{"id":"https://openalex.org/W4368283296","doi":"https://doi.org/10.1109/tsg.2023.3272749","title":"Early Attack Detection for Securing GOOSE Network Traffic","display_name":"Early Attack Detection for Securing GOOSE Network Traffic","publication_year":2023,"publication_date":"2023-05-03","ids":{"openalex":"https://openalex.org/W4368283296","doi":"https://doi.org/10.1109/tsg.2023.3272749"},"language":"en","primary_location":{"id":"doi:10.1109/tsg.2023.3272749","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tsg.2023.3272749","pdf_url":"https://ieeexplore.ieee.org/ielx7/5165411/5446437/10115259.pdf","source":{"id":"https://openalex.org/S59604973","display_name":"IEEE Transactions on Smart Grid","issn_l":"1949-3053","issn":["1949-3053","1949-3061"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Smart Grid","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/5165411/5446437/10115259.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025369498","display_name":"Ghada Elbez","orcid":"https://orcid.org/0000-0003-1137-1782"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]},{"id":"https://openalex.org/I4210121389","display_name":"Kerntechnische Entsorgung Karlsruhe (Germany)","ror":"https://ror.org/02kd9ve64","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210121389"]},{"id":"https://openalex.org/I4210157642","display_name":"Institute of Automation","ror":"https://ror.org/056qj1t15","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210157642","https://openalex.org/I78650965"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Ghada Elbez","raw_affiliation_strings":["Institute of Automation and Applied Informatics, KASTEL Security Research Labs, Karlsruhe Institute of Technology, Eggenstein-Leopoldshafen, Germany","Institute of Automation and Applied Informatics (IAI), KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Eggenstein-Leopoldshafen, Germany"],"raw_orcid":"https://orcid.org/0000-0003-1137-1782","affiliations":[{"raw_affiliation_string":"Institute of Automation and Applied Informatics, KASTEL Security Research Labs, Karlsruhe Institute of Technology, Eggenstein-Leopoldshafen, Germany","institution_ids":["https://openalex.org/I4210121389"]},{"raw_affiliation_string":"Institute of Automation and Applied Informatics (IAI), KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Eggenstein-Leopoldshafen, Germany","institution_ids":["https://openalex.org/I102335020","https://openalex.org/I4210157642"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074224097","display_name":"Klara Nahrstedt","orcid":"https://orcid.org/0000-0001-6813-3043"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Klara Nahrstedt","raw_affiliation_strings":["Information Trust Institute, University of Illinois at Urbana–Champaign, Urbana, IL, USA","Information Trust Institute (ITI), University of Illinois at Urbana-Champaign (UIUC), Urbana, Illinois, USA"],"raw_orcid":"https://orcid.org/0000-0001-6813-3043","affiliations":[{"raw_affiliation_string":"Information Trust Institute, University of Illinois at Urbana–Champaign, Urbana, IL, USA","institution_ids":["https://openalex.org/I157725225"]},{"raw_affiliation_string":"Information Trust Institute (ITI), University of Illinois at Urbana-Champaign (UIUC), Urbana, Illinois, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014228448","display_name":"Veit Hagenmeyer","orcid":"https://orcid.org/0000-0002-3572-9083"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]},{"id":"https://openalex.org/I4210121389","display_name":"Kerntechnische Entsorgung Karlsruhe (Germany)","ror":"https://ror.org/02kd9ve64","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210121389"]},{"id":"https://openalex.org/I4210157642","display_name":"Institute of Automation","ror":"https://ror.org/056qj1t15","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210157642","https://openalex.org/I78650965"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Veit Hagenmeyer","raw_affiliation_strings":["Institute of Automation and Applied Informatics, KASTEL Security Research Labs, Karlsruhe Institute of Technology, Eggenstein-Leopoldshafen, Germany","Institute of Automation and Applied Informatics (IAI), KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Eggenstein-Leopoldshafen, Germany"],"raw_orcid":"https://orcid.org/0000-0002-3572-9083","affiliations":[{"raw_affiliation_string":"Institute of Automation and Applied Informatics, KASTEL Security Research Labs, Karlsruhe Institute of Technology, Eggenstein-Leopoldshafen, Germany","institution_ids":["https://openalex.org/I4210121389"]},{"raw_affiliation_string":"Institute of Automation and Applied Informatics (IAI), KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Eggenstein-Leopoldshafen, Germany","institution_ids":["https://openalex.org/I102335020","https://openalex.org/I4210157642"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5025369498"],"corresponding_institution_ids":["https://openalex.org/I102335020","https://openalex.org/I4210121389","https://openalex.org/I4210157642"],"apc_list":null,"apc_paid":{"value":1959,"currency":"EUR","value_usd":2112},"fwci":3.5199,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.92928909,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"15","issue":"1","first_page":"899","last_page":"910"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iec-61850","display_name":"IEC 61850","score":0.7943097352981567},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7200558185577393},{"id":"https://openalex.org/keywords/goose","display_name":"Goose","score":0.704541802406311},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5872495770454407},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.5495926737785339},{"id":"https://openalex.org/keywords/telecommunications-network","display_name":"Telecommunications network","score":0.5304445624351501},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4814109802246094},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4555886387825012},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4308069348335266},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4217127561569214},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.4199164807796478},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.13592135906219482},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.13332945108413696},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.12406817078590393}],"concepts":[{"id":"https://openalex.org/C2778907243","wikidata":"https://www.wikidata.org/wiki/Q168160","display_name":"IEC 61850","level":3,"score":0.7943097352981567},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7200558185577393},{"id":"https://openalex.org/C2781126499","wikidata":"https://www.wikidata.org/wiki/Q16529344","display_name":"Goose","level":2,"score":0.704541802406311},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5872495770454407},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.5495926737785339},{"id":"https://openalex.org/C192126672","wikidata":"https://www.wikidata.org/wiki/Q1068715","display_name":"Telecommunications network","level":2,"score":0.5304445624351501},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4814109802246094},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4555886387825012},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4308069348335266},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4217127561569214},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.4199164807796478},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.13592135906219482},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.13332945108413696},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.12406817078590393},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsg.2023.3272749","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tsg.2023.3272749","pdf_url":"https://ieeexplore.ieee.org/ielx7/5165411/5446437/10115259.pdf","source":{"id":"https://openalex.org/S59604973","display_name":"IEEE Transactions on Smart Grid","issn_l":"1949-3053","issn":["1949-3053","1949-3061"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Smart Grid","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tsg.2023.3272749","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tsg.2023.3272749","pdf_url":"https://ieeexplore.ieee.org/ielx7/5165411/5446437/10115259.pdf","source":{"id":"https://openalex.org/S59604973","display_name":"IEEE Transactions on Smart Grid","issn_l":"1949-3053","issn":["1949-3053","1949-3061"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Smart Grid","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6499999761581421}],"awards":[],"funders":[{"id":"https://openalex.org/F4320325698","display_name":"Helmholtz Association","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4368283296.pdf","grobid_xml":"https://content.openalex.org/works/W4368283296.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W37866937","https://openalex.org/W1550654601","https://openalex.org/W1933020797","https://openalex.org/W1979315960","https://openalex.org/W1982843796","https://openalex.org/W1983818306","https://openalex.org/W2024094925","https://openalex.org/W2030140501","https://openalex.org/W2036463896","https://openalex.org/W2043314203","https://openalex.org/W2045404766","https://openalex.org/W2048211164","https://openalex.org/W2055781590","https://openalex.org/W2126513215","https://openalex.org/W2147066793","https://openalex.org/W2149361029","https://openalex.org/W2154276653","https://openalex.org/W2156916299","https://openalex.org/W2160841769","https://openalex.org/W2482274939","https://openalex.org/W2515527499","https://openalex.org/W2516619066","https://openalex.org/W2542770903","https://openalex.org/W2559429465","https://openalex.org/W2563466111","https://openalex.org/W2887380098","https://openalex.org/W2896851850","https://openalex.org/W2904457314","https://openalex.org/W2975698070","https://openalex.org/W2981103085","https://openalex.org/W2991517675","https://openalex.org/W3090821644","https://openalex.org/W3117841597","https://openalex.org/W3161881368","https://openalex.org/W3202078809","https://openalex.org/W4213251304","https://openalex.org/W4214778247","https://openalex.org/W4229332384","https://openalex.org/W4247848308","https://openalex.org/W4248979535","https://openalex.org/W6601553728"],"related_works":["https://openalex.org/W2367739416","https://openalex.org/W2352028207","https://openalex.org/W1847012216","https://openalex.org/W2383397189","https://openalex.org/W4376119504","https://openalex.org/W2364323245","https://openalex.org/W2355316445","https://openalex.org/W2552842700","https://openalex.org/W2748201010","https://openalex.org/W2383495347"],"abstract_inverted_index":{"The":[0,29,90,121],"requirements":[1],"for":[2,73,79,112],"the":[3,6,17,20,24,27,74,87,94,113,126,132,135,149,156,164],"security":[4],"of":[5,19,31,57,77,97,106,125,134,168],"network":[7,98,108,136],"communication":[8,32,127],"in":[9,33,52,86,100,138,163],"critical":[10],"infrastructures":[11],"have":[12],"been":[13],"more":[14],"focused":[15],"on":[16,117,143],"availability":[18,30],"data":[21],"rather":[22],"than":[23],"integrity":[25],"and":[26,154],"confidentiality.":[28],"IEC":[34,139],"61850":[35,140],"substations":[36,141],"can":[37,129],"be":[38],"hindered":[39],"by":[40],"Generic":[41],"Object":[42],"Oriented":[43],"Substation":[44],"Event":[45],"(GOOSE)":[46],"poisoning":[47],"attacks":[48],"that":[49],"might":[50],"result":[51],"threats":[53],"such":[54],"as":[55,181],"Denial":[56],"Service":[58],"(DoS)":[59],"or":[60],"flooding":[61],"attacks.":[62],"In":[63],"order":[64],"to":[65],"accurately":[66],"detect":[67],"similar":[68],"attacks,":[69],"a":[70,166,169,173,182],"novel":[71,150],"method":[72,92,153],"Early":[75],"Detection":[76],"Attacks":[78],"GOOSE":[80,107],"Network":[81],"Traffic":[82],"(EDA4GNeT)":[83],"is":[84,110,179],"developed":[85,122],"present":[88],"work.":[89],"EDA4GNeT":[91],"considers":[93],"dynamic":[95],"behavior":[96],"traffic":[99,109,128],"electrical":[101],"substations.":[102],"A":[103],"mathematical":[104,123],"modeling":[105],"adopted":[111],"anomaly":[114,151],"detection":[115,152],"based":[116,142],"statistical":[118],"hypothesis":[119],"testing.":[120],"model":[124],"also":[130],"support":[131],"management":[133],"architecture":[137],"appropriate":[144],"performance":[145],"studies.":[146],"To":[147],"test":[148],"compare":[155],"obtained":[157],"results":[158],"with":[159,176],"related":[160],"works":[161],"found":[162],"literature,":[165],"simulation":[167],"DoS":[170],"attack":[171],"against":[172],"66/11kV":[174],"substation":[175],"several":[177],"experiments":[178],"used":[180],"case":[183],"study.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-15T08:27:34.491423","created_date":"2025-10-10T00:00:00"}