{"id":"https://openalex.org/W7140288742","doi":"https://doi.org/10.48550/arxiv.2603.23416","title":"An Experimental Study of Machine Learning-Based Intrusion Detection for OPC UA over Industrial Private 5G Networks","display_name":"An Experimental Study of Machine Learning-Based Intrusion Detection for OPC UA over Industrial Private 5G Networks","publication_year":2026,"publication_date":"2026-03-24","ids":{"openalex":"https://openalex.org/W7140288742","doi":"https://doi.org/10.48550/arxiv.2603.23416"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.23416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.23416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.23416","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074072423","display_name":"Song Son Ha","orcid":"https://orcid.org/0000-0003-1716-5867"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ha, Song Son","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130607123","display_name":"Kunal Singh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singh, Kunal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114371788","display_name":"Florian Foerster","orcid":"https://orcid.org/0009-0003-4437-010X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Foerster, Florian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012735657","display_name":"Henry Beuster","orcid":"https://orcid.org/0000-0002-5390-3946"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Beuster, Henry","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120083992","display_name":"Tim Kittel","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kittel, Tim","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042778157","display_name":"Dominik Merli","orcid":"https://orcid.org/0000-0003-2310-5895"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Merli, Dominik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5045171452","display_name":"Gerd Scholl","orcid":"https://orcid.org/0009-0008-4470-2879"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Scholl, Gerd","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9384999871253967,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9384999871253967,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.01510000042617321,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.007000000216066837,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7200999855995178},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5521000027656555},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4472000002861023},{"id":"https://openalex.org/keywords/opc-data-access","display_name":"OPC Data Access","score":0.4187999963760376},{"id":"https://openalex.org/keywords/private-network","display_name":"Private network","score":0.357699990272522},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.33410000801086426},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.32919999957084656}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7200999855995178},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5615000128746033},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5521000027656555},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4472000002861023},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44510000944137573},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43309998512268066},{"id":"https://openalex.org/C73952413","wikidata":"https://www.wikidata.org/wiki/Q7072811","display_name":"OPC Data Access","level":3,"score":0.4187999963760376},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3912999927997589},{"id":"https://openalex.org/C117387248","wikidata":"https://www.wikidata.org/wiki/Q11186","display_name":"Private network","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3515999913215637},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33410000801086426},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.32919999957084656},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.30640000104904175},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29600000381469727},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.25870001316070557},{"id":"https://openalex.org/C192126672","wikidata":"https://www.wikidata.org/wiki/Q1068715","display_name":"Telecommunications network","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.23416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.23416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.23416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.23416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5582764148712158,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Industrial":[0],"deployments":[1],"increasingly":[2],"rely":[3],"on":[4,65],"Open":[5],"Platform":[6],"Communications":[7],"Unified":[8],"Architecture":[9],"(OPC":[10],"UA)":[11],"as":[12],"a":[13,126],"secure":[14],"and":[15,27,41,84,90,96,105,110],"platform-independent":[16],"communication":[17],"protocol,":[18],"while":[19],"private":[20,76,137],"Fifth":[21],"Generation":[22],"(5G)":[23],"networks":[24],"provide":[25],"low-latency":[26],"high-reliability":[28],"connectivity":[29],"for":[30,125],"modern":[31],"automation":[32],"systems.":[33],"However,":[34],"their":[35],"combination":[36],"introduces":[37],"new":[38],"attack":[39,80,132],"surfaces":[40],"traffic":[42,87],"characteristics":[43],"that":[44,116],"remain":[45],"insufficiently":[46],"understood,":[47],"particularly":[48],"with":[49,92],"respect":[50],"to":[51,107],"machine":[52],"learning-based":[53],"intrusion":[54],"detection":[55,123],"systems":[56],"(ML-based":[57],"IDS).":[58],"This":[59],"paper":[60],"presents":[61],"an":[62,74,135],"experimental":[63],"study":[64],"detecting":[66],"cyberattacks":[67],"against":[68],"OPC":[69,85,130],"UA":[70,86],"applications":[71],"operating":[72],"over":[73,134],"operational":[75,136],"5G":[77,138],"network.":[78,139],"Multiple":[79],"scenarios":[81,133],"are":[82,103],"executed,":[83],"is":[88],"captured":[89],"enriched":[91],"statistical":[93],"flow-,":[94],"packet-,":[95],"protocol-aware":[97],"features.":[98],"Several":[99],"supervised":[100],"ML":[101],"models":[102],"trained":[104],"evaluated":[106],"distinguish":[108],"benign":[109],"malicious":[111],"traffic.":[112],"The":[113],"results":[114],"demonstrate":[115],"the":[117],"proposed":[118],"ML-based":[119],"IDS":[120],"achieves":[121],"high":[122],"performance":[124],"representative":[127],"set":[128],"of":[129],"UA-specific":[131]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-03-26T00:00:00"}