{"id":"https://openalex.org/W4410295211","doi":"https://doi.org/10.1109/tifs.2025.3569129","title":"Patty: Pattern Series-Based Semantics Analysis for Agnostic Industrial Control Protocols","display_name":"Patty: Pattern Series-Based Semantics Analysis for Agnostic Industrial Control Protocols","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4410295211","doi":"https://doi.org/10.1109/tifs.2025.3569129"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3569129","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3569129","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111842822","display_name":"Daoqing Yang","orcid":"https://orcid.org/0009-0003-8668-7447"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Daoqing Yang","raw_affiliation_strings":["College of Computer Science and Engineering, Northeastern University, Shenyang, China","School of Computer Science and Engineering, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100749120","display_name":"Yu Yao","orcid":"https://orcid.org/0000-0001-5458-541X"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Yao","raw_affiliation_strings":["College of Computer Science and Engineering, Northeastern University, Shenyang, China","School of Computer Science and Engineering, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102705756","display_name":"Shan Yao","orcid":"https://orcid.org/0000-0001-9327-5262"},"institutions":[{"id":"https://openalex.org/I18452120","display_name":"Yantai University","ror":"https://ror.org/01rp41m56","country_code":"CN","type":"education","lineage":["https://openalex.org/I18452120"]},{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Shan","raw_affiliation_strings":["School of Computer and Control Engineering, Yantai University, Yantai, China","School of Computer Science and Engineering, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Control Engineering, Yantai University, Yantai, China","institution_ids":["https://openalex.org/I18452120"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110701801","display_name":"Licheng Yang","orcid":"https://orcid.org/0009-0009-1387-5846"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Licheng Yang","raw_affiliation_strings":["College of Computer Science and Engineering, Northeastern University, Shenyang, China","School of Computer Science and Engineering, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101930900","display_name":"Wei Yang","orcid":"https://orcid.org/0000-0002-4471-0026"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Yang","raw_affiliation_strings":["College of Software, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"College of Software, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009067661","display_name":"Fuyi Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fuyi Liu","raw_affiliation_strings":["College of Computer Science and Engineering, Northeastern University, Shenyang, China","School of Computer Science and Engineering, Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101968922","display_name":"Yunfeng Wu","orcid":"https://orcid.org/0000-0003-2617-1214"},"institutions":[{"id":"https://openalex.org/I15089104","display_name":"China Aerospace Science and Industry Corporation (China)","ror":"https://ror.org/0523vvf33","country_code":"CN","type":"company","lineage":["https://openalex.org/I15089104"]},{"id":"https://openalex.org/I4210104233","display_name":"China Electronics Corporation (China)","ror":"https://ror.org/00vsv8c52","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210104233"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunfeng Wu","raw_affiliation_strings":["Sixth Research Institute of China Electronics Information Industry Group Company Ltd., Beijing, China","China Electronics Corporation Sixth Research Institute, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Sixth Research Institute of China Electronics Information Industry Group Company Ltd., Beijing, China","institution_ids":["https://openalex.org/I15089104"]},{"raw_affiliation_string":"China Electronics Corporation Sixth Research Institute, Beijing, China","institution_ids":["https://openalex.org/I4210104233"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5111842822"],"corresponding_institution_ids":["https://openalex.org/I9224756"],"apc_list":null,"apc_paid":null,"fwci":1.2158,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.78334168,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"20","issue":null,"first_page":"5478","last_page":"5491"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10876","display_name":"Fault Detection and Control Systems","score":0.9607999920845032,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10876","display_name":"Fault Detection and Control Systems","score":0.9607999920845032,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9372000098228455,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8447513580322266},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6234838962554932},{"id":"https://openalex.org/keywords/series","display_name":"Series (stratigraphy)","score":0.543816864490509},{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.4134519398212433},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.39688101410865784},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3623508810997009},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3488745391368866},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32805436849594116},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3237157464027405},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2110058069229126}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8447513580322266},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6234838962554932},{"id":"https://openalex.org/C143724316","wikidata":"https://www.wikidata.org/wiki/Q312468","display_name":"Series (stratigraphy)","level":2,"score":0.543816864490509},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.4134519398212433},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.39688101410865784},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3623508810997009},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3488745391368866},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32805436849594116},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3237157464027405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2110058069229126},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3569129","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3569129","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W119403003","https://openalex.org/W1547308659","https://openalex.org/W2018506753","https://openalex.org/W2049867480","https://openalex.org/W2318029894","https://openalex.org/W2725004781","https://openalex.org/W2754051771","https://openalex.org/W2889322176","https://openalex.org/W2892035503","https://openalex.org/W2904808711","https://openalex.org/W2921604385","https://openalex.org/W2964241064","https://openalex.org/W2988250270","https://openalex.org/W3004758087","https://openalex.org/W3098714061","https://openalex.org/W3115948762","https://openalex.org/W3138225825","https://openalex.org/W3138456218","https://openalex.org/W3156778228","https://openalex.org/W3168209419","https://openalex.org/W4210660460","https://openalex.org/W4229801112","https://openalex.org/W4285287442","https://openalex.org/W4286268933","https://openalex.org/W4288048363","https://openalex.org/W4312752017","https://openalex.org/W4385763767","https://openalex.org/W4387872679","https://openalex.org/W4391249478","https://openalex.org/W4391725314","https://openalex.org/W4392199044","https://openalex.org/W4392888376","https://openalex.org/W4407638341","https://openalex.org/W6629319858","https://openalex.org/W6632460521","https://openalex.org/W6684191040","https://openalex.org/W6753907239"],"related_works":["https://openalex.org/W1919101720","https://openalex.org/W4390822878","https://openalex.org/W4246257243","https://openalex.org/W96888382","https://openalex.org/W4386126592","https://openalex.org/W2041308758","https://openalex.org/W4392529072","https://openalex.org/W4394131749","https://openalex.org/W4394084199","https://openalex.org/W1976730198"],"abstract_inverted_index":{"Reverse":[0],"engineering":[1,32],"of":[2,18,36,50,85,94,148],"agnostic":[3],"industrial":[4,19],"control":[5,20],"protocols":[6,124],"(ICPs)":[7],"based":[8],"on":[9,44],"traffic":[10],"traces":[11],"is":[12,25],"significant":[13],"for":[14,47,80,105],"the":[15,34,37,76,82,92,99,146,149],"security":[16],"analysis":[17,46],"systems.":[21],"Field":[22],"semantics":[23,113],"deduction":[24],"an":[26],"essential":[27],"step":[28],"in":[29,129,172],"protocol":[30],"reverse":[31],"following":[33],"discovery":[35],"message":[38],"field.":[39],"Most":[40],"existing":[41],"methods":[42,171],"rely":[43],"knowledge-based":[45],"specific":[48],"fields":[49],"common":[51],"protocols,":[52],"which":[53],"require":[54],"too":[55],"numerous":[56],"assumptions":[57],"and":[58,74,97,118],"lack":[59],"semantic":[60,83,120,127,142,174],"knowledge":[61],"about":[62],"ICPs.":[63,87],"In":[64],"this":[65],"paper,":[66],"we":[67,89,133],"propose":[68],"a":[69,111,135],"new":[70],"concept,":[71],"pattern":[72,95,101],"series,":[73],"design":[75,98],"first":[77,90],"classification":[78,114],"framework":[79],"inferring":[81],"types":[84,128],"unknown":[86,130],"Specifically,":[88],"present":[91],"definition":[93],"series":[96,102],"field":[100,112,173],"generation":[103],"algorithm":[104,138],"building":[106],"training":[107],"data,":[108],"then":[109],"develop":[110],"model":[115],"to":[116,125,139],"learn":[117],"apply":[119],"features":[121],"from":[122],"known":[123],"predict":[126],"protocols.":[131,162],"Lastly,":[132],"implement":[134],"probability-maximizing":[136],"selection":[137],"obtain":[140],"optimal":[141],"types.":[143],"We":[144],"demonstrate":[145],"effectiveness":[147],"proposed":[150],"method":[151],"through":[152],"extensive":[153],"experiments":[154],"with":[155],"five":[156],"popular":[157],"ICPs,":[158],"including":[159],"their":[160],"mixed":[161],"Evaluations":[163],"show":[164],"that":[165],"our":[166],"approach":[167],"significantly":[168],"outperforms":[169],"baseline":[170],"recognition,":[175],"achieving":[176],"\u226590.8%":[177],"F1-score.":[178]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}