{"id":"https://openalex.org/W4407783557","doi":"https://doi.org/10.1109/comsnets63942.2025.10885548","title":"Identifying CIP-centric Attacks in CPS","display_name":"Identifying CIP-centric Attacks in CPS","publication_year":2025,"publication_date":"2025-01-06","ids":{"openalex":"https://openalex.org/W4407783557","doi":"https://doi.org/10.1109/comsnets63942.2025.10885548"},"language":"en","primary_location":{"id":"doi:10.1109/comsnets63942.2025.10885548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comsnets63942.2025.10885548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 17th International Conference on COMmunication Systems and NETworks (COMSNETS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035157214","display_name":"Praneeta K. Maganti","orcid":"https://orcid.org/0000-0002-0926-0840"},"institutions":[{"id":"https://openalex.org/I4210101034","display_name":"Birla Institute of Technology and Science - Hyderabad Campus","ror":"https://ror.org/014ctt859","country_code":"IN","type":"education","lineage":["https://openalex.org/I4210101034","https://openalex.org/I74796645"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Praneeta Maganti","raw_affiliation_strings":["BITS Pilani, Hyderabad Campus,Dept. of CSIS,Hyderabad,India"],"affiliations":[{"raw_affiliation_string":"BITS Pilani, Hyderabad Campus,Dept. of CSIS,Hyderabad,India","institution_ids":["https://openalex.org/I4210101034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017589430","display_name":"Rajib Ranjan Maiti","orcid":"https://orcid.org/0000-0002-5510-8217"},"institutions":[{"id":"https://openalex.org/I4210101034","display_name":"Birla Institute of Technology and Science - Hyderabad Campus","ror":"https://ror.org/014ctt859","country_code":"IN","type":"education","lineage":["https://openalex.org/I4210101034","https://openalex.org/I74796645"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rajib Ranjan Maiti","raw_affiliation_strings":["BITS Pilani, Hyderabad Campus,Dept. of CSIS,Hyderabad,India"],"affiliations":[{"raw_affiliation_string":"BITS Pilani, Hyderabad Campus,Dept. of CSIS,Hyderabad,India","institution_ids":["https://openalex.org/I4210101034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089083990","display_name":"Sridhar Adepu","orcid":"https://orcid.org/0000-0002-0045-2811"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sridhar Adepu","raw_affiliation_strings":["University of Bristol,School of Computer Science,Bristol,United Kingdom"],"affiliations":[{"raw_affiliation_string":"University of Bristol,School of Computer Science,Bristol,United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5035157214"],"corresponding_institution_ids":["https://openalex.org/I4210101034"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03182853,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"867","last_page":"870"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9620000123977661,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.656776487827301},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.46108976006507874}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.656776487827301},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46108976006507874}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/comsnets63942.2025.10885548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comsnets63942.2025.10885548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 17th International Conference on COMmunication Systems and NETworks (COMSNETS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2407991977","https://openalex.org/W2483249058","https://openalex.org/W2542991636","https://openalex.org/W3009315908","https://openalex.org/W3119687955","https://openalex.org/W3202224668"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"In":[0,154],"this":[1,213],"paper,":[2],"we":[3,158],"present":[4],"our":[5,155],"efforts":[6],"to":[7,118],"address":[8],"the":[9,22,63,145,150,162,168,184,188,209],"problem":[10],"of":[11,32,40,62,74,94,122,129,170,190,201],"efficiently":[12,134],"addressing":[13],"cyber":[14,50,88],"attacks":[15,51,131,143],"on":[16,179],"an":[17,46,104],"operational":[18,79],"CPS":[19,43,80,100],"by":[20,107,136],"quarantining":[21],"network":[23,28],"traffic.":[24],"We":[25,193],"have":[26,159,194,215],"considered":[27],"traffic":[29],"containing":[30],"packets":[31,165],"industrial":[33,105],"protocols,":[34],"like":[35],"ENIP/CIP,":[36],"as":[37,82],"a":[38,41,83,87,91,99,108,120,126,137,171,199],"representative":[39],"real-world":[42],"assuming":[44],"that":[45,115,125,166,208],"attacker":[47,110],"can":[48,111,116,132],"launch":[49],"via":[52,103],"these":[53,191,196],"protocols.":[54],"Our":[55],"approach":[56],"involves":[57],"deep":[58],"analysis":[59],"and":[60,66,72,177,181,206,219],"inspection":[61],"protocol":[64,106],"standard":[65],"its":[67,70],"implementation,":[68],"including":[69],"header":[71],"payload,":[73],"ENIP/CIP":[75,164],"in":[76,98,187,203,212],"SWaT":[77,180],"(an":[78],"testbed)":[81],"case":[84,156],"study.":[85],"Intuitively,":[86],"attack":[89],"targeting":[90],"specific":[92],"set":[93,121,128,200],"sensors":[95],"or":[96],"actuators":[97],"when":[101],"launched":[102],"remote":[109],"leave":[112],"certain":[113],"traits":[114],"lead":[117],"construct":[119],"signatures":[123,186,197],"so":[124],"similar":[127],"future":[130],"be":[133],"addressed":[135],"security":[138],"operation":[139],"center,":[140],"e.g.,":[141],"detecting":[142],"at":[144],"routers":[146],"much":[147],"before":[148],"reaching":[149],"actual":[151],"target":[152],"components.":[153],"study,":[157],"first":[160],"discovered":[161],"exact":[163],"carry":[167],"payloads":[169],"complex":[172],"attack,":[173],"called":[174],"\"disrupt":[175],"sensor":[176],"actuators\",":[178],"then":[182],"identified":[183],"precise":[185],"payload":[189],"packets.":[192],"transformed":[195],"into":[198],"rules":[202],"Suricata":[204],"NIDS":[205,214],"show":[207],"alert":[210],"logs":[211],"zero":[216],"false":[217,220],"positives":[218],"negatives.":[221]},"counts_by_year":[],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}
