{"id":"https://openalex.org/W2986445843","doi":"https://doi.org/10.1145/3355300","title":"A System-level Behavioral Detection Framework for Compromised CPS Devices","display_name":"A System-level Behavioral Detection Framework for Compromised CPS Devices","publication_year":2019,"publication_date":"2019-11-16","ids":{"openalex":"https://openalex.org/W2986445843","doi":"https://doi.org/10.1145/3355300","mag":"2986445843"},"language":"en","primary_location":{"id":"doi:10.1145/3355300","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3355300","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3355300","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3355300","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085312553","display_name":"Leonardo Babun","orcid":"https://orcid.org/0000-0002-7082-8423"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leonardo Babun","raw_affiliation_strings":["Florida International University, Miami, FL"],"raw_orcid":"https://orcid.org/0000-0002-7082-8423","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022717159","display_name":"Hidayet Aksu","orcid":"https://orcid.org/0000-0003-0159-2522"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hidayet Aksu","raw_affiliation_strings":["Florida International University, Miami, FL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"A. Selcuk Uluagac","raw_affiliation_strings":["Florida International University, Miami, FL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I19700959"],"apc_list":null,"apc_paid":null,"fwci":3.1204,"has_fulltext":true,"cited_by_count":34,"citation_normalized_percentile":{"value":0.92065828,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"4","issue":"2","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/smart-grid","display_name":"Smart grid","score":0.7773424386978149},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.7470413446426392},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6580396890640259},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.5479240417480469},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5129096508026123},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.4697948694229126},{"id":"https://openalex.org/keywords/grid","display_name":"Grid","score":0.4562287926673889},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.44662198424339294},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4174484312534332},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.41562992334365845},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.24824222922325134},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.22294539213180542},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.16166982054710388}],"concepts":[{"id":"https://openalex.org/C10558101","wikidata":"https://www.wikidata.org/wiki/Q689855","display_name":"Smart grid","level":2,"score":0.7773424386978149},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.7470413446426392},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6580396890640259},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.5479240417480469},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5129096508026123},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.4697948694229126},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.4562287926673889},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.44662198424339294},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4174484312534332},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.41562992334365845},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.24824222922325134},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.22294539213180542},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.16166982054710388},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3355300","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3355300","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3355300","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3355300","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3355300","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3355300","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6100000143051147}],"awards":[{"id":"https://openalex.org/G1660299269","display_name":null,"funder_award_id":"NSF-1663051","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2563446629","display_name":"Collaborative Research: SURPASS: NSF SFS Unique Scholarship Program in Hardware and Systems Security","funder_award_id":"1663051","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3699118498","display_name":null,"funder_award_id":"OE0000779","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G8525368751","display_name":null,"funder_award_id":"DE-OE0000779","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2986445843.pdf","grobid_xml":"https://content.openalex.org/works/W2986445843.grobid-xml"},"referenced_works_count":77,"referenced_works":["https://openalex.org/W127007545","https://openalex.org/W186343359","https://openalex.org/W1229457308","https://openalex.org/W1452953028","https://openalex.org/W1529311848","https://openalex.org/W1560396200","https://openalex.org/W1576935312","https://openalex.org/W1590798250","https://openalex.org/W1594900410","https://openalex.org/W1606499049","https://openalex.org/W1964807288","https://openalex.org/W1979218049","https://openalex.org/W1979717085","https://openalex.org/W1980256734","https://openalex.org/W2002254092","https://openalex.org/W2010446909","https://openalex.org/W2016728268","https://openalex.org/W2047667198","https://openalex.org/W2057843061","https://openalex.org/W2057947340","https://openalex.org/W2075841394","https://openalex.org/W2076317514","https://openalex.org/W2096224818","https://openalex.org/W2101609731","https://openalex.org/W2101916222","https://openalex.org/W2106649514","https://openalex.org/W2110031807","https://openalex.org/W2116065935","https://openalex.org/W2137756679","https://openalex.org/W2143842190","https://openalex.org/W2153268908","https://openalex.org/W2166638493","https://openalex.org/W2167242948","https://openalex.org/W2167332015","https://openalex.org/W2168662357","https://openalex.org/W2183651468","https://openalex.org/W2295916904","https://openalex.org/W2342966902","https://openalex.org/W2343112621","https://openalex.org/W2344429718","https://openalex.org/W2371963585","https://openalex.org/W2400096882","https://openalex.org/W2428411998","https://openalex.org/W2435203810","https://openalex.org/W2460672064","https://openalex.org/W2528550849","https://openalex.org/W2529541293","https://openalex.org/W2546338792","https://openalex.org/W2549909904","https://openalex.org/W2550510940","https://openalex.org/W2560404175","https://openalex.org/W2578943040","https://openalex.org/W2604670533","https://openalex.org/W2605163979","https://openalex.org/W2610336049","https://openalex.org/W2612306117","https://openalex.org/W2613349989","https://openalex.org/W2741887078","https://openalex.org/W2756723748","https://openalex.org/W2763705728","https://openalex.org/W2773175795","https://openalex.org/W2782500360","https://openalex.org/W2789198628","https://openalex.org/W2799038830","https://openalex.org/W2882984870","https://openalex.org/W2891721044","https://openalex.org/W2906765636","https://openalex.org/W2907400963","https://openalex.org/W2955262717","https://openalex.org/W2963012457","https://openalex.org/W2963405846","https://openalex.org/W2964037239","https://openalex.org/W3103553961","https://openalex.org/W3140428646","https://openalex.org/W3143304050","https://openalex.org/W4239342999","https://openalex.org/W4251309832"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2171408034","https://openalex.org/W3003320923","https://openalex.org/W2106140982","https://openalex.org/W2152313554","https://openalex.org/W2064303750","https://openalex.org/W4285042611","https://openalex.org/W3089038912","https://openalex.org/W3123953333","https://openalex.org/W2741906949"],"abstract_inverted_index":{"Cyber-Physical":[0],"Systems":[1],"(CPS)":[2],"play":[3],"a":[4,22,96,140],"significant":[5],"role":[6],"in":[7,46,91,185],"our":[8,137,156,177],"critical":[9,24,78],"infrastructure":[10,26],"networks":[11],"from":[12],"power-distribution":[13],"to":[14,35,102,123],"utility":[15],"networks.":[16],"The":[17,108,199],"emerging":[18],"smart-grid":[19],"concept":[20],"is":[21,77,182],"compelling":[23],"CPS":[25,188],"that":[27,146,232],"relies":[28],"on":[29,128,242],"two-way":[30],"communications":[31],"between":[32,218],"smart":[33,48,62,82,105,142,189,244],"devices":[34,45,67,76,126,191],"increase":[36],"efficiency,":[37],"enhance":[38],"reliability,":[39],"and":[40,85,98,112,120,150,170,194,220],"reduce":[41],"costs.":[42],"However,":[43],"compromised":[44,66,75,104,125,164,187,210],"the":[47,81,134,174,179,183,207,223,228,233,236,243],"grid":[49,63,106,143,190,245],"poses":[50],"several":[51],"security":[52],"challenges.":[53],"Consequences":[54],"of":[55,74,136,163,176,209,235],"propagating":[56],"fake":[57],"data":[58],"or":[59],"stealing":[60],"sensitive":[61],"information":[64],"via":[65],"are":[68],"costly.":[69],"Hence,":[70],"early":[71],"behavioral":[72,130],"detection":[73,208],"for":[79,206,222],"protecting":[80],"grid\u2019s":[83],"components":[84],"data.":[86],"To":[87,173],"address":[88],"these":[89],"concerns,":[90],"this":[92],"article,":[93],"we":[94,158],"introduce":[95],"novel":[97],"configurable":[99],"system-level":[100],"framework":[101,109,138,181,238],"identify":[103],"devices.":[107,152,211],"combines":[110],"system":[111,193],"function":[113],"call":[114,196],"tracing":[115,197],"techniques":[116],"with":[117,139,167,192],"signal":[118],"processing":[119],"statistical":[121],"analysis":[122,230],"detect":[124],"based":[127],"their":[129],"characteristics.":[131],"We":[132],"measure":[133],"efficacy":[135],"realistic":[141],"substation":[144],"testbed":[145],"includes":[147],"both":[148],"resource-limited":[149],"resource-rich":[151],"In":[153],"total,":[154],"using":[155],"framework,":[157],"analyze":[159],"six":[160],"different":[161,168,224],"types":[162],"device":[165],"scenarios":[166],"resources":[169],"attack":[171,225],"payloads.":[172],"best":[175],"knowledge,":[178],"proposed":[180,237],"first":[184],"detecting":[186],"function-level":[195],"techniques.":[198],"experimental":[200],"results":[201],"reveal":[202],"an":[203],"excellent":[204],"rate":[205],"Specifically,":[212],"performance":[213,229],"metrics":[214],"include":[215],"accuracy":[216],"values":[217],"95%":[219],"99%":[221],"scenarios.":[226],"Finally,":[227],"demonstrates":[231],"use":[234],"has":[239],"minimal":[240],"overhead":[241],"devices\u2019":[246],"computing":[247],"resources.":[248]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":8}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}