{"id":"https://openalex.org/W4411346313","doi":"https://doi.org/10.1145/3679240.3734619","title":"Leveraging Data Plane Programmability Towards a Policy-driven In-Network Security Framework for Industrial Control Systems","display_name":"Leveraging Data Plane Programmability Towards a Policy-driven In-Network Security Framework for Industrial Control Systems","publication_year":2025,"publication_date":"2025-06-16","ids":{"openalex":"https://openalex.org/W4411346313","doi":"https://doi.org/10.1145/3679240.3734619"},"language":"en","primary_location":{"id":"doi:10.1145/3679240.3734619","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3679240.3734619","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3679240.3734619","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3679240.3734619","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046954108","display_name":"Reuben Samson Raj","orcid":"https://orcid.org/0009-0009-5333-4665"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reuben Samson Raj","raw_affiliation_strings":["University of Arkansas, Fayetteville, AR, USA"],"raw_orcid":"https://orcid.org/0009-0009-5333-4665","affiliations":[{"raw_affiliation_string":"University of Arkansas, Fayetteville, AR, USA","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"last","author":{"id":null,"display_name":"Dong Jin","orcid":"https://orcid.org/0000-0001-9955-1432"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dong Jin","raw_affiliation_strings":["University of Arkansas, Fayetteville, AR, USA"],"raw_orcid":"https://orcid.org/0000-0001-9955-1432","affiliations":[{"raw_affiliation_string":"University of Arkansas, Fayetteville, AR, USA","institution_ids":["https://openalex.org/I78715868"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I78715868"],"apc_list":null,"apc_paid":null,"fwci":2.0929,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.88187042,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"152","last_page":"163"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7335550785064697},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.5762290358543396},{"id":"https://openalex.org/keywords/routing-control-plane","display_name":"Routing control plane","score":0.5737122297286987},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5580837726593018},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.44942283630371094},{"id":"https://openalex.org/keywords/control-system","display_name":"Control system","score":0.43033134937286377},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3246164321899414},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29344049096107483},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.16478142142295837},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14629992842674255}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7335550785064697},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.5762290358543396},{"id":"https://openalex.org/C145595949","wikidata":"https://www.wikidata.org/wiki/Q7371619","display_name":"Routing control plane","level":2,"score":0.5737122297286987},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5580837726593018},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.44942283630371094},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.43033134937286377},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3246164321899414},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29344049096107483},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.16478142142295837},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14629992842674255},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3679240.3734619","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3679240.3734619","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3679240.3734619","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3679240.3734619","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3679240.3734619","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3679240.3734619","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5226708271","display_name":null,"funder_award_id":"DE-CR00000031","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G6890478667","display_name":"Collaborative Research: SaTC: CORE: Small: Enabling Programmable In-Network Security for an Attack-Resilient Smart Grid","funder_award_id":"2247721","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7683785429","display_name":null,"funder_award_id":"CNS-2247721","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320334194","display_name":"Office of Cybersecurity, Energy Security, and Emergency Response","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411346313.pdf","grobid_xml":"https://content.openalex.org/works/W4411346313.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1488270580","https://openalex.org/W1516506771","https://openalex.org/W1617459194","https://openalex.org/W1911778649","https://openalex.org/W1974853427","https://openalex.org/W1994926493","https://openalex.org/W2035095458","https://openalex.org/W2038865613","https://openalex.org/W2089944128","https://openalex.org/W2120400483","https://openalex.org/W2149945516","https://openalex.org/W2220250323","https://openalex.org/W2394912556","https://openalex.org/W2513301930","https://openalex.org/W2520774365","https://openalex.org/W2562380372","https://openalex.org/W2622127425","https://openalex.org/W2810011736","https://openalex.org/W2953620480","https://openalex.org/W3036994727","https://openalex.org/W3098714061","https://openalex.org/W4254605472"],"related_works":["https://openalex.org/W2073926975","https://openalex.org/W4214777079","https://openalex.org/W3093659890","https://openalex.org/W2606027679","https://openalex.org/W3036543234","https://openalex.org/W2953270859","https://openalex.org/W4211055425","https://openalex.org/W4243609393","https://openalex.org/W1972849324","https://openalex.org/W2901709787"],"abstract_inverted_index":{"Industrial":[0],"Control":[1],"Systems":[2],"(ICS)":[3],"for":[4,61],"power":[5],"utilities":[6],"often":[7,70],"rely":[8],"on":[9,133,138,169],"legacy":[10,40,158],"protocols":[11,41,65],"like":[12],"Modbus":[13,140],"and":[14,20,42,49,68,90,112,172],"DNP3":[15],"to":[16,28,31,53,117],"transport":[17],"control":[18],"events":[19],"measurement":[21],"data.These":[22],"systems,":[23],"however,":[24],"are":[25],"highly":[26],"vulnerable":[27],"cyber-attacks":[29],"due":[30],"the":[32,50,94,134],"absence":[33],"of":[34,164],"basic":[35],"security":[36,80,99],"mechanisms":[37],"in":[38,93,156],"these":[39],"their":[43],"increased":[44],"integration":[45],"with":[46,66,166],"corporate":[47],"networks":[48,160],"Internet.Traditional":[51],"approaches":[52],"securing":[54,64,157],"ICS":[55,159],"networks,":[56],"such":[57,101],"as":[58,102],"using":[59,82,143],"middle-boxes":[60],"IDS/IPS":[62],"or":[63,114],"authentication":[67],"encryption,":[69],"introduce":[71,121],"significant":[72],"overhead.In":[73],"this":[74],"paper,":[75],"we":[76,120],"propose":[77],"an":[78],"in-network":[79],"framework":[81,87],"programmable":[83,150],"P4":[84,135,146],"data":[85,95,151],"planes.Our":[86],"performs":[88],"detection":[89],"mitigation":[91],"entirely":[92],"plane,":[96],"addressing":[97],"cross-domain":[98],"concerns":[100],"traffic":[103],"flow,":[104],"packet":[105],"structure,":[106],"protocol":[107],"violations,":[108],"request":[109],"message":[110],"rates,":[111],"delayed":[113],"unsolicited":[115],"responses.Additionally,":[116],"simplify":[118],"management,":[119],"a":[122,139,162],"graph-based":[123],"automated":[124],"rule":[125],"management":[126,132],"module":[127],"that":[128,149],"streamlines":[129],"table":[130],"entry":[131],"switch.Our":[136],"evaluation":[137],"TCP":[141],"network":[142],"Intel's":[144],"Tofino":[145],"switch":[147],"demonstrates":[148],"planes":[152],"can":[153],"be":[154],"effective":[155],"against":[161],"range":[163],"attacks,":[165],"minimal":[167],"impact":[168],"forwarding":[170],"delay":[171],"throughput.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}