{"id":"https://openalex.org/W2075429844","doi":"https://doi.org/10.1145/2566468.2566478","title":"A module for anomaly detection in ICS networks","display_name":"A module for anomaly detection in ICS networks","publication_year":2014,"publication_date":"2014-04-15","ids":{"openalex":"https://openalex.org/W2075429844","doi":"https://doi.org/10.1145/2566468.2566478","mag":"2075429844"},"language":"en","primary_location":{"id":"doi:10.1145/2566468.2566478","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2566468.2566478","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd international conference on High confidence networked systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086708580","display_name":"Matti Mantere","orcid":"https://orcid.org/0000-0002-3691-5398"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Matti Mantere","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Oulu, Finland","[VTT Technical research Centre of Finland, Oulu, Finland]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Oulu, Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"[VTT Technical research Centre of Finland, Oulu, Finland]","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087889480","display_name":"Mirko Sailio","orcid":"https://orcid.org/0000-0002-6897-9943"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Mirko Sailio","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Oulu, Finland","[VTT Technical research Centre of Finland, Oulu, Finland]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Oulu, Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"[VTT Technical research Centre of Finland, Oulu, Finland]","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089864628","display_name":"Sami Noponen","orcid":"https://orcid.org/0000-0002-4798-3345"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Sami Noponen","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Oulu, Finland","[VTT Technical research Centre of Finland, Oulu, Finland]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Oulu, Finland","institution_ids":["https://openalex.org/I87653560"]},{"raw_affiliation_string":"[VTT Technical research Centre of Finland, Oulu, Finland]","institution_ids":["https://openalex.org/I87653560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87653560"],"apc_list":null,"apc_paid":null,"fwci":3.0358,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.9284377,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"49","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7698959112167358},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7180147171020508},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6852472424507141},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.533933162689209},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.49211472272872925},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.475910484790802},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.40544965863227844},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4052128791809082},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38654905557632446},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.28204554319381714},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.22692999243736267}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7698959112167358},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7180147171020508},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6852472424507141},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.533933162689209},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.49211472272872925},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.475910484790802},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.40544965863227844},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4052128791809082},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38654905557632446},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.28204554319381714},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.22692999243736267}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2566468.2566478","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2566468.2566478","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd international conference on High confidence networked systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5699999928474426,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321855","display_name":"Tekes","ror":"https://ror.org/02ag8cq23"},{"id":"https://openalex.org/F4320338388","display_name":"Eurostars","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W1531884035","https://openalex.org/W1569231662","https://openalex.org/W1581408521","https://openalex.org/W1679913846","https://openalex.org/W1763270762","https://openalex.org/W1802535396","https://openalex.org/W1908122868","https://openalex.org/W1985987493","https://openalex.org/W1990754091","https://openalex.org/W2013330146","https://openalex.org/W2024094925","https://openalex.org/W2069130328","https://openalex.org/W2089438500","https://openalex.org/W2102283219","https://openalex.org/W2117002131","https://openalex.org/W2120812050","https://openalex.org/W2122217421","https://openalex.org/W2131389289","https://openalex.org/W2138650149","https://openalex.org/W2139733965","https://openalex.org/W2150847526","https://openalex.org/W2161480401","https://openalex.org/W2543532614","https://openalex.org/W4234061764","https://openalex.org/W4245176872"],"related_works":["https://openalex.org/W2105642232","https://openalex.org/W3207332793","https://openalex.org/W3197833032","https://openalex.org/W2787993192","https://openalex.org/W4386081464","https://openalex.org/W2499612753","https://openalex.org/W3113278055","https://openalex.org/W2158269427","https://openalex.org/W3161403725","https://openalex.org/W4223615774"],"abstract_inverted_index":{"Network":[0],"security":[1,98,152],"monitoring":[2],"using":[3],"machine":[4,71],"learning":[5,72],"algorithms":[6],"is":[7,52,110,116,140],"a":[8,26,62,113,120,143,147],"topic":[9],"that":[10,66],"has":[11],"been":[12],"well":[13],"researched":[14],"and":[15,34,40,112],"found":[16],"to":[17,20,24],"be":[18],"difficult":[19],"use.":[21],"We":[22,83],"propose":[23],"use":[25,55,69,78],"specific":[27],"approach":[28,51],"in":[29,56,137],"restricted":[30,57],"IP":[31,58],"network":[32,37,97,124,151],"environments":[33],"leverage":[35],"the":[36,68,95,107],"state":[38],"information":[39,41],"from":[42,126],"individual":[43],"connections":[44],"for":[45,54,106,123,150],"increased":[46],"level":[47,63],"of":[48,64,70,87,94,103],"sensitivity.":[49],"The":[50,132],"meant":[53,141],"networks":[59],"which":[60],"exhibit":[61],"determinism":[65],"enables":[67],"approach.":[73],"In":[74],"this":[75,138],"work":[76],"we":[77],"algorithm":[79],"called":[80],"Self-Organizing":[81,108],"Maps.":[82],"introduce":[84],"an":[85,127],"implementation":[86],"self-organizing":[88],"maps":[89],"engine":[90],"built":[91],"on":[92],"top":[93],"Bro":[96],"monitor.":[99],"An":[100],"implemented":[101],"selection":[102],"initial":[104],"features":[105],"Maps":[109],"provided":[111],"sample":[114],"sub-set":[115],"used":[117],"when":[118],"training":[119],"SOM":[121],"lattice":[122],"data":[125],"industrial":[128],"control":[129],"system":[130],"environment.":[131],"anomaly":[133],"detection":[134],"prototype":[135],"described":[136],"paper":[139],"as":[142],"complementary":[144],"mechanism,":[145],"not":[146],"standalone":[148],"solution":[149],"monitoring.":[153]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}