{"id":"https://openalex.org/W3128959222","doi":"https://doi.org/10.1109/tifs.2021.3054968","title":"CPS Device-Class Identification via Behavioral Fingerprinting: From Theory to Practice","display_name":"CPS Device-Class Identification via Behavioral Fingerprinting: From Theory to Practice","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3128959222","doi":"https://doi.org/10.1109/tifs.2021.3054968","mag":"3128959222"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2021.3054968","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3054968","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085312553","display_name":"Leonardo Babun","orcid":"https://orcid.org/0000-0002-7082-8423"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leonardo Babun","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-7082-8423","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022717159","display_name":"Hidayet Aksu","orcid":"https://orcid.org/0000-0003-0159-2522"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hidayet Aksu","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0003-0159-2522","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"A. Selcuk Uluagac","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-9823-3464","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I19700959"],"apc_list":null,"apc_paid":null,"fwci":3.144,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.92416765,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"16","issue":null,"first_page":"2413","last_page":"2428"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8626753091812134},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.7662080526351929},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6534409523010254},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6078814268112183},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5066819787025452},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.47029921412467957},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4493839144706726},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.43614494800567627},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3893555998802185},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13438904285430908}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8626753091812134},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.7662080526351929},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6534409523010254},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6078814268112183},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5066819787025452},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.47029921412467957},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4493839144706726},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.43614494800567627},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3893555998802185},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13438904285430908},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2021.3054968","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3054968","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1660299269","display_name":null,"funder_award_id":"NSF-1663051","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8525368751","display_name":null,"funder_award_id":"DE-OE0000779","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":82,"referenced_works":["https://openalex.org/W186343359","https://openalex.org/W1229457308","https://openalex.org/W1529311848","https://openalex.org/W1560396200","https://openalex.org/W1576935312","https://openalex.org/W1606499049","https://openalex.org/W1874399837","https://openalex.org/W1978887394","https://openalex.org/W1978973474","https://openalex.org/W1979717085","https://openalex.org/W2029594338","https://openalex.org/W2065085533","https://openalex.org/W2070074868","https://openalex.org/W2074855078","https://openalex.org/W2101449154","https://openalex.org/W2104599106","https://openalex.org/W2106649514","https://openalex.org/W2110031807","https://openalex.org/W2122837018","https://openalex.org/W2137756679","https://openalex.org/W2147063679","https://openalex.org/W2162700098","https://openalex.org/W2165572597","https://openalex.org/W2167332015","https://openalex.org/W2286406912","https://openalex.org/W2405765445","https://openalex.org/W2509381074","https://openalex.org/W2574448563","https://openalex.org/W2578943040","https://openalex.org/W2590502510","https://openalex.org/W2612608334","https://openalex.org/W2741324494","https://openalex.org/W2741887078","https://openalex.org/W2756723748","https://openalex.org/W2789476567","https://openalex.org/W2810849182","https://openalex.org/W2882984870","https://openalex.org/W2888096149","https://openalex.org/W2891599753","https://openalex.org/W2891699316","https://openalex.org/W2897602411","https://openalex.org/W2913096406","https://openalex.org/W2952730772","https://openalex.org/W2955262717","https://openalex.org/W2955618369","https://openalex.org/W2963012457","https://openalex.org/W2963921324","https://openalex.org/W2964014507","https://openalex.org/W2964037239","https://openalex.org/W2982426954","https://openalex.org/W2985766404","https://openalex.org/W2986445843","https://openalex.org/W2990216812","https://openalex.org/W2996181106","https://openalex.org/W2996223571","https://openalex.org/W3007562398","https://openalex.org/W3008946857","https://openalex.org/W3011238869","https://openalex.org/W3019478474","https://openalex.org/W3045912491","https://openalex.org/W3048191665","https://openalex.org/W3098873879","https://openalex.org/W3107397983","https://openalex.org/W3112111251","https://openalex.org/W3126675146","https://openalex.org/W4293334322","https://openalex.org/W4300788801","https://openalex.org/W4307752965","https://openalex.org/W4307755410","https://openalex.org/W6607589358","https://openalex.org/W6628053425","https://openalex.org/W6631540460","https://openalex.org/W6633709263","https://openalex.org/W6645063808","https://openalex.org/W6680492132","https://openalex.org/W6732005117","https://openalex.org/W6748246993","https://openalex.org/W6770439262","https://openalex.org/W6776979042","https://openalex.org/W6843086162","https://openalex.org/W6846160948","https://openalex.org/W6846404017"],"related_works":["https://openalex.org/W3184656183","https://openalex.org/W3175764924","https://openalex.org/W2912259948","https://openalex.org/W2896962396","https://openalex.org/W3214963227","https://openalex.org/W4319079648","https://openalex.org/W1760190569","https://openalex.org/W2086401659","https://openalex.org/W3169084863","https://openalex.org/W4308465054"],"abstract_inverted_index":{"Cyber-Physical":[0],"Systems":[1],"(CPS)":[2],"utilize":[3],"different":[4,249],"devices":[5,31,48,73,86,190,253],"to":[6,81,92,95,108,130,163,216,230],"collect":[7,65],"sensitive":[8],"data,":[9],"communicate":[10],"with":[11,254],"other":[12,83],"systems,":[13,96],"and":[14,38,46,168,195,205,212,261],"monitor":[15],"essential":[16],"processes":[17],"in":[18,23,127,151,173],"critical":[19,42,124],"infrastructure":[20],"applications.":[21],"However,":[22,114],"the":[24,36,41,70,131,143,185,188,193,199,222,232,237,271,281,289],"ecosystem":[25],"of":[26,40,53,133,187,239,251,257,283],"CPS,":[27],"unauthorized":[28,45,110],"or":[29,34,55,64,77,99,111,138],"spoofed":[30,47],"may":[32,49],"danger":[33],"compromise":[35],"performance":[37,214,277],"security":[39,171],"infrastructure.":[43],"The":[44],"include":[50],"tampered":[51],"pieces":[52],"software":[54],"hardware":[56,194,213],"components":[57],"that":[58,183,247,280],"can":[59,74],"negatively":[60],"impact":[61],"CPS":[62,67,85,128,165,189,252,272,290],"operations":[63,126],"vital":[66],"metrics":[68],"from":[69],"network.":[71],"Such":[72],"be":[75],"outsider":[76],"insider":[78],"threats":[79],"trying":[80],"impersonate":[82],"real":[84],"via":[87],"spoofing":[88],"their":[89,134],"legitimate":[90],"identifications":[91],"gain":[93],"access":[94],"steal":[97],"information,":[98],"spread":[100],"malware.":[101],"Device":[102],"fingerprinting":[103,116,161],"techniques":[104],"are":[105,118,224],"promising":[106],"approaches":[107],"identify":[109,164,231],"illegitimate":[112],"devices.":[113],"current":[115],"solutions":[117],"not":[119],"suitable":[120],"as":[121],"they":[122],"disrupt":[123],"real-time":[125],"due":[129],"nature":[132],"extensive":[135,276],"data":[136],"analysis":[137,215,278],"too":[139],"much":[140],"overhead":[141,287],"on":[142,178,270,288],"devices'":[144,291],"computational":[145],"resources.":[146,293],"To":[147,235],"address":[148],"these":[149],"concerns,":[150],"this":[152],"work,":[153],"we":[154,242],"propose":[155],"STOP-AND-":[156],"FRISK":[157],"(S&F),":[158],"a":[159,179,244,255],"novel":[160,201],"framework":[162],"device":[166,233],"classes":[167,250],"complement":[169],"traditional":[170],"mechanisms":[172],"CPS.":[174],"S&F":[175,240,284],"is":[176],"based":[177],"secure":[180],"challenge/response":[181],"mechanism":[182,202],"analyzes":[184],"behavior":[186],"at":[191],"both":[192],"OS/kernel":[196],"levels.":[197],"Specifically,":[198],"proposed":[200],"combines":[203],"system":[204],"function":[206],"call":[207],"tracing":[208],"techniques,":[209],"signal":[210],"processing,":[211],"create":[217],"specific":[218],"device-class":[219,273],"signatures.":[220],"Then,":[221],"signatures":[223],"correlated":[225],"against":[226],"known":[227],"behavioral":[228],"ground-truth":[229],"types.":[234],"test":[236],"efficacy":[238],"extensively,":[241],"implemented":[243],"realistic":[245],"testbed":[246],"included":[248],"variety":[256],"computing":[258,292],"resources,":[259],"architectures,":[260],"configurations.":[262],"Our":[263],"experimental":[264],"results":[265],"reveal":[266],"an":[267],"excellent":[268],"rate":[269],"identification.":[274],"Finally,":[275],"demonstrates":[279],"use":[282],"yields":[285],"minimal":[286]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}