{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T22:20:19Z","timestamp":1757456419269,"version":"3.40.3"},"publisher-location":"Cham","reference-count":15,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030123291"},{"type":"electronic","value":"9783030123307"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-12330-7_7","type":"book-chapter","created":{"date-parts":[[2019,5,13]],"date-time":"2019-05-13T22:20:47Z","timestamp":1557786047000},"page":"139-160","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Profiling Communications in Industrial IP Networks: Model Complexity and Anomaly Detection"],"prefix":"10.1007","author":[{"given":"Mustafa Amir","family":"Faisal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alvaro A.","family":"Cardenas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Avishai","family":"Wool","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,5,14]]},"reference":[{"key":"7_CR1","unstructured":"Astarloa A, Bidarte U, Jim\u00e9nez J, Zuloaga A, L\u00e1zaro J (2016) Intelligent gateway for industry 4.0-compliant production. In: IECON 2016-42nd Annual Conference of the IEEE Industrial Electronics Society. IEEE, pp 4902\u20134907"},{"key":"7_CR2","doi-asserted-by":"crossref","unstructured":"Caselli M, Zambon E, Kargl F (2015) Sequence-aware intrusion detection in industrial control systems. In: Proceedings of the 1st ACM Workshop on Cyber-Physical System Security, pp 13\u201324","DOI":"10.1145\/2732198.2732200"},{"key":"7_CR3","first-page":"1","volume":"2017","author":"Y Fu","year":"2017","unstructured":"Fu Y, Yan Z, Cao J, Kon\u00e9 O, Cao X (2017) An automata based intrusion detection method for Internet of Things. Mob Inf Syst 2017:1\u201313","journal-title":"Mob Inf Syst"},{"key":"7_CR4","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1016\/j.ijcip.2013.05.001","volume":"6","author":"N Goldenberg","year":"2013","unstructured":"Goldenberg N, Wool A (2013) Accurate modeling of Modbus\/TCP for intrusion detection in scada systems. Int J Crit Infrastruct Prot 6:63\u201375","journal-title":"Int J Crit Infrastruct Prot"},{"key":"7_CR5","unstructured":"IEEE: 1815\u20132012 \u2013 IEEE standard for electric power systems communications-distributed network protocol (DNP3) (2012). \n                    http:\/\/ieeexplore.ieee.org\/document\/6327578\/\n                    \n                  . Online accessed 06 Mar 2017"},{"issue":"2","key":"7_CR6","first-page":"37","volume":"9","author":"A Kleinman","year":"2014","unstructured":"Kleinman A, Wool A (2014) Accurate modeling of the Siemens S7 scada protocol for intrusion detection and digital forensics. J Digit Forensic Secur Law JDFSL 9(2):37","journal-title":"J Digit Forensic Secur Law JDFSL"},{"key":"7_CR7","unstructured":"Kleinmann A, Wool A (2015) A statechart-based anomaly detection model for multi-threaded scada systems. In: International Conference on Critical Information Infrastructures Security, pp 132\u2013144"},{"key":"7_CR8","doi-asserted-by":"crossref","unstructured":"Kleinmann A, Wool A (2016) Automatic construction of statechart-based anomaly detection models for multi-threaded scada via spectral analysis. In: Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy, pp 1\u201312","DOI":"10.1145\/2994487.2994490"},{"key":"7_CR9","unstructured":"Modbus Organization (2012) Modbus application protocol specification V1.1b3. Online; Accessed 05 July 2016"},{"key":"7_CR10","unstructured":"Modbus Organization (2012) Modbus messaging on TCP\/IP implementation guide V1.0b. Online; Accessed 05 July 2016"},{"key":"7_CR11","unstructured":"Open DeviceNet Vendor Association (2007) The CIP networks library volume 2: EtherNet\/IP adaptation of CIP. \n                    http:\/\/www.tud.ttu.ee\/im\/Kristjan.Sillmann\/ISP0051%20Rakenduslik%20Andmeside\/CIP%20docs\/CIP%20Vol2_1.4.pdf"},{"key":"7_CR12","doi-asserted-by":"crossref","unstructured":"Rubio JE, Alcaraz C, Roman R, Lopez J (2017) Analysis of intrusion detection systems in industrial ecosystems. In: 14th International Conference on Security and Cryptography (SECRYPT 2017)","DOI":"10.5220\/0006426301160128"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Sadeghi AR, Wachsmann C, Waidner M (2015) Security and privacy challenges in industrial Internet of Things. In: 2015 52nd ACM\/EDAC\/IEEE Design Automation Conference (DAC). IEEE, pp 1\u20136","DOI":"10.1145\/2744769.2747942"},{"key":"7_CR14","volume-title":"Thermostatics and thermodynamics: an introduction to energy, information and states of matter, with engineering applications","author":"M Tribus","year":"1961","unstructured":"Tribus M (1961) Thermostatics and thermodynamics: an introduction to energy, information and states of matter, with engineering applications. van Nostrand, London"},{"key":"7_CR15","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1016\/j.jnca.2017.02.009","volume":"84","author":"BB Zarpel\u00e3o","year":"2017","unstructured":"Zarpel\u00e3o BB, Miani RS, Kawakani CT, de Alvarenga SC (2017) A survey of intrusion detection in Internet of Things. J Netw Comput Appl 84:25\u201337","journal-title":"J Netw Comput Appl"}],"container-title":["Advanced Sciences and Technologies for Security Applications","Security and Privacy Trends in the Industrial Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-12330-7_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,16]],"date-time":"2019-07-16T05:32:22Z","timestamp":1563255142000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-12330-7_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030123291","9783030123307"],"references-count":15,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-12330-7_7","relation":{},"ISSN":["1613-5113","2363-9466"],"issn-type":[{"type":"print","value":"1613-5113"},{"type":"electronic","value":"2363-9466"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"14 May 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}