{"id":"https://openalex.org/W7129371402","doi":"https://doi.org/10.1109/tdsc.2026.3665837","title":"Pipe4Stux: Attacking PLC by Using Key Tag and Attack Semantic","display_name":"Pipe4Stux: Attacking PLC by Using Key Tag and Attack Semantic","publication_year":2026,"publication_date":"2026-02-17","ids":{"openalex":"https://openalex.org/W7129371402","doi":"https://doi.org/10.1109/tdsc.2026.3665837"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3665837","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3665837","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086225312","display_name":"Wenjun Yao","orcid":"https://orcid.org/0009-0003-9264-5286"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjun Yao","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-4994-9586","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091368858","display_name":"Binxing Fang","orcid":"https://orcid.org/0000-0003-0305-2132"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0305-2132","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111112130","display_name":"Yanbin Sun","orcid":"https://orcid.org/0000-0002-8157-5337"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanbin Sun","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8157-5337","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126207708","display_name":"Guodong Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guodong Wu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-0354-8934","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5126259918","display_name":"Zhihong Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9409-5359","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16079257,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"6568","last_page":"6583"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.8837000131607056,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.8837000131607056,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0551999993622303,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.024900000542402267,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.7688999772071838},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.580299973487854},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.44269999861717224},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.43959999084472656},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.40459999442100525},{"id":"https://openalex.org/keywords/semantic-data-model","display_name":"Semantic data model","score":0.38830000162124634},{"id":"https://openalex.org/keywords/semantic-web","display_name":"Semantic Web","score":0.3409000039100647},{"id":"https://openalex.org/keywords/alarm","display_name":"ALARM","score":0.32710000872612}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8514999747276306},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.7688999772071838},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.580299973487854},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.44269999861717224},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.43959999084472656},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.40459999442100525},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4043999910354614},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.38830000162124634},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.32710000872612},{"id":"https://openalex.org/C6881194","wikidata":"https://www.wikidata.org/wiki/Q7449091","display_name":"Semantic technology","level":4,"score":0.3172999918460846},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.30140000581741333},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C85407183","wikidata":"https://www.wikidata.org/wiki/Q1045785","display_name":"Semantic network","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C155386361","wikidata":"https://www.wikidata.org/wiki/Q1649571","display_name":"Process control","level":3,"score":0.27630001306533813},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C511149849","wikidata":"https://www.wikidata.org/wiki/Q7449051","display_name":"Semantic computing","level":3,"score":0.2597000002861023}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3665837","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3665837","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2057174261","display_name":null,"funder_award_id":"62272119","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6064493666","display_name":null,"funder_award_id":"U2436208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6896414497","display_name":null,"funder_award_id":"U2468204","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8812891240","display_name":null,"funder_award_id":"62372129","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1842847600","https://openalex.org/W2002578057","https://openalex.org/W2015655574","https://openalex.org/W2057017907","https://openalex.org/W2285907671","https://openalex.org/W2550453031","https://openalex.org/W2594635183","https://openalex.org/W2613412685","https://openalex.org/W2740486794","https://openalex.org/W2765362015","https://openalex.org/W2905044737","https://openalex.org/W2930135659","https://openalex.org/W2945937333","https://openalex.org/W2952754944","https://openalex.org/W2971297766","https://openalex.org/W3004908285","https://openalex.org/W3092536363","https://openalex.org/W3107123323","https://openalex.org/W3115308930","https://openalex.org/W3173257008","https://openalex.org/W3214091108","https://openalex.org/W3216271321","https://openalex.org/W4250968050","https://openalex.org/W4292002670","https://openalex.org/W4303647513","https://openalex.org/W4317927927","https://openalex.org/W4382241583","https://openalex.org/W4385412469","https://openalex.org/W4385679677","https://openalex.org/W4386737342","https://openalex.org/W4387029074","https://openalex.org/W4389279166","https://openalex.org/W4390881876","https://openalex.org/W4391725320","https://openalex.org/W4396982237","https://openalex.org/W4400033587"],"related_works":[],"abstract_inverted_index":{"Semantic":[0],"attacks":[1,53],"against":[2],"programmable":[3],"logic":[4,75],"controllers":[5],"(PLCs)":[6],"can":[7,147],"manipulate":[8],"industrial":[9],"control":[10,74,161],"systems":[11,166],"(ICS)":[12],"and":[13,58,67,82,94,110,133,162],"cause":[14],"severe":[15],"physical":[16,31,124],"disruptions.":[17],"Yet,":[18],"existing":[19],"researches":[20],"remain":[21],"target-agnostic:":[22],"they":[23],"fail":[24],"to":[25,76],"determine":[26],"which":[27],"PLC":[28,52,73],"tags":[29,57,121,155],"or":[30],"process":[32],"are":[33],"most":[34],"critical":[35],"when":[36],"exploited.":[37],"To":[38],"address":[39],"this":[40],"gap,":[41],"we":[42],"introduce":[43],"Pipe4Stux,":[44],"a":[45,64,68],"semantic":[46,90,112,137],"attack":[47,59,97,138],"framework":[48,146],"that":[49,106],"generates":[50],"effective":[51],"by":[54,152],"leveraging":[55],"key":[56,87,120,154],"semantics.":[60],"Pipe4Stux":[61,107,128],"first":[62,131],"constructs":[63],"lexical":[65],"analyzer":[66],"data":[69,163],"dependency":[70],"subgraph":[71],"from":[72],"capture":[77],"the":[78,115,130],"relationships":[79],"among":[80],"variables":[81,158],"operations.":[83],"It":[84],"then":[85],"identifies":[86],"tags,":[88],"derives":[89],"features":[91],"of":[92,118],"attacks,":[93,113],"formulates":[95],"process-aware":[96],"tactic.":[98],"Experimental":[99],"results":[100],"on":[101],"real":[102],"ICS":[103],"scenarios":[104],"demonstrate":[105],"enables":[108],"destructive":[109],"reproducible":[111],"revealing":[114],"potential":[116],"impact":[117],"compromising":[119],"during":[122],"specific":[123],"states.":[125],"In":[126],"addition,":[127],"provides":[129],"systematic":[132],"objective":[134],"methodology":[135],"for":[136,143],"synthesis,":[139],"offering":[140],"practical":[141],"guidance":[142],"defense.":[144],"The":[145],"also":[148],"support":[149],"continuous":[150],"monitoring":[151],"designating":[153],"as":[156,168],"alarm":[157],"within":[159],"supervisory":[160],"acquisition":[164],"(SCADA)":[165],"such":[167],"WINCC.":[169]},"counts_by_year":[],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-02-18T00:00:00"}