{"id":"https://openalex.org/W3099125746","doi":"https://doi.org/10.1109/tnsm.2020.3037050","title":"Methodology to Determine the Device-Level Periodicity for Anomaly Detection in EtherCAT-Based Industrial Control Network","display_name":"Methodology to Determine the Device-Level Periodicity for Anomaly Detection in EtherCAT-Based Industrial Control Network","publication_year":2020,"publication_date":"2020-11-10","ids":{"openalex":"https://openalex.org/W3099125746","doi":"https://doi.org/10.1109/tnsm.2020.3037050","mag":"3099125746"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.3037050","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3037050","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066573773","display_name":"Kevser Ovaz Akpinar","orcid":"https://orcid.org/0000-0002-9859-6855"},"institutions":[{"id":"https://openalex.org/I103703290","display_name":"Sakarya University","ror":"https://ror.org/04ttnw109","country_code":"TR","type":"education","lineage":["https://openalex.org/I103703290"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Kevser Ovaz Akpinar","raw_affiliation_strings":["Department of Computer Engineering, Sakarya University, Sakarya, Turkey"],"raw_orcid":"https://orcid.org/0000-0002-9859-6855","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey","institution_ids":["https://openalex.org/I103703290"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043591473","display_name":"\u0130brahim \u00d6z\u00e7eli\u0307k","orcid":"https://orcid.org/0000-0001-9985-5268"},"institutions":[{"id":"https://openalex.org/I103703290","display_name":"Sakarya University","ror":"https://ror.org/04ttnw109","country_code":"TR","type":"education","lineage":["https://openalex.org/I103703290"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ibrahim Ozcelik","raw_affiliation_strings":["Department of Computer Engineering, Sakarya University, Sakarya, Turkey"],"raw_orcid":"https://orcid.org/0000-0001-9985-5268","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey","institution_ids":["https://openalex.org/I103703290"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I103703290"],"apc_list":null,"apc_paid":null,"fwci":2.1638,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.8858817,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"18","issue":"2","first_page":"2308","last_page":"2319"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7581631541252136},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7368370890617371},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6922146081924438},{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.6498953104019165},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.6378570795059204},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.5290794968605042},{"id":"https://openalex.org/keywords/programmable-logic-controller","display_name":"Programmable logic controller","score":0.5211750864982605},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.4528246521949768},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4470955729484558},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.44671887159347534},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.42369043827056885},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.41203773021698},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2098333239555359},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.17545169591903687},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1298668086528778},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12241068482398987},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.11925819516181946},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10608160495758057}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7581631541252136},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7368370890617371},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6922146081924438},{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.6498953104019165},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.6378570795059204},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5290794968605042},{"id":"https://openalex.org/C37374048","wikidata":"https://www.wikidata.org/wiki/Q188674","display_name":"Programmable logic controller","level":2,"score":0.5211750864982605},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.4528246521949768},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4470955729484558},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.44671887159347534},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.42369043827056885},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.41203773021698},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2098333239555359},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.17545169591903687},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1298668086528778},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12241068482398987},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.11925819516181946},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10608160495758057},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2020.3037050","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3037050","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6800000071525574}],"awards":[{"id":"https://openalex.org/G8060729162","display_name":"SCADA Sistemlerinde Kullan\u0131lan EtherCAT Protokol\u00fcne AitYeni Bir Sald\u0131r\u0131 Tespit Sistemi","funder_award_id":"118E263","funder_id":"https://openalex.org/F4320322626","funder_display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu"}],"funders":[{"id":"https://openalex.org/F4320322626","display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu","ror":"https://ror.org/04w9kkr77"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W792552903","https://openalex.org/W1585125368","https://openalex.org/W1619258821","https://openalex.org/W1990754091","https://openalex.org/W1998931367","https://openalex.org/W2035379194","https://openalex.org/W2051027000","https://openalex.org/W2069285803","https://openalex.org/W2083781047","https://openalex.org/W2089944128","https://openalex.org/W2091425152","https://openalex.org/W2115322934","https://openalex.org/W2119290091","https://openalex.org/W2120400483","https://openalex.org/W2122217421","https://openalex.org/W2142076797","https://openalex.org/W2289626424","https://openalex.org/W2304927286","https://openalex.org/W2359973477","https://openalex.org/W2507993630","https://openalex.org/W2512362618","https://openalex.org/W2528464937","https://openalex.org/W2542991636","https://openalex.org/W2560399231","https://openalex.org/W2604257508","https://openalex.org/W2611645847","https://openalex.org/W2732102719","https://openalex.org/W2748696935","https://openalex.org/W2749526959","https://openalex.org/W2799754875","https://openalex.org/W2810107741","https://openalex.org/W2885298216","https://openalex.org/W2890189996","https://openalex.org/W2961318055","https://openalex.org/W2968326636","https://openalex.org/W2996462208","https://openalex.org/W4256497308","https://openalex.org/W6667864987","https://openalex.org/W6725988714","https://openalex.org/W6736019042","https://openalex.org/W6750864377","https://openalex.org/W6754870966","https://openalex.org/W6765763219"],"related_works":["https://openalex.org/W2309980522","https://openalex.org/W2187618570","https://openalex.org/W4252573951","https://openalex.org/W2902958991","https://openalex.org/W2801513872","https://openalex.org/W2516092834","https://openalex.org/W2615554433","https://openalex.org/W2804225172","https://openalex.org/W2007955754","https://openalex.org/W3084463301"],"abstract_inverted_index":{"Continuous":[0],"operation":[1],"and":[2,14,24,27,70,84,115,146,166,203,226],"monitoring":[3],"of":[4,48,161,200],"critical":[5,35],"infrastructure":[6,36],"networks":[7,23,42],"are":[8,32,74,240],"crucial":[9],"to":[10,88,157],"ensure":[11],"their":[12],"sustainability":[13],"security.":[15],"To":[16],"achieve":[17],"these,":[18],"industrial":[19],"control":[20,26,106],"system":[21,181,224],"(ICS)":[22],"supervisory":[25],"data":[28],"acquisition":[29],"(SCADA)":[30],"systems":[31],"deployed":[33],"in":[34,40,62,184],"assets.":[37],"Many":[38],"events":[39],"ICS":[41],"present":[43],"strong":[44],"periodical":[45],"patterns":[46,208,239],"because":[47],"process":[49],"repetition":[50],"or":[51],"cyclic":[52],"communication.":[53],"From":[54],"the":[55,59,63,67,71,122,159,162,167,180,185,188,228],"security":[56],"viewpoint,":[57],"inferring":[58],"periodicity":[60,99,137,163,168],"primarily":[61],"device-level":[64,119],"communications":[65],"where":[66],"actuator/sensor,":[68],"field,":[69],"cell-level":[72],"transmissions":[73],"performed":[75],"is":[76,133],"important":[77],"for":[78,91,103,105,117],"detecting":[79,118],"anomalies.":[80],"The":[81,136,206,231],"synchronization":[82],"period":[83],"traffic":[85,130,195,207],"pattern":[86,131],"need":[87],"be":[89,139],"known":[90],"anomaly":[92,125,213],"detection.":[93],"This":[94],"article":[95],"presents":[96],"a":[97,220],"novel":[98],"detection":[100,126,164,214],"approach":[101,189],"specifically":[102],"Ethernet":[104],"automation":[107],"technology":[108],"(EtherCAT)":[109],"networks.":[110],"It":[111],"uses":[112],"protocol-specific":[113],"operations":[114],"fields":[116],"periodicity.":[120],"Using":[121],"period,":[123],"an":[124,212],"method":[127],"that":[128,197,234,236],"uncovers":[129],"statistics":[132],"also":[134,191],"proposed.":[135],"can":[138],"detected":[140],"with":[141,172],"different":[142],"precision,":[143],"significance":[144],"levels,":[145],"lag":[147],"sizes.":[148],"Four":[149],"programmable":[150],"logic":[151],"controller":[152],"(PLC)":[153],"programs":[154],"were":[155,209],"developed":[156,218],"demonstrate":[158],"feasibility":[160],"approach,":[165],"was":[169,190,217],"automatically":[170],"obtained":[171],"high":[173],"accuracy.":[174],"As":[175],"any":[176],"malicious":[177],"activity":[178],"on":[179,193,219],"causes":[182],"variances":[183],"periodic":[186],"pattern,":[187],"tested":[192],"synthetic":[194],"traces":[196],"contain":[198],"denial":[199],"service":[201],"(DoS)":[202],"code-injection":[204],"attacks.":[205],"uncovered":[210],"by":[211],"module,":[215],"which":[216],"Snort":[221],"intrusion":[222],"detection/prevention":[223],"(IDS/IPS)":[225],"used":[227],"captured":[229],"period.":[230],"tests":[232],"demonstrated":[233],"intrusions":[235],"exploit":[237],"communication":[238],"fully":[241],"flagged.":[242]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}