{"id":"https://openalex.org/W4399206169","doi":"https://doi.org/10.1109/wfcs60972.2024.10540775","title":"Towards Incident Response Orchestration and Automation for the Advanced Metering Infrastructure","display_name":"Towards Incident Response Orchestration and Automation for the Advanced Metering Infrastructure","publication_year":2024,"publication_date":"2024-04-17","ids":{"openalex":"https://openalex.org/W4399206169","doi":"https://doi.org/10.1109/wfcs60972.2024.10540775"},"language":"en","primary_location":{"id":"doi:10.1109/wfcs60972.2024.10540775","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wfcs60972.2024.10540775","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 20th International Conference on Factory Communication Systems (WFCS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.1109/WFCS60972.2024.10540775","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076338496","display_name":"Alexios Lekidis","orcid":"https://orcid.org/0000-0002-8243-7075"},"institutions":[{"id":"https://openalex.org/I145722265","display_name":"University of Thessaly","ror":"https://ror.org/04v4g9h31","country_code":"GR","type":"education","lineage":["https://openalex.org/I145722265"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Alexios Lekidis","raw_affiliation_strings":["University of Thessaly,Greece","University of Thessaly, Greece"],"affiliations":[{"raw_affiliation_string":"University of Thessaly,Greece","institution_ids":["https://openalex.org/I145722265"]},{"raw_affiliation_string":"University of Thessaly, Greece","institution_ids":["https://openalex.org/I145722265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051922069","display_name":"Vasileios Mavroeidis","orcid":"https://orcid.org/0000-0002-8188-3575"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Vasileios Mavroeidis","raw_affiliation_strings":["University of Oslo,Norway","University of Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"University of Oslo,Norway","institution_ids":["https://openalex.org/I184942183"]},{"raw_affiliation_string":"University of Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031168063","display_name":"Konstantinos Fysarakis","orcid":"https://orcid.org/0000-0002-6871-8102"},"institutions":[{"id":"https://openalex.org/I2802089456","display_name":"Analytical Services","ror":"https://ror.org/04g2rbh88","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I2802089456"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Konstantinos Fysarakis","raw_affiliation_strings":["Sphynx Analytics Limited,Cyprus","Sphynx Analytics Limited, Cyprus"],"affiliations":[{"raw_affiliation_string":"Sphynx Analytics Limited,Cyprus","institution_ids":["https://openalex.org/I2802089456"]},{"raw_affiliation_string":"Sphynx Analytics Limited, Cyprus","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5076338496"],"corresponding_institution_ids":["https://openalex.org/I145722265"],"apc_list":null,"apc_paid":null,"fwci":2.4462,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.88859654,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.639305830001831},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6318447589874268},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.5738477110862732},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.5538884997367859},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.5392931699752808},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5302222371101379},{"id":"https://openalex.org/keywords/demand-response","display_name":"Demand response","score":0.4370579719543457},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4179132580757141},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.35357338190078735},{"id":"https://openalex.org/keywords/electricity","display_name":"Electricity","score":0.29637277126312256},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.19516754150390625},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.13232699036598206},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.13071471452713013},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.11043724417686462}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.639305830001831},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6318447589874268},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.5738477110862732},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.5538884997367859},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.5392931699752808},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5302222371101379},{"id":"https://openalex.org/C2779438525","wikidata":"https://www.wikidata.org/wiki/Q5255048","display_name":"Demand response","level":3,"score":0.4370579719543457},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4179132580757141},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.35357338190078735},{"id":"https://openalex.org/C206658404","wikidata":"https://www.wikidata.org/wiki/Q12725","display_name":"Electricity","level":2,"score":0.29637277126312256},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.19516754150390625},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.13232699036598206},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.13071471452713013},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.11043724417686462},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/wfcs60972.2024.10540775","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wfcs60972.2024.10540775","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 20th International Conference on Factory Communication Systems (WFCS)","raw_type":"proceedings-article"},{"id":"pmh:oai:zenodo.org:15804764","is_oa":true,"landing_page_url":"https://doi.org/10.1109/WFCS60972.2024.10540775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"WFCS, 2024 IEEE 20th International Conference on Factory Communication Systems, Touluse Fance, 17-19 April 2024","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:15804764","is_oa":true,"landing_page_url":"https://doi.org/10.1109/WFCS60972.2024.10540775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"WFCS, 2024 IEEE 20th International Conference on Factory Communication Systems, Touluse Fance, 17-19 April 2024","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6200000047683716}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2007659052","https://openalex.org/W2076243194","https://openalex.org/W2125560635","https://openalex.org/W2618548686","https://openalex.org/W2898864887","https://openalex.org/W2995353344","https://openalex.org/W3006136675","https://openalex.org/W3013385581","https://openalex.org/W3039758654","https://openalex.org/W3049341082","https://openalex.org/W3087958975","https://openalex.org/W3094117708","https://openalex.org/W3117475718","https://openalex.org/W3171715413","https://openalex.org/W3209929740","https://openalex.org/W4225349145","https://openalex.org/W4226017579","https://openalex.org/W4292158549","https://openalex.org/W4293023532","https://openalex.org/W4318185007","https://openalex.org/W4320712898","https://openalex.org/W4385713428","https://openalex.org/W4386211288","https://openalex.org/W4386214397","https://openalex.org/W4386304389","https://openalex.org/W4389574442"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2171408034","https://openalex.org/W3003320923","https://openalex.org/W2106140982","https://openalex.org/W2152313554","https://openalex.org/W2064303750","https://openalex.org/W1509300825","https://openalex.org/W3092582874","https://openalex.org/W3122004234","https://openalex.org/W3088911518"],"abstract_inverted_index":{"The":[0,187],"threat":[1],"landscape":[2],"of":[3,36,84,155,166,178,218],"industrial":[4],"infrastructures":[5,15],"has":[6],"expanded":[7],"exponentially":[8],"over":[9],"the":[10,20,33,37,52,136,153,161,183,199,214,219,224],"last":[11],"few":[12],"years.":[13],"Such":[14],"include":[16],"services":[17],"such":[18,93],"as":[19,47],"smart":[21,225],"meter":[22,226],"data":[23,49,227],"exchange":[24,228],"that":[25,59],"should":[26],"have":[27],"real-time":[28],"availability.":[29],"Smart":[30],"meters":[31],"constitute":[32],"main":[34],"component":[35],"Advanced":[38,184,194],"Metering":[39,185,195],"Infrastructure,":[40],"and":[41,101,104,122,132,144,149,205,216,230],"their":[42],"measurements":[43],"are":[44,106,203,207],"also":[45],"used":[46],"historical":[48],"for":[50,141,182,213],"forecasting":[51],"energy":[53,137],"demand":[54],"to":[55,62,77,108,118,171,209],"avoid":[56],"load":[57],"peaks":[58],"could":[60],"lead":[61],"blackouts":[63],"within":[64],"specific":[65,129],"areas.":[66],"Hence,":[67],"a":[68,116],"comprehensive":[69],"Incident":[70,125],"Response":[71,126],"plan":[72,127],"must":[73],"be":[74],"in":[75,82,135,176],"place":[76],"ensure":[78,210],"high":[79],"service":[80],"availability":[81],"case":[83],"cyber-attacks":[85,202],"or":[86],"operational":[87],"errors.":[88,110],"Currently,":[89],"utility":[90],"operators":[91],"execute":[92],"plans":[94],"mostly":[95],"manually,":[96],"requiring":[97],"extensive":[98],"time,":[99],"effort,":[100],"domain":[102],"expertise,":[103],"they":[105],"prone":[107],"human":[109],"In":[111,157],"this":[112],"paper,":[113],"we":[114,159],"present":[115],"method":[117,189],"provide":[119],"an":[120,193],"orchestrated":[121],"highly":[123,173],"automated":[124],"targeting":[128],"use":[130,154,160],"cases":[131],"attack":[133],"scenarios":[134],"sector,":[138],"including":[139],"steps":[140],"preparedness,":[142],"detection":[143],"analysis,":[145],"containment,":[146],"eradication,":[147],"recovery,":[148],"post-incident":[150],"activity":[151],"through":[152,192],"playbooks.":[156],"particular,":[158],"OASIS":[162],"Collaborative":[163],"Automated":[164],"Course":[165],"Action":[167],"Operations":[168],"(CACAO)":[169],"standard":[170],"define":[172],"automatable":[174],"workflows":[175],"support":[177],"cyber":[179],"security":[180],"operations":[181],"Infrastructure.":[186],"proposed":[188],"is":[190],"validated":[191],"Infrastructure":[196],"testbed":[197],"where":[198],"most":[200],"prominent":[201],"emulated,":[204],"playbooks":[206],"instantiated":[208],"rapid":[211],"response":[212],"containment":[215],"eradication":[217],"threat,":[220],"business":[221],"continuity":[222],"on":[223],"service,":[229],"compliance":[231],"with":[232],"incident":[233],"reporting":[234],"requirements.":[235]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}