{"id":"https://openalex.org/W3085509055","doi":"https://doi.org/10.1109/tetc.2021.3073017","title":"DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems","display_name":"DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3085509055","doi":"https://doi.org/10.1109/tetc.2021.3073017","mag":"3085509055"},"language":"en","primary_location":{"id":"doi:10.1109/tetc.2021.3073017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetc.2021.3073017","pdf_url":null,"source":{"id":"https://openalex.org/S2496326734","display_name":"IEEE Transactions on Emerging Topics in Computing","issn_l":"2168-6750","issn":["2168-6750","2376-4562"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2009.06299","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Maged Fathy Abdelaty","orcid":null},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Maged Fathy Abdelaty","raw_affiliation_strings":["RiSING Research Unit, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, (e-mail: mabdelaty@fbk.eu)"],"affiliations":[{"raw_affiliation_string":"RiSING Research Unit, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, (e-mail: mabdelaty@fbk.eu)","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Roberto Doriguzzi Corin","orcid":null},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Roberto Doriguzzi Corin","raw_affiliation_strings":["Cybersecurity, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, 38123 (e-mail: rdoriguzzi@fbk.eu)"],"affiliations":[{"raw_affiliation_string":"Cybersecurity, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, 38123 (e-mail: rdoriguzzi@fbk.eu)","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"last","author":{"id":null,"display_name":"Domenico Siracusa","orcid":null},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Domenico Siracusa","raw_affiliation_strings":["RiSING Research Unit, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, (e-mail: dsiracusa@fbk.eu)"],"affiliations":[{"raw_affiliation_string":"RiSING Research Unit, Fondazione Bruno Kessler, 18466 Trento, Trento, Italy, (e-mail: dsiracusa@fbk.eu)","institution_ids":["https://openalex.org/I2277624104"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2277624104"],"apc_list":null,"apc_paid":null,"fwci":3.6049,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.92977406,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7785000205039978},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.718500018119812},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7077999711036682},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.6287000179290771},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5045999884605408},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47450000047683716},{"id":"https://openalex.org/keywords/process-control","display_name":"Process control","score":0.399399995803833},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.388700008392334},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.38609999418258667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7993999719619751},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7785000205039978},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.718500018119812},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7077999711036682},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6482999920845032},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.6287000179290771},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47450000047683716},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4397999942302704},{"id":"https://openalex.org/C155386361","wikidata":"https://www.wikidata.org/wiki/Q1649571","display_name":"Process control","level":3,"score":0.399399995803833},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.388700008392334},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.38609999418258667},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3767000138759613},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3481000065803528},{"id":"https://openalex.org/C2781121602","wikidata":"https://www.wikidata.org/wiki/Q3504403","display_name":"Modular neural network","level":4,"score":0.3433000147342682},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.33180001378059387},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.3140000104904175},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.28110000491142273},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2612000107765198},{"id":"https://openalex.org/C2780735816","wikidata":"https://www.wikidata.org/wiki/Q28324931","display_name":"Incremental learning","level":2,"score":0.25600001215934753}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tetc.2021.3073017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetc.2021.3073017","pdf_url":null,"source":{"id":"https://openalex.org/S2496326734","display_name":"IEEE Transactions on Emerging Topics in Computing","issn_l":"2168-6750","issn":["2168-6750","2376-4562"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2009.06299","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2009.06299","pdf_url":"https://arxiv.org/pdf/2009.06299","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:iris.unitn.it:11572/301675","is_oa":true,"landing_page_url":"https://ieeexplore.ieee.org/document/9403989/authors#authors","pdf_url":null,"source":{"id":"https://openalex.org/S4306401913","display_name":"Institutional Research Information System (Universit\u00e0 degli Studi di Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2009.06299","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2009.06299","pdf_url":"https://arxiv.org/pdf/2009.06299","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1970412479","https://openalex.org/W2004588456","https://openalex.org/W2039148409","https://openalex.org/W2080378870","https://openalex.org/W2154579312","https://openalex.org/W2162651021","https://openalex.org/W2293378006","https://openalex.org/W2475334473","https://openalex.org/W2512094555","https://openalex.org/W2604247107","https://openalex.org/W2608911009","https://openalex.org/W2613409207","https://openalex.org/W2613412685","https://openalex.org/W2786808285","https://openalex.org/W2806797541","https://openalex.org/W2887112074","https://openalex.org/W2887132990","https://openalex.org/W2896370767","https://openalex.org/W2905396420","https://openalex.org/W2911200746","https://openalex.org/W2963166639","https://openalex.org/W2969699559","https://openalex.org/W2971355205","https://openalex.org/W2983697547","https://openalex.org/W2991605975","https://openalex.org/W3005097670","https://openalex.org/W3007203474","https://openalex.org/W3042855339","https://openalex.org/W3092287343","https://openalex.org/W3119781401","https://openalex.org/W3127696688","https://openalex.org/W6604254268","https://openalex.org/W6750254146","https://openalex.org/W6754157402","https://openalex.org/W6758126075","https://openalex.org/W6766978945"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"Learning":[1],"is":[2,21,111,137,169],"emerging":[3],"as":[4,40,56,199,201],"an":[5,140,189],"effective":[6],"technique":[7],"to":[8,22,30,34,100,171,196,204],"detect":[9],"sophisticated":[10],"cyber-attacks":[11],"targeting":[12],"Industrial":[13],"Control":[14],"Systems":[15],"(ICSs).":[16],"The":[17,105],"conventional":[18],"detection":[19,72,146,191],"approach":[20],"learn":[23],"the":[24,28,43,67,70,109,118,121,145,152,155,173,177],"normal":[25,44,159],"behaviour":[26,45,123],"of":[27,46,58,69,82,108,128,144,176],"system,":[29],"be":[31,75],"then":[32],"able":[33],"label":[35],"noteworthy":[36],"deviations":[37],"from":[38],"it":[39],"anomalies.":[41],"However,":[42],"ICSs":[47],"continuously":[48],"evolves":[49],"over":[50],"time":[51],"for":[52],"multiple":[53],"reasons,":[54],"such":[55],"update/replacement":[57],"devices,":[59],"workflow":[60],"modifications":[61],"or":[62],"others.":[63],"As":[64],"a":[65,79,91,97,112,125,132],"consequence,":[66],"accuracy":[68,194],"anomaly":[71],"process":[73],"may":[74],"dramatically":[76],"affected":[77],"with":[78,96,124],"considerable":[80],"amount":[81],"false":[83],"alarms":[84],"being":[85],"generated.":[86],"This":[87,136],"paper":[88],"presents":[89],"DAICS,":[90],"novel":[92],"deep":[93],"learning":[94],"framework":[95,110],"modular":[98],"design":[99],"fit":[101],"in":[102,120,154],"large":[103],"ICSs.":[104],"key":[106],"component":[107],"2-branch":[113],"neural":[114],"network":[115],"that":[116,148],"learns":[117],"changes":[119,153],"ICS":[122],"small":[126],"number":[127],"data":[129],"samples":[130],"and":[131,187,193],"few":[133],"gradient":[134],"updates.":[135],"supported":[138],"by":[139],"automatic":[141],"tuning":[142],"mechanism":[143],"threshold":[147],"takes":[149],"into":[150],"account":[151],"prediction":[156],"error":[157],"under":[158],"operating":[160],"conditions.":[161],"In":[162],"this":[163],"regard,":[164],"no":[165],"specialised":[166],"human":[167],"intervention":[168],"needed":[170],"update":[172],"other":[174],"parameters":[175],"system.":[178],"DAICS":[179],"has":[180],"been":[181],"evaluated":[182],"using":[183],"publicly":[184],"available":[185],"datasets":[186],"shows":[188],"increased":[190],"rate":[192],"compared":[195],"state-of-the-art":[197],"approaches,":[198],"well":[200],"higher":[202],"robustness":[203],"additive":[205],"noise.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":3}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2020-09-21T00:00:00"}