"evaluate":[157],"its":[158],"Our":[162],"results":[163],"show":[164],"that":[165],"custom":[166],"can":[171,193],"achieve":[172],"higher":[173],"lower":[176],"delay":[177],"compared":[178],"no":[180],"filtering.":[181],"provide":[183],"case":[185],"study":[186],"demonstrate":[188],"how":[189],"parsed":[191],"rules.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}