{"id":"https://openalex.org/W2013330146","doi":"https://doi.org/10.3390/fi5040460","title":"Network Traffic Features for Anomaly Detection in Specific Industrial Control System Network","display_name":"Network Traffic Features for Anomaly Detection in Specific Industrial Control System Network","publication_year":2013,"publication_date":"2013-09-25","ids":{"openalex":"https://openalex.org/W2013330146","doi":"https://doi.org/10.3390/fi5040460","mag":"2013330146"},"language":"en","primary_location":{"id":"doi:10.3390/fi5040460","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi5040460","pdf_url":"https://www.mdpi.com/1999-5903/5/4/460/pdf?version=1380126444","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/5/4/460/pdf?version=1380126444","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086708580","display_name":"Matti Mantere","orcid":"https://orcid.org/0000-0002-3691-5398"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":true,"raw_author_name":"Matti Mantere","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087889480","display_name":"Mirko Sailio","orcid":"https://orcid.org/0000-0002-6897-9943"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Mirko Sailio","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089864628","display_name":"Sami Noponen","orcid":"https://orcid.org/0000-0002-4798-3345"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Sami Noponen","raw_affiliation_strings":["VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VTT Technical Research Centre of Finland, Kaitovayla 1, Oulu 90571, Finland","institution_ids":["https://openalex.org/I87653560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5086708580"],"corresponding_institution_ids":["https://openalex.org/I87653560"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":3.017,"has_fulltext":false,"cited_by_count":63,"citation_normalized_percentile":{"value":0.91767058,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"5","issue":"4","first_page":"460","last_page":"473"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8334260582923889},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7775624990463257},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.7054843306541443},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.5572651624679565},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.533665657043457},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.5122872591018677},{"id":"https://openalex.org/keywords/control-system","display_name":"Control system","score":0.4300650954246521},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.36072567105293274},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3465862274169922},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3464028835296631},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3396815061569214},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33951276540756226},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12971222400665283}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8334260582923889},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7775624990463257},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.7054843306541443},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.5572651624679565},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.533665657043457},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.5122872591018677},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.4300650954246521},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36072567105293274},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3465862274169922},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3464028835296631},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3396815061569214},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33951276540756226},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12971222400665283},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/fi5040460","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi5040460","pdf_url":"https://www.mdpi.com/1999-5903/5/4/460/pdf?version=1380126444","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:gam:jftint:v:5:y:2013:i:4:p:460-473:d:29083","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/5/4/460/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:d2a517227ee04d2ab4ef50b35085ea47","is_oa":true,"landing_page_url":"https://doaj.org/article/d2a517227ee04d2ab4ef50b35085ea47","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 5, Iss 4, Pp 460-473 (2013)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1999-5903/5/4/460/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/fi5040460","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet; Volume 5; Issue 4; Pages: 460-473","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/fi5040460","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi5040460","pdf_url":"https://www.mdpi.com/1999-5903/5/4/460/pdf?version=1380126444","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5799999833106995,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W38537450","https://openalex.org/W1516506771","https://openalex.org/W1908122868","https://openalex.org/W1975757390","https://openalex.org/W1985987493","https://openalex.org/W1990754091","https://openalex.org/W2063189201","https://openalex.org/W2070484018","https://openalex.org/W2096337189","https://openalex.org/W2117002131","https://openalex.org/W2120812050","https://openalex.org/W2122217421","https://openalex.org/W2142889610","https://openalex.org/W2147178528","https://openalex.org/W2150847526","https://openalex.org/W2154276653","https://openalex.org/W2543532614","https://openalex.org/W4245176872","https://openalex.org/W6674215027"],"related_works":["https://openalex.org/W4389670110","https://openalex.org/W2187546663","https://openalex.org/W2429057255","https://openalex.org/W148745890","https://openalex.org/W2611942503","https://openalex.org/W2899790217","https://openalex.org/W1576092969","https://openalex.org/W4315621326","https://openalex.org/W3161403725","https://openalex.org/W4223615774"],"abstract_inverted_index":{"The":[0,128,144],"deterministic":[1],"and":[2,137,157,162,170],"restricted":[3],"nature":[4],"of":[5,29,44,60,86,104],"industrial":[6,62,92,121,153],"control":[7,63,93,122,155,160,168],"system":[8,64,94,116,123],"networks":[9,21],"sets":[10],"them":[11],"apart":[12],"from":[13,140,149],"more":[14,40],"open":[15,41],"networks,":[16],"such":[17,45],"as":[18],"local":[19],"area":[20],"in":[22,39,109,117,182],"office":[23,172],"environments.":[24,42],"This":[25],"improves":[26],"the":[27,57,61,84,118,163,167,171,176,179,183],"usability":[28],"network":[30,65,124,129,141,145,156,169],"security,":[31],"monitoring":[32],"approaches":[33,46],"that":[34],"would":[35],"be":[36,107],"less":[37],"feasible":[38],"One":[43],"is":[47,132,147],"machine":[48,78,111],"learning":[49,79,112],"based":[50,80,113],"anomaly":[51,69,114],"detection.":[52],"Without":[53],"proper":[54],"customization":[55,88],"for":[56,90],"special":[58],"requirements":[59],"environment,":[66],"many":[67],"existing":[68],"or":[70],"misuse":[71],"detection":[72,115],"systems":[73],"will":[74],"perform":[75],"sub-optimally.":[76],"A":[77],"approach":[81],"could":[82],"reduce":[83],"amount":[85],"manual":[87],"required":[89],"different":[91],"networks.":[95],"In":[96],"this":[97],"paper":[98],"we":[99],"analyze":[100],"a":[101,110,150],"possible":[102],"set":[103],"features":[105],"to":[106,178],"used":[108],"real":[119],"world":[120],"environment":[125],"under":[126,130],"investigation.":[127],"investigation":[131,177],"represented":[133],"by":[134],"architectural":[135],"drawing":[136],"results":[138],"derived":[139],"trace":[142,146],"analysis.":[143],"captured":[148],"live":[151],"running":[152],"process":[154],"includes":[158],"both":[159],"data":[161,164],"flowing":[165],"between":[166],"network.":[173],"We":[174],"limit":[175],"IP":[180],"traffic":[181],"traces.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}