{"id":"https://openalex.org/W4392523559","doi":"https://doi.org/10.1109/tnsm.2024.3373881","title":"Anomaly Detection in SCADA Systems: A State Transition Modeling","display_name":"Anomaly Detection in SCADA Systems: A State Transition Modeling","publication_year":2024,"publication_date":"2024-03-06","ids":{"openalex":"https://openalex.org/W4392523559","doi":"https://doi.org/10.1109/tnsm.2024.3373881"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2024.3373881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3373881","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5094084508","display_name":"Nisha Kumari Barsha","orcid":null},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Nisha Kumari Barsha","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Indore, Indore, India"],"raw_orcid":"https://orcid.org/0009-0005-5777-5303","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Indore, Indore, India","institution_ids":["https://openalex.org/I64295750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028480555","display_name":"Neminath Hubballi","orcid":"https://orcid.org/0000-0001-9669-9773"},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Neminath Hubballi","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Indore, Indore, India"],"raw_orcid":"https://orcid.org/0000-0001-9669-9773","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Indore, Indore, India","institution_ids":["https://openalex.org/I64295750"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I64295750"],"apc_list":null,"apc_paid":null,"fwci":2.7154,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.89868746,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"21","issue":"3","first_page":"3511","last_page":"3521"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.8223121166229248},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7372852563858032},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6049494743347168},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.5892693400382996},{"id":"https://openalex.org/keywords/transition","display_name":"Transition (genetics)","score":0.5522131323814392},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.42420071363449097},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3197672367095947},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1845627725124359},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.1588839590549469},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.13617151975631714},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.12370410561561584}],"concepts":[{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.8223121166229248},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7372852563858032},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6049494743347168},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5892693400382996},{"id":"https://openalex.org/C194232998","wikidata":"https://www.wikidata.org/wiki/Q1606712","display_name":"Transition (genetics)","level":3,"score":0.5522131323814392},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.42420071363449097},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3197672367095947},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1845627725124359},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.1588839590549469},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.13617151975631714},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.12370410561561584},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2024.3373881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3373881","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.7799999713897705}],"awards":[{"id":"https://openalex.org/G189974357","display_name":null,"funder_award_id":"CRG/2022/005198-G","funder_id":"https://openalex.org/F4320334771","funder_display_name":"Science and Engineering Research Board"}],"funders":[{"id":"https://openalex.org/F4320334771","display_name":"Science and Engineering Research Board","ror":"https://ror.org/03ffdsr55"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1486103693","https://openalex.org/W1989429174","https://openalex.org/W2021660846","https://openalex.org/W2021702566","https://openalex.org/W2081544377","https://openalex.org/W2089944128","https://openalex.org/W2290151134","https://openalex.org/W2394912556","https://openalex.org/W2501509689","https://openalex.org/W2517721298","https://openalex.org/W2590845164","https://openalex.org/W2765669192","https://openalex.org/W2887434122","https://openalex.org/W2890189996","https://openalex.org/W2908746407","https://openalex.org/W2920892691","https://openalex.org/W2969699559","https://openalex.org/W3022006982","https://openalex.org/W3024669438","https://openalex.org/W3030473735","https://openalex.org/W3030741396","https://openalex.org/W3181614810","https://openalex.org/W4280619292","https://openalex.org/W4301255311","https://openalex.org/W4309941903","https://openalex.org/W4313468863","https://openalex.org/W4380202502","https://openalex.org/W4388936597","https://openalex.org/W6601553728","https://openalex.org/W6768120510"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Smart-Grid":[0],"networks":[1,34,94],"use":[2],"Supervisory":[3],"Control":[4],"and":[5,35,82,122,148,165],"Data":[6],"Acquisition":[7],"(SCADA)":[8],"systems":[9],"to":[10,39,51,154],"bring":[11],"measurement":[12],"data":[13],"from":[14],"sensory":[15],"nodes.":[16],"These":[17],"measurements":[18],"drive":[19],"the":[20,181,187,200],"control":[21],"decisions":[22],"which":[23],"are":[24,37,64],"safety":[25],"critical":[26,46],"operations.":[27],"SCADA":[28],"communications":[29],"now":[30],"happen":[31],"over":[32],"TCP/IP":[33],"hence":[36,123],"susceptible":[38],"cyber":[40,54,90,125,174],"attacks.":[41,55],"As":[42],"smart-grid":[43,93,128],"is":[44,49,169],"a":[45,108,161],"infrastructure,":[47],"it":[48],"essential":[50],"detect":[52,155],"these":[53,100,117,156],"In":[56],"this":[57,62],"direction,":[58],"our":[59],"contributions":[60],"in":[61,92,127,180,199],"paper":[63],"two-fold.":[65],"First,":[66],"we":[67,106],"present":[68],"three":[69,101,118],"broad":[70],"classes":[71],"of":[72,103,120,146,171,186],"network":[73],"anomalies":[74,121],"namely":[75],"single":[76],"message":[77,79,143],"anomaly,":[78,81],"sequencing":[80],"time":[83],"based":[84,113,133],"anomaly.":[85],"We":[86,158,190],"show":[87,166],"that":[88,167],"several":[89],"attacks":[91,126,175,188],"can":[95],"be":[96],"detected":[97],"by":[98],"identifying":[99,116],"types":[102,119],"anomalies.":[104,157],"Second,":[105],"describe":[107],"novel":[109],"state":[110,131],"transition":[111,132],"machine":[112],"model":[114,134],"for":[115,184],"different":[124],"networks.":[129],"Our":[130],"Deterministic":[135],"Counting":[136],"Timed":[137],"Automata":[138],"(DCTA)":[139],"formalizes":[140],"constraints":[141],"on":[142],"attributes,":[144],"timing":[145],"events,":[147],"counter":[149],"values":[150],"associated":[151],"with":[152,160,176,195],"states":[153],"experiment":[159],"publicly":[162],"available":[163],"dataset":[164],"DCTA":[168],"capable":[170],"detecting":[172],"various":[173],"100%":[177],"detection":[178],"rate":[179],"best":[182],"case":[183],"most":[185],"considered.":[189],"also":[191],"benchmark":[192],"its":[193],"performance":[194],"recent":[196],"methods":[197],"found":[198],"literature.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}