{"id":"https://openalex.org/W7131068345","doi":"https://doi.org/10.1109/tdsc.2026.3667398","title":"An Automated Semantic Analysis Framework for Controller Variables Based on Network Traffic","display_name":"An Automated Semantic Analysis Framework for Controller Variables Based on Network Traffic","publication_year":2026,"publication_date":"2026-02-23","ids":{"openalex":"https://openalex.org/W7131068345","doi":"https://doi.org/10.1109/tdsc.2026.3667398"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3667398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3667398","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101686098","display_name":"Jie Meng","orcid":"https://orcid.org/0009-0003-9497-5916"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Meng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-1111-8074","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zeyu Yang","orcid":"https://orcid.org/0000-0002-1596-6890"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zeyu Yang","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-1596-6890","affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126642427","display_name":"Zhenyong Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyong Zhang","raw_affiliation_strings":["State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, China"],"raw_orcid":"https://orcid.org/0000-0003-0950-1525","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang, China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126648178","display_name":"Yangyang Geng","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangyang Geng","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-7639-3686","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121142165","display_name":"Ruilong Deng","orcid":null},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruilong Deng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8158-150X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126652104","display_name":"Peng Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Cheng","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4221-2162","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiming Chen","orcid":"https://orcid.org/0000-0003-3155-3145"},"institutions":[{"id":"https://openalex.org/I4391767838","display_name":"State Key Laboratory of Industrial Control Technology","ror":"https://ror.org/03a33a786","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391767838","https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiming Chen","raw_affiliation_strings":["State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3155-3145","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I4391767838"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5126635133","display_name":"Jianying Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jianying Zhou","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-0594-0432","affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15772647,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"6635","last_page":"6651"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.2842000126838684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.2842000126838684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.22429999709129333,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.11020000278949738,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.7092000246047974},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.6660000085830688},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5228999853134155},{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"Programmable logic controller","score":0.5149000287055969},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.4487000107765198},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3783000111579895},{"id":"https://openalex.org/keywords/semantic-analysis","display_name":"Semantic analysis (machine learning)","score":0.376800000667572}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8122000098228455},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.7092000246047974},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.6660000085830688},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5228999853134155},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.5149000287055969},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4677000045776367},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.4487000107765198},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3783000111579895},{"id":"https://openalex.org/C2777946921","wikidata":"https://www.wikidata.org/wiki/Q7449044","display_name":"Semantic analysis (machine learning)","level":2,"score":0.376800000667572},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3684000074863434},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.36149999499320984},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31679999828338623},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.30959999561309814},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30379998683929443},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C153240184","wikidata":"https://www.wikidata.org/wiki/Q3243772","display_name":"Control variable","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.2578999996185303},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.2578999996185303}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3667398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3667398","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1013764773","display_name":null,"funder_award_id":"226-2025-00165","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G1923545876","display_name":null,"funder_award_id":"2025C01061","funder_id":"https://openalex.org/F8142712028","funder_display_name":"Key Research and Development Program of Zhejiang Province"},{"id":"https://openalex.org/G2224863863","display_name":null,"funder_award_id":"62303411","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3545694276","display_name":null,"funder_award_id":"62293500","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4647544079","display_name":null,"funder_award_id":"ICT2024A13","funder_id":"https://openalex.org/F4320326952","funder_display_name":"State Key Laboratory of Industrial Control Technology"},{"id":"https://openalex.org/G6147820277","display_name":null,"funder_award_id":"ICT2025C04","funder_id":"https://openalex.org/F4320326952","funder_display_name":"State Key Laboratory of Industrial Control Technology"},{"id":"https://openalex.org/G6442699438","display_name":null,"funder_award_id":"62293502","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G698852458","display_name":null,"funder_award_id":"62293503","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320326952","display_name":"State Key Laboratory of Industrial Control Technology","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F8142712028","display_name":"Key Research and Development Program of Zhejiang Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Programmable":[0],"logic":[1],"controllers":[2],"(PLCs)":[3],"play":[4],"a":[5,20,73,135,150],"crucial":[6],"role":[7],"in":[8,23,138,212],"various":[9],"industrial":[10,68],"manufacturing":[11],"processes.":[12],"Recent":[13],"attack":[14],"events":[15],"show":[16],"that":[17,170],"attackers":[18],"have":[19],"strong":[21],"interest":[22],"controller":[24,41,49,97,178,198],"variables":[25,98,179,199],"of":[26,48,67,96,112,115,152,177,196,210],"PLCs,":[27],"including":[28],"the":[29,46,64,77,94,119,126,163,167,175,194,207],"device":[30],"status":[31],"and":[32,117,133,148,166,200,217],"internal":[33],"program":[34],"logic.":[35],"Detecting":[36],"anomalous":[37],"messages":[38,146],"targeting":[39],"PLC":[40],"variables,":[42],"which":[43],"relies":[44],"on":[45,103,122],"analysis":[47],"variable":[50],"semantics,":[51],"has":[52],"proven":[53],"to":[54,75,92,124,155,187],"be":[55],"an":[56,85],"effective":[57],"method":[58],"for":[59],"identifying":[60],"such":[61],"attacks.":[62],"However,":[63],"proprietary":[65,100,190],"nature":[66],"control":[69],"protocols":[70],"(ICPs)":[71],"poses":[72],"challenge":[74],"extracting":[76,193],"required":[78],"semantics.":[79],"In":[80],"this":[81],"paper,":[82],"we":[83,107,131,184,205],"propose":[84,149],"automated":[86],"framework":[87],"named":[88],"<italic":[89],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[90],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">SePanner</i>":[91],"extract":[93,174],"semantics":[95,176,195],"from":[99,144],"ICPs":[101],"based":[102],"network":[104],"traffic.":[105],"Specifically,":[106],"first":[108],"collect":[109],"multiple":[110,213],"groups":[111],"interaction":[113],"traffic":[114],"PLCs":[116],"perform":[118],"starting-aligned":[120],"comparisons":[121],"them":[123],"locate":[125],"semantic":[127,139,226],"fields":[128],"directly.":[129],"Then,":[130],"identify":[132],"investigate":[134],"new":[136],"problem":[137],"extraction":[140],"\u2014":[141,147],"interference":[142],"resulting":[143],"misordered":[145],"set":[151],"filtering":[153],"criteria":[154],"eliminate":[156],"it":[157],"effectively.":[158],"We":[159],"evaluate":[160],"SePanner":[161,171,186,211],"using":[162],"S7COMM":[164],"protocol,":[165],"results":[168],"indicate":[169],"can":[172],"successfully":[173,192],"with":[180,223],"100%":[181],"accuracy.":[182],"Additionally,":[183,204],"employ":[185],"analyze":[188],"7":[189],"ICPs,":[191],"63":[197],"their":[201],"134":[202],"states.":[203],"demonstrate":[206],"extensive":[208],"applications":[209],"ICS":[214],"security":[215],"scenarios":[216],"present":[218],"its":[219],"better":[220],"performance":[221],"compared":[222],"existing":[224],"ICP":[225],"analyzing":[227],"tools.":[228]},"counts_by_year":[],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-02-24T00:00:00"}
