{"id":"https://openalex.org/W3191984229","doi":"https://doi.org/10.1186/s42400-021-00095-5","title":"Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation","display_name":"Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation","publication_year":2021,"publication_date":"2021-08-01","ids":{"openalex":"https://openalex.org/W3191984229","doi":"https://doi.org/10.1186/s42400-021-00095-5","mag":"3191984229"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-021-00095-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00095-5","pdf_url":"https://cybersecurity.springeropen.com/track/pdf/10.1186/s42400-021-00095-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/track/pdf/10.1186/s42400-021-00095-5","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019304605","display_name":"M. R. Gauthama Raman","orcid":null},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Gauthama Raman M. R.","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design (SUTD), 8 Somapah Rd, Singapore, 487372, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-5285-9330","affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design (SUTD), 8 Somapah Rd, Singapore, 487372, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077409980","display_name":"Chuadhry Mujeeb Ahmed","orcid":"https://orcid.org/0000-0003-3644-0465"},"institutions":[{"id":"https://openalex.org/I181647926","display_name":"University of Strathclyde","ror":"https://ror.org/00n3w3b69","country_code":"GB","type":"education","lineage":["https://openalex.org/I181647926"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Chuadhry Mujeeb Ahmed","raw_affiliation_strings":["University of Strathclyde, 16 Richmond St, Glasgow, G1 1XQ, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Strathclyde, 16 Richmond St, Glasgow, G1 1XQ, United Kingdom","institution_ids":["https://openalex.org/I181647926"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041431658","display_name":"Aditya P. Mathur","orcid":"https://orcid.org/0000-0002-9356-6286"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Aditya Mathur","raw_affiliation_strings":["iTrust, Singapore University of Technology and Design (SUTD), 8 Somapah Rd, Singapore, 487372, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design (SUTD), 8 Somapah Rd, Singapore, 487372, Singapore","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5019304605"],"corresponding_institution_ids":["https://openalex.org/I152815399"],"apc_list":null,"apc_paid":null,"fwci":5.5966,"has_fulltext":true,"cited_by_count":63,"citation_normalized_percentile":{"value":0.96553918,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"4","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8039517402648926},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.8004645109176636},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.666895866394043},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6402322053909302},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6159152388572693},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.6116248369216919},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4821152687072754},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.47426116466522217},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.44168946146965027},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.42481741309165955},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.416411429643631},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3917842507362366},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3262619972229004},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.30150744318962097},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.28406158089637756},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09989291429519653}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8039517402648926},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.8004645109176636},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.666895866394043},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6402322053909302},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6159152388572693},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.6116248369216919},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4821152687072754},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.47426116466522217},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.44168946146965027},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.42481741309165955},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.416411429643631},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3917842507362366},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3262619972229004},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.30150744318962097},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28406158089637756},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09989291429519653},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s42400-021-00095-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00095-5","pdf_url":"https://cybersecurity.springeropen.com/track/pdf/10.1186/s42400-021-00095-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:strathprints.strath.ac.uk:77651","is_oa":true,"landing_page_url":"https://strathprints.strath.ac.uk/view/author/1321193.html>","pdf_url":"https://strathprints.strath.ac.uk/77651/1/Raman_etal_CS_2021_Machine_learning_for_intrusion_detection_in_industrial_control_systems.pdf","source":{"id":"https://openalex.org/S4306402226","display_name":"Strathprints: The University of Strathclyde institutional repository (University of Strathclyde)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I181647926","host_organization_name":"University of Strathclyde","host_organization_lineage":["https://openalex.org/I181647926"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:doaj.org/article:2aa6a7c961414a8688a5a9a4ff56d5ab","is_oa":true,"landing_page_url":"https://doaj.org/article/2aa6a7c961414a8688a5a9a4ff56d5ab","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 4, Iss 1, Pp 1-12 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-021-00095-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00095-5","pdf_url":"https://cybersecurity.springeropen.com/track/pdf/10.1186/s42400-021-00095-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6899999976158142,"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11"}],"awards":[{"id":"https://openalex.org/G8101731145","display_name":null,"funder_award_id":"NRF2018NCR-NSOE005-0001","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3191984229.pdf","grobid_xml":"https://content.openalex.org/works/W3191984229.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W1617459194","https://openalex.org/W1982359930","https://openalex.org/W1985567175","https://openalex.org/W2009429512","https://openalex.org/W2028607007","https://openalex.org/W2039427951","https://openalex.org/W2161630727","https://openalex.org/W2185477362","https://openalex.org/W2314046074","https://openalex.org/W2407991977","https://openalex.org/W2512094555","https://openalex.org/W2562876364","https://openalex.org/W2583164363","https://openalex.org/W2588209769","https://openalex.org/W2603866843","https://openalex.org/W2608113618","https://openalex.org/W2608911009","https://openalex.org/W2727422487","https://openalex.org/W2753352458","https://openalex.org/W2755148105","https://openalex.org/W2790622811","https://openalex.org/W2806797541","https://openalex.org/W2810443361","https://openalex.org/W2886897880","https://openalex.org/W2896370767","https://openalex.org/W2896487165","https://openalex.org/W2896680395","https://openalex.org/W2897104255","https://openalex.org/W2908471618","https://openalex.org/W2914192381","https://openalex.org/W2917281601","https://openalex.org/W2946344298","https://openalex.org/W2970143329","https://openalex.org/W2973082090","https://openalex.org/W2973883034","https://openalex.org/W2977611582","https://openalex.org/W2985870128","https://openalex.org/W2986549959","https://openalex.org/W2988863974","https://openalex.org/W2990623250","https://openalex.org/W3010176271","https://openalex.org/W3044438275","https://openalex.org/W3081170483","https://openalex.org/W3087381347","https://openalex.org/W3090223178","https://openalex.org/W3092239986","https://openalex.org/W3096918578","https://openalex.org/W3119781401","https://openalex.org/W3127696688","https://openalex.org/W3129524550","https://openalex.org/W3157966799","https://openalex.org/W3164513951","https://openalex.org/W4285719527","https://openalex.org/W6607281299"],"related_works":["https://openalex.org/W96612179","https://openalex.org/W2770234245","https://openalex.org/W2987774938","https://openalex.org/W2566006169","https://openalex.org/W4256492088","https://openalex.org/W632915154","https://openalex.org/W3084463301","https://openalex.org/W2133389611","https://openalex.org/W3161403725","https://openalex.org/W4223615774"],"abstract_inverted_index":{"Abstract":[0],"Gradual":[1],"increase":[2],"in":[3,65,108,139,146],"the":[4,30,58,85,99,109],"number":[5],"of":[6,29,39,70,80,87,113,136],"successful":[7],"attacks":[8],"against":[9],"Industrial":[10],"Control":[11],"Systems":[12],"(ICS)":[13],"has":[14],"led":[15],"to":[16,20,74,84,142],"an":[17,66,147],"urgent":[18],"need":[19],"create":[21],"defense":[22],"mechanisms":[23],"for":[24,119],"accurate":[25],"and":[26,61,77,96,105,111,127],"timely":[27],"detection":[28],"resulting":[31],"process":[32,59],"anomalies.":[33],"Towards":[34],"this":[35,123],"end,":[36],"a":[37,134],"class":[38],"anomaly":[40,81],"detectors,":[41],"created":[42],"using":[43,116],"data-centric":[44],"approaches,":[45],"are":[46,91],"gaining":[47],"attention.":[48],"Using":[49],"machine":[50,117],"learning":[51,118],"algorithms":[52],"such":[53,129],"approaches":[54,72,89],"can":[55],"automatically":[56],"learn":[57],"dynamics":[60],"control":[62],"strategies":[63],"deployed":[64],"ICS.":[67],"The":[68],"use":[69,86],"these":[71,144],"leads":[73],"relatively":[75],"easier":[76],"faster":[78],"creation":[79,110],"detectors":[82,114],"compared":[83],"design-centric":[88],"that":[90],"based":[92],"on":[93],"plant":[94],"physics":[95],"design.":[97],"Despite":[98],"advantages,":[100],"there":[101],"exist":[102],"significant":[103],"challenges":[104,145],"implementation":[106],"issues":[107],"deployment":[112],"generated":[115],"city-scale":[120],"plants.":[121],"In":[122],"work,":[124],"we":[125],"enumerate":[126],"discuss":[128],"challenges.":[130],"Also":[131],"presented":[132],"is":[133],"series":[135],"lessons":[137],"learned":[138],"our":[140],"attempt":[141],"meet":[143],"operational":[148],"plant.":[149]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":19},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":4}],"updated_date":"2026-05-25T08:39:21.599409","created_date":"2025-10-10T00:00:00"}