{"id":"https://openalex.org/W2744890864","doi":"https://doi.org/10.1145/3098954.3103166","title":"Anomaly Detection for Simulated IEC-60870-5-104 Trafiic","display_name":"Anomaly Detection for Simulated IEC-60870-5-104 Trafiic","publication_year":2017,"publication_date":"2017-08-10","ids":{"openalex":"https://openalex.org/W2744890864","doi":"https://doi.org/10.1145/3098954.3103166","mag":"2744890864"},"language":"en","primary_location":{"id":"doi:10.1145/3098954.3103166","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3103166","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022742452","display_name":"Ersi Hodo","orcid":null},"institutions":[{"id":"https://openalex.org/I25485817","display_name":"University of Applied Sciences St P\u00f6lten","ror":"https://ror.org/039a2re55","country_code":"AT","type":"education","lineage":["https://openalex.org/I25485817"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Ersi Hodo","raw_affiliation_strings":["St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria","institution_ids":["https://openalex.org/I25485817"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036479866","display_name":"Stepan Grebeniuk","orcid":null},"institutions":[{"id":"https://openalex.org/I25485817","display_name":"University of Applied Sciences St P\u00f6lten","ror":"https://ror.org/039a2re55","country_code":"AT","type":"education","lineage":["https://openalex.org/I25485817"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Stepan Grebeniuk","raw_affiliation_strings":["St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria","institution_ids":["https://openalex.org/I25485817"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062868729","display_name":"Henri Ruotsalainen","orcid":"https://orcid.org/0000-0003-2282-5575"},"institutions":[{"id":"https://openalex.org/I25485817","display_name":"University of Applied Sciences St P\u00f6lten","ror":"https://ror.org/039a2re55","country_code":"AT","type":"education","lineage":["https://openalex.org/I25485817"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Henri Ruotsalainen","raw_affiliation_strings":["St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria","institution_ids":["https://openalex.org/I25485817"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048784616","display_name":"Paul Tavolato","orcid":null},"institutions":[{"id":"https://openalex.org/I25485817","display_name":"University of Applied Sciences St P\u00f6lten","ror":"https://ror.org/039a2re55","country_code":"AT","type":"education","lineage":["https://openalex.org/I25485817"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Paul Tavolato","raw_affiliation_strings":["St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. P\u00f6lten University of Applied Sciences, St. P\u00f6lten, Austria","institution_ids":["https://openalex.org/I25485817"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0985,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.8111036,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7703551054000854},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7299551963806152},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7089659571647644},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5219511389732361},{"id":"https://openalex.org/keywords/asynchronous-communication","display_name":"Asynchronous communication","score":0.49930334091186523},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.4788677394390106},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.47144970297813416},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4702008366584778},{"id":"https://openalex.org/keywords/iec-61850","display_name":"IEC 61850","score":0.46277865767478943},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.46166354417800903},{"id":"https://openalex.org/keywords/novelty-detection","display_name":"Novelty detection","score":0.45148593187332153},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.4363318681716919},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4134588837623596},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3910570740699768},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3628948926925659},{"id":"https://openalex.org/keywords/novelty","display_name":"Novelty","score":0.36209315061569214},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32722389698028564},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2829645276069641},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.2231810986995697},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.17723965644836426}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7703551054000854},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7299551963806152},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7089659571647644},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5219511389732361},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.49930334091186523},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.4788677394390106},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.47144970297813416},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4702008366584778},{"id":"https://openalex.org/C2778907243","wikidata":"https://www.wikidata.org/wiki/Q168160","display_name":"IEC 61850","level":3,"score":0.46277865767478943},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.46166354417800903},{"id":"https://openalex.org/C2778924833","wikidata":"https://www.wikidata.org/wiki/Q7064603","display_name":"Novelty detection","level":3,"score":0.45148593187332153},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.4363318681716919},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4134588837623596},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3910570740699768},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3628948926925659},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.36209315061569214},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32722389698028564},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2829645276069641},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2231810986995697},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.17723965644836426},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C27206212","wikidata":"https://www.wikidata.org/wiki/Q34178","display_name":"Theology","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3098954.3103166","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3103166","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7","score":0.5699999928474426}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W38537450","https://openalex.org/W1601572416","https://openalex.org/W1863648891","https://openalex.org/W1992820542","https://openalex.org/W2100533733","https://openalex.org/W2104013326","https://openalex.org/W2324074221","https://openalex.org/W2394912556","https://openalex.org/W2512189246"],"related_works":["https://openalex.org/W2337148208","https://openalex.org/W3004832009","https://openalex.org/W3036013726","https://openalex.org/W1971929717","https://openalex.org/W1724519426","https://openalex.org/W2351051591","https://openalex.org/W2369534771","https://openalex.org/W2357468538","https://openalex.org/W1548126107","https://openalex.org/W2209997499"],"abstract_inverted_index":{"Substation":[0],"security":[1],"plays":[2],"an":[3,20,149,160],"important":[4],"role":[5],"in":[6,22,141],"the":[7,14,23,42,68,79,82,93,103,106,110,122,131,139,165,172,181,190,201,210],"delivery":[8],"system":[9,59,163],"of":[10,25,32,44,64,74,84,95,98],"electrical":[11],"energy.":[12],"During":[13],"past":[15],"years,":[16],"there":[17,34],"has":[18,35],"been":[19,37],"increase":[21],"number":[24],"attacks":[26],"on":[27,67,87,113,155],"automation":[28,62],"systems.":[29],"In":[30,47],"spite":[31],"that,":[33],"not":[36],"enough":[38],"focus":[39],"dedicated":[40],"to":[41,78,143,208],"protection":[43],"such":[45],"networks.":[46],"this":[48],"paper,":[49],"we":[50,101,120,129,158],"introduce":[51],"a":[52],"novel":[53],"machine":[54,178],"learning":[55,179],"based":[56,66,112,154],"intrusion":[57],"detection":[58,151,162,174],"targeted":[60],"at":[61],"networks":[63],"substations":[65,118],"IEC":[69,167,182],"60780-5-104":[70],"protocol.":[71,169],"The":[72,187],"novelty":[73],"our":[75],"approach":[76],"opposed":[77],"state-of-the-art":[80],"is":[81],"monitoring":[83],"several":[85],"features":[86,145,157],"multiple":[88,96],"protocol":[89,184],"layers,":[90],"which":[91],"enables":[92],"identification":[94],"types":[97],"attacks.":[99],"Firstly,":[100],"simulate":[102,121],"communication":[104],"between":[105],"substation":[107],"slave":[108],"and":[109,119,135],"server":[111],"data":[114,185],"gained":[115],"from":[116,180],"real":[117],"systems":[123],"behaviour":[124],"under":[125,138],"attack,":[126,140],"too.":[127],"Secondly,":[128],"observe":[130],"system's":[132],"normal":[133],"behavior":[134,137],"its":[136],"order":[142],"extract":[144],"needed":[146],"for":[147,164],"building":[148],"anomaly":[150,161,173],"system.":[152],"Lastly,":[153],"these":[156],"suggest":[159],"asynchronous":[166],"60870-5-104":[168,183],"We":[170],"designed":[171],"model":[175],"by":[176,195],"using":[177],"acquired.":[186],"classifier":[188,204],"with":[189],"highest":[191],"performance":[192],"was":[193],"chosen":[194],"comparing":[196],"7":[197],"different":[198],"classification":[199],"algorithms:":[200],"Rule":[202],"Learner":[203],"algorithm":[205],"turned":[206],"out":[207],"be":[209],"best.":[211]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}