{"id":"https://openalex.org/W4313468863","doi":"https://doi.org/10.1186/s42162-022-00252-1","title":"Improving anomaly detection in SCADA network communication with attribute extension","display_name":"Improving anomaly detection in SCADA network communication with attribute extension","publication_year":2022,"publication_date":"2022-12-21","ids":{"openalex":"https://openalex.org/W4313468863","doi":"https://doi.org/10.1186/s42162-022-00252-1"},"language":"en","primary_location":{"id":"doi:10.1186/s42162-022-00252-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-022-00252-1","pdf_url":"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-022-00252-1","source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-022-00252-1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060188632","display_name":"Mahwish Anwar","orcid":null},"institutions":[{"id":"https://openalex.org/I52719799","display_name":"Blekinge Institute of Technology","ror":"https://ror.org/0093a8w51","country_code":"SE","type":"education","lineage":["https://openalex.org/I52719799"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Mahwish Anwar","raw_affiliation_strings":["Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden","institution_ids":["https://openalex.org/I52719799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101593386","display_name":"Lars Lundberg","orcid":"https://orcid.org/0000-0002-5031-8215"},"institutions":[{"id":"https://openalex.org/I52719799","display_name":"Blekinge Institute of Technology","ror":"https://ror.org/0093a8w51","country_code":"SE","type":"education","lineage":["https://openalex.org/I52719799"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Lars Lundberg","raw_affiliation_strings":["Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden","institution_ids":["https://openalex.org/I52719799"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046863989","display_name":"Anton Borg","orcid":"https://orcid.org/0000-0002-8929-7220"},"institutions":[{"id":"https://openalex.org/I52719799","display_name":"Blekinge Institute of Technology","ror":"https://ror.org/0093a8w51","country_code":"SE","type":"education","lineage":["https://openalex.org/I52719799"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Anton Borg","raw_affiliation_strings":["Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Blekinge Institute of Technology, 371 79, Karlskrona, Sweden","institution_ids":["https://openalex.org/I52719799"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5060188632"],"corresponding_institution_ids":["https://openalex.org/I52719799"],"apc_list":{"value":1340,"currency":"USD","value_usd":1340},"apc_paid":{"value":1340,"currency":"USD","value_usd":1340},"fwci":0.6796,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.70065985,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"5","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scada","display_name":"SCADA","score":0.8061268925666809},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6504672765731812},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5886545181274414},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5655288696289062},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43899422883987427},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.35616910457611084},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3347979784011841}],"concepts":[{"id":"https://openalex.org/C113863187","wikidata":"https://www.wikidata.org/wiki/Q17498","display_name":"SCADA","level":2,"score":0.8061268925666809},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6504672765731812},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5886545181274414},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5655288696289062},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43899422883987427},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35616910457611084},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3347979784011841},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s42162-022-00252-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-022-00252-1","pdf_url":"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-022-00252-1","source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:bth-24125","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:bth-24125","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:a77e26a04eda47779d6d388e32defd44","is_oa":true,"landing_page_url":"https://doaj.org/article/a77e26a04eda47779d6d388e32defd44","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Energy Informatics, Vol 5, Iss 1, Pp 1-22 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42162-022-00252-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-022-00252-1","pdf_url":"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-022-00252-1","source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6299999952316284}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323802","display_name":"Blekinge Tekniska H\u00f6gskola","ror":"https://ror.org/0093a8w51"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4313468863.pdf","grobid_xml":"https://content.openalex.org/works/W4313468863.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1492581097","https://openalex.org/W1591743417","https://openalex.org/W1970856950","https://openalex.org/W2012446724","https://openalex.org/W2013330146","https://openalex.org/W2057685268","https://openalex.org/W2101109743","https://openalex.org/W2107026277","https://openalex.org/W2122217421","https://openalex.org/W2149169025","https://openalex.org/W2394912556","https://openalex.org/W2515527499","https://openalex.org/W2678252017","https://openalex.org/W2744890864","https://openalex.org/W2788161199","https://openalex.org/W2890916451","https://openalex.org/W2904188281","https://openalex.org/W2971065528","https://openalex.org/W2972568755","https://openalex.org/W2977219614","https://openalex.org/W2999309192","https://openalex.org/W3016757214","https://openalex.org/W3017165746","https://openalex.org/W3019657079","https://openalex.org/W3024669438","https://openalex.org/W3035172199","https://openalex.org/W3089123339","https://openalex.org/W3096249931","https://openalex.org/W3186172578","https://openalex.org/W3197947197","https://openalex.org/W3205303036","https://openalex.org/W4225499819","https://openalex.org/W4234556776"],"related_works":["https://openalex.org/W2615977515","https://openalex.org/W2115760278","https://openalex.org/W2146396794","https://openalex.org/W2809162650","https://openalex.org/W2388279172","https://openalex.org/W2807864071","https://openalex.org/W2617238897","https://openalex.org/W2055218442","https://openalex.org/W4386714408","https://openalex.org/W3164929525"],"abstract_inverted_index":{"Abstract":[0],"Network":[1],"anomaly":[2,83],"detection":[3,32,39,52,84],"for":[4,86,101],"critical":[5,154],"infrastructure":[6],"supervisory":[7],"control":[8],"and":[9,79,133,199],"data":[10,94],"acquisition":[11],"(SCADA)":[12],"systems":[13],"is":[14,44,99,160],"the":[15,38,48,60,108,115,147,156,180,190,204],"first":[16],"line":[17],"of":[18,59,150,158],"defense":[19],"against":[20],"cyber-attacks.":[21],"Often":[22],"hybrid":[23],"methods,":[24,33],"such":[25],"as":[26,68],"machine":[27],"learning":[28],"with":[29,95],"signature-based":[30],"intrusion":[31],"are":[34,66],"employed":[35],"to":[36,46,71,131,140],"improve":[37,81],"results.":[40],"Here":[41],"an":[42,165],"attempt":[43],"made":[45],"enhance":[47,76],"support":[49],"vector-based":[50],"outlier":[51],"method":[53],"by":[54],"leveraging":[55],"behavioural":[56],"attribute":[57],"extension":[58],"network":[61,64,77],"nodes.":[62],"The":[63,104,142,162,185],"nodes":[65,197],"modeled":[67],"graph":[69],"vertices":[70],"construct":[72],"related":[73,151,183],"attributes":[74],"that":[75,107,189],"characterisation":[78],"potentially":[80],"unsupervised":[82,148],"ability":[85],"SCADA":[87,91,196],"network.":[88],"IEC":[89],"104":[90],"protocol":[92],"communication":[93],"good":[96],"domain":[97],"fidelity":[98],"utilised":[100],"empirical":[102],"testing.":[103],"results":[105,187],"demonstrate":[106],"proposed":[109,191],"approach":[110,117,192],"achieves":[111],"significant":[112],"improvements":[113],"over":[114],"baseline":[116],"(average":[118],"$$F_{1}$$":[119],"<mml:math":[120,171],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[121,172],"<mml:msub>":[122],"<mml:mi>F</mml:mi>":[123],"<mml:mn>1</mml:mn>":[124],"</mml:msub>":[125],"</mml:math>":[126,177],"score":[127],"increased":[128],"from":[129,138],"0.6":[130],"0.9,":[132],"Matthews":[134],"correlation":[135],"coefficient":[136],"(MCC)":[137],"0.3":[139],"0.8).":[141],"achieved":[143],"outcome":[144],"also":[145],"surpasses":[146],"scores":[149],"literature.":[152],"For":[153],"networks,":[155],"identification":[157],"attacks":[159],"indispensable.":[161],"result":[163],"shows":[164],"insignificant":[166],"missed-alert":[167],"rate":[168],"(":[169],"$$0.3\\%$$":[170],"<mml:mrow>":[173],"<mml:mn>0.3</mml:mn>":[174],"<mml:mo>%</mml:mo>":[175],"</mml:mrow>":[176],"on":[178],"average),":[179],"lowest":[181],"among":[182],"works.":[184],"gathered":[186],"show":[188],"can":[193],"expose":[194],"rouge":[195],"reasonably":[198],"assist":[200],"in":[201],"further":[202],"pruning":[203],"identified":[205],"unusual":[206],"instances.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}