{"id":"https://openalex.org/W4413176625","doi":"https://doi.org/10.1145/3708821.3710817","title":"Your Control Host Intrusion Left Some Physical Breadcrumbs: Physical Evidence-Guided Post-Mortem Triage of SCADA Attacks","display_name":"Your Control Host Intrusion Left Some Physical Breadcrumbs: Physical Evidence-Guided Post-Mortem Triage of SCADA Attacks","publication_year":2025,"publication_date":"2025-08-13","ids":{"openalex":"https://openalex.org/W4413176625","doi":"https://doi.org/10.1145/3708821.3710817"},"language":"en","primary_location":{"id":"doi:10.1145/3708821.3710817","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3708821.3710817","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034721235","display_name":"Moses Ike","orcid":"https://orcid.org/0000-0002-4403-5745"},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Moses Ike","raw_affiliation_strings":["Sandia National Laboratories, Livermore, California, USA"],"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Livermore, California, USA","institution_ids":["https://openalex.org/I192454743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050307562","display_name":"Keaton Sadoski","orcid":"https://orcid.org/0000-0002-0575-9089"},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keaton Sadoski","raw_affiliation_strings":["Sandia National Laboratories, Livermore, California, USA"],"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Livermore, California, USA","institution_ids":["https://openalex.org/I192454743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081234524","display_name":"Romuald Valme","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Romuald Valme","raw_affiliation_strings":["Sandia National Laboratories, Albuquerque, New Mexico, USA"],"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories, Albuquerque, New Mexico, USA","institution_ids":["https://openalex.org/I4210104735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010237044","display_name":"Burak Sahin","orcid":"https://orcid.org/0009-0000-8701-9211"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Burak Sahin","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092023709","display_name":"Saman Zonouz","orcid":"https://orcid.org/0009-0006-7302-0178"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saman Zonouz","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, Georgia, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, Georgia, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047140382","display_name":"Wenke Lee","orcid":"https://orcid.org/0000-0003-2761-1277"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenke Lee","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, Georgia, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, Georgia, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5034721235"],"corresponding_institution_ids":["https://openalex.org/I192454743"],"apc_list":null,"apc_paid":null,"fwci":0.7467,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.763422,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1016","last_page":"1031"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9836999773979187,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.699810266494751},{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.6616242527961731},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.48880764842033386},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4766579270362854},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45790931582450867},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3873216211795807},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.31474003195762634},{"id":"https://openalex.org/keywords/medical-emergency","display_name":"Medical emergency","score":0.28769510984420776},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.17744335532188416},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.09865444898605347},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08533409237861633},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.07943728566169739},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.07726460695266724}],"concepts":[{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.699810266494751},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.6616242527961731},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.48880764842033386},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4766579270362854},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45790931582450867},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3873216211795807},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.31474003195762634},{"id":"https://openalex.org/C545542383","wikidata":"https://www.wikidata.org/wiki/Q2751242","display_name":"Medical emergency","level":1,"score":0.28769510984420776},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.17744335532188416},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.09865444898605347},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08533409237861633},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.07943728566169739},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.07726460695266724},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3708821.3710817","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3708821.3710817","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Gender equality","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/5"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1586313368","https://openalex.org/W1613804959","https://openalex.org/W2012446724","https://openalex.org/W2068693276","https://openalex.org/W2077171549","https://openalex.org/W2111404412","https://openalex.org/W2143842190","https://openalex.org/W2167710876","https://openalex.org/W2184058014","https://openalex.org/W2293825325","https://openalex.org/W2480084605","https://openalex.org/W2514178610","https://openalex.org/W2522306212","https://openalex.org/W2533642151","https://openalex.org/W2535751405","https://openalex.org/W2585582797","https://openalex.org/W2613412685","https://openalex.org/W2751592946","https://openalex.org/W2752929869","https://openalex.org/W2765362015","https://openalex.org/W2804093830","https://openalex.org/W2806797541","https://openalex.org/W2810107741","https://openalex.org/W2890112720","https://openalex.org/W2906941112","https://openalex.org/W2930135659","https://openalex.org/W2937619061","https://openalex.org/W2947745012","https://openalex.org/W2947820052","https://openalex.org/W2949753509","https://openalex.org/W2972765956","https://openalex.org/W2997065203","https://openalex.org/W3004344782","https://openalex.org/W3013525724","https://openalex.org/W3098072737","https://openalex.org/W3186345182","https://openalex.org/W4205700270"],"related_works":["https://openalex.org/W3159690896","https://openalex.org/W4230824443","https://openalex.org/W1989286518","https://openalex.org/W2617272381","https://openalex.org/W2945572725","https://openalex.org/W2921012173","https://openalex.org/W2758517546","https://openalex.org/W3134680667","https://openalex.org/W2804396347","https://openalex.org/W2185943007"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-12-28T23:10:05.387466","created_date":"2025-10-10T00:00:00"}