{"id":"https://openalex.org/W4365514507","doi":"https://doi.org/10.3390/computers12040079","title":"Developing Resilient Cyber-Physical Systems: A Review of State-of-the-Art Malware Detection Approaches, Gaps, and Future Directions","display_name":"Developing Resilient Cyber-Physical Systems: A Review of State-of-the-Art Malware Detection Approaches, Gaps, and Future Directions","publication_year":2023,"publication_date":"2023-04-14","ids":{"openalex":"https://openalex.org/W4365514507","doi":"https://doi.org/10.3390/computers12040079"},"language":"en","primary_location":{"id":"doi:10.3390/computers12040079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers12040079","pdf_url":"https://www.mdpi.com/2073-431X/12/4/79/pdf?version=1681453547","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-431X/12/4/79/pdf?version=1681453547","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031924114","display_name":"Muhammad Imran Malik","orcid":"https://orcid.org/0000-0003-3829-9282"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"M. Imran Malik","raw_affiliation_strings":["School of Science, Edith Cowan University, Perth, WA 6207, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3829-9282","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055670196","display_name":"Ahmed Ibrahim","orcid":"https://orcid.org/0000-0002-4760-3533"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ahmed Ibrahim","raw_affiliation_strings":["School of Science, Edith Cowan University, Perth, WA 6207, Australia","Security Research Institute, Edith Cowan University, Perth, WA 6207, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4760-3533","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]},{"raw_affiliation_string":"Security Research Institute, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044289195","display_name":"Peter Hannay","orcid":"https://orcid.org/0000-0002-6570-0441"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Peter Hannay","raw_affiliation_strings":["NCC Group, Perth, WA 6207, Australia","School of Science, Edith Cowan University, Perth, WA 6207, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6570-0441","affiliations":[{"raw_affiliation_string":"NCC Group, Perth, WA 6207, Australia","institution_ids":[]},{"raw_affiliation_string":"School of Science, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022617601","display_name":"Leslie F. Sikos","orcid":"https://orcid.org/0000-0003-3368-2215"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Leslie F. Sikos","raw_affiliation_strings":["School of Science, Edith Cowan University, Perth, WA 6207, Australia","Security Research Institute, Edith Cowan University, Perth, WA 6207, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3368-2215","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]},{"raw_affiliation_string":"Security Research Institute, Edith Cowan University, Perth, WA 6207, Australia","institution_ids":["https://openalex.org/I12079687"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5031924114"],"corresponding_institution_ids":["https://openalex.org/I12079687"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":6.6588,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.97744314,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"12","issue":"4","first_page":"79","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9115748405456543},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7656600475311279},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7016056776046753},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.5661087036132812},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.518135666847229},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5013718605041504},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.44024693965911865},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21701359748840332}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9115748405456543},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7656600475311279},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7016056776046753},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.5661087036132812},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.518135666847229},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5013718605041504},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.44024693965911865},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21701359748840332},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/computers12040079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers12040079","pdf_url":"https://www.mdpi.com/2073-431X/12/4/79/pdf?version=1681453547","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:ro.ecu.edu.au:ecuworks2022-2026-3383","is_oa":true,"landing_page_url":"https://ro.ecu.edu.au/ecuworks2022-2026/2383","pdf_url":null,"source":{"id":"https://openalex.org/S2765015692","display_name":"Australasian Journal of Paramedicine","issn_l":"2202-7270","issn":["2202-7270"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research outputs 2022 to 2026","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:ba9aeeceba34475aaca5119e9c622e60","is_oa":true,"landing_page_url":"https://doaj.org/article/ba9aeeceba34475aaca5119e9c622e60","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 12, Iss 4, p 79 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/computers12040079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers12040079","pdf_url":"https://www.mdpi.com/2073-431X/12/4/79/pdf?version=1681453547","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6700000166893005,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4365514507.pdf"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W271658899","https://openalex.org/W642715168","https://openalex.org/W1827822366","https://openalex.org/W1971139551","https://openalex.org/W1973403081","https://openalex.org/W1981221397","https://openalex.org/W1996975221","https://openalex.org/W2000135657","https://openalex.org/W2003890325","https://openalex.org/W2021436318","https://openalex.org/W2032982318","https://openalex.org/W2056127986","https://openalex.org/W2057787526","https://openalex.org/W2076408892","https://openalex.org/W2215444025","https://openalex.org/W2240086230","https://openalex.org/W2247776437","https://openalex.org/W2444115772","https://openalex.org/W2553683350","https://openalex.org/W2579603034","https://openalex.org/W2591830932","https://openalex.org/W2593874664","https://openalex.org/W2597347390","https://openalex.org/W2732916693","https://openalex.org/W2738900493","https://openalex.org/W2763836003","https://openalex.org/W2774481073","https://openalex.org/W2775173651","https://openalex.org/W2784097977","https://openalex.org/W2794504349","https://openalex.org/W2796394805","https://openalex.org/W2895053826","https://openalex.org/W2939335638","https://openalex.org/W2998820416","https://openalex.org/W3004344782","https://openalex.org/W3041006851","https://openalex.org/W3111332710","https://openalex.org/W3114189379","https://openalex.org/W3134875698","https://openalex.org/W3143466921","https://openalex.org/W3156356812","https://openalex.org/W3166494441","https://openalex.org/W3196325333","https://openalex.org/W4205875715","https://openalex.org/W4233361433","https://openalex.org/W4246565613","https://openalex.org/W4297539704","https://openalex.org/W4297825776","https://openalex.org/W4312707592","https://openalex.org/W6621116634","https://openalex.org/W6638288848","https://openalex.org/W6650377418","https://openalex.org/W6664867985","https://openalex.org/W6689842967","https://openalex.org/W6696048603","https://openalex.org/W6800132054"],"related_works":["https://openalex.org/W1827256152","https://openalex.org/W2605860169","https://openalex.org/W4312994992","https://openalex.org/W2129035245","https://openalex.org/W1162440291","https://openalex.org/W2966196981","https://openalex.org/W2896656922","https://openalex.org/W1537003160","https://openalex.org/W2904002057","https://openalex.org/W4365514507"],"abstract_inverted_index":{"Cyber-physical":[0],"systems":[1,21],"(CPSes)":[2],"are":[3,22],"rapidly":[4],"evolving":[5],"in":[6,44,57,81,180],"critical":[7,121],"infrastructure":[8],"(CI)":[9],"domains":[10],"such":[11,192],"as":[12],"smart":[13],"grid,":[14],"healthcare,":[15],"the":[16,53,91,109,118,132,160,189],"military,":[17],"and":[18,37,61,76,79],"telecommunication.":[19],"These":[20],"continually":[23],"threatened":[24],"by":[25,30,183],"malicious":[26,157],"software":[27],"(malware)":[28],"attacks":[29],"adversaries":[31],"due":[32],"to":[33,107,151,155,169],"their":[34,77,152],"improvised":[35],"tactics":[36],"attack":[38],"methods.":[39],"A":[40],"minor":[41],"configuration":[42],"change":[43],"a":[45,66,95],"CPS":[46,96],"through":[47,163],"malware":[48,70,134],"has":[49,55],"devastating":[50],"effects,":[51],"which":[52],"world":[54],"seen":[56],"Stuxnet,":[58],"BlackEnergy,":[59],"Industroyer,":[60],"Triton.":[62],"This":[63],"paper":[64],"is":[65,97],"comprehensive":[67],"review":[68,142],"of":[69,111,120,191],"analysis":[71],"practices":[72],"currently":[73],"being":[74],"used":[75],"limitations":[78],"efficacy":[80],"securing":[82],"CPSes.":[83,115,138],"Using":[84],"well-known":[85],"real-world":[86],"incidents,":[87],"we":[88,101,123],"have":[89,102,147,166],"covered":[90],"significant":[92],"impacts":[93],"when":[94],"compromised.":[98],"In":[99],"particular,":[100],"prepared":[103],"exhaustive":[104],"hypothetical":[105],"scenarios":[106],"discuss":[108],"implications":[110],"false":[112,185],"positives":[113],"on":[114],"To":[116],"improve":[117],"security":[119,190],"systems,":[122],"believe":[124],"that":[125,144,177],"nature-inspired":[126,175],"metaheuristic":[127],"algorithms":[128,146,176],"can":[129],"effectively":[130],"counter":[131,156],"overwhelming":[133],"threats":[135],"geared":[136],"toward":[137],"However,":[139],"our":[140],"detailed":[141],"shows":[143],"these":[145],"not":[148],"been":[149],"adapted":[150],"full":[153],"potential":[154],"software.":[158],"Finally,":[159],"gaps":[161],"identified":[162],"this":[164],"research":[165,172],"led":[167],"us":[168],"propose":[170],"future":[171],"directions":[173],"using":[174],"would":[178],"help":[179],"bringing":[181],"optimization":[182],"reducing":[184],"positives,":[186],"thereby":[187],"increasing":[188],"systems.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2023-04-15T00:00:00"}
