{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,12]],"date-time":"2025-12-12T13:06:29Z","timestamp":1765544789387,"version":"3.41.0"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030781194"},{"type":"electronic","value":"9783030781200"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-78120-0_25","type":"book-chapter","created":{"date-parts":[[2021,6,17]],"date-time":"2021-06-17T05:02:49Z","timestamp":1623906169000},"page":"382-397","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Revitalizing Self-Organizing Map: Anomaly Detection Using Forecasting Error Patterns"],"prefix":"10.1007","author":[{"given":"Young Geun","family":"Kim","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeong-Han","family":"Yun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siho","family":"Han","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hyoung Chun","family":"Kim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simon S.","family":"Woo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,6,15]]},"reference":[{"key":"25_CR1","doi-asserted-by":"publisher","unstructured":"Aharoni, E., Rosset, S.: Generalized $$\\alpha $$-investing: definitions, optimality results and application to public databases. J. Roy. Stat. Soci.: Ser. B (Stat. Methodol.) 76(4), 771\u2013794 (2014). https:\/\/doi.org\/10.1111\/rssb.12048, https:\/\/rss.onlinelibrary.wiley.com\/doi\/abs\/10.1111\/rssb.12048","DOI":"10.1111\/rssb.12048"},{"key":"25_CR2","doi-asserted-by":"crossref","unstructured":"Aoudi, W., Iturbe, M., Almgren, M.: Truth will out: departure-based process-level detection of stealthy attacks on control systems. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, pp. 817\u2013831 (2018)","DOI":"10.1145\/3243734.3243781"},{"key":"25_CR3","series-title":"Studies in Computational Intelligence","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1007\/978-3-540-73954-8_6","volume-title":"Perspectives of Neural-symbolic Integration","author":"GA Barreto","year":"2007","unstructured":"Barreto, G.A.: Time series prediction with the self-organizing map: a review. In: Hammer, B., Hitzler, P. (eds.) Perspectives of Neural-symbolic Integration. Studies in Computational Intelligence, vol. 77, pp. 135\u2013158. Springer, Berlin (2007). https:\/\/doi.org\/10.1007\/978-3-540-73954-8_6"},{"issue":"1","key":"25_CR4","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1111\/j.2517-6161.1995.tb02031.x","volume":"57","author":"Y Benjamini","year":"1995","unstructured":"Benjamini, Y., Hochberg, Y.: Controlling the false discovery rate: a practical and powerful approach to multiple testing. J. Roy. Stat. Soc.: Ser. B (Methodol.) 57(1), 289\u2013300 (1995)","journal-title":"J. Roy. Stat. Soc.: Ser. B (Methodol.)"},{"key":"25_CR5","unstructured":"Bishop, C.M.: Mixture density networks (1994). http:\/\/publications.aston.ac.uk\/id\/eprint\/373\/"},{"issue":"1","key":"25_CR6","first-page":"5","volume":"10","author":"RJ Campello","year":"2015","unstructured":"Campello, R.J., Moulavi, D., Zimek, A., Sander, J.: Hierarchical density estimates for data clustering, visualization, and outlier detection. ACM Trans. Knowl. Discov. Data (TKDD) 10(1), 5 (2015)","journal-title":"ACM Trans. Knowl. Discov. Data (TKDD)"},{"key":"25_CR7","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4899-4549-5","volume-title":"A Course in Large Sample Theory","author":"TS Ferguson","year":"1996","unstructured":"Ferguson, T.S.: A Course in Large Sample Theory. Kogan Page Publishers, London (1996)"},{"key":"25_CR8","unstructured":"Filonov, P., Kitashov, F., Lavrentyev, A.: RNN-based early cyber-attack detection for the tennessee eastman process. CoRR, September 2017"},{"key":"25_CR9","unstructured":"Filonov, P., Lavrentyev, A., Vorontsov, A.: Multivariate industrial time series with cyber-attack simulation: fault detection using an LSTM-based predictive data model. arXiv abs\/1612.06676 (2016)"},{"issue":"2","key":"25_CR10","doi-asserted-by":"publisher","first-page":"429","DOI":"10.1111\/j.1467-9868.2007.00643.x","volume":"70","author":"DP Foster","year":"2008","unstructured":"Foster, D.P., Stine, R.A.: $$\\alpha $$-investing: a procedure for sequential control of expected false discoveries. J. Roy. Stat. Soc. Ser. B-Stat. Methodol. 70(2), 429\u2013444 (2008)","journal-title":"J. Roy. Stat. Soc. Ser. B-Stat. Methodol."},{"key":"25_CR11","doi-asserted-by":"crossref","unstructured":"Fuertes, S., Picart, G., Tourneret, J.Y., Chaari, L., Ferrari, A., Richard, C.: Improving spacecraft health monitoring with automatic anomaly detection techniques. In: 14th International Conference on Space Operations, p. 2430 (2016)","DOI":"10.2514\/6.2016-2430"},{"issue":"4","key":"25_CR12","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1145\/3203245","volume":"51","author":"J Giraldo","year":"2018","unstructured":"Giraldo, J., et al.: A survey of physics-based attack detection in cyber-physical systems. ACM Comput. Surv. (CSUR) 51(4), 76 (2018)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"25_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1007\/978-3-319-71368-7_8","volume-title":"Critical Information Infrastructures Security","author":"J Goh","year":"2017","unstructured":"Goh, J., Adepu, S., Junejo, K.N., Mathur, A.: A dataset to support research in the design of secure water treatment systems. In: Havarneanu, G., Setola, R., Nassopoulos, H., Wolthusen, S. (eds.) CRITIS 2016. LNCS, vol. 10242, pp. 88\u201399. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-71368-7_8"},{"key":"25_CR14","doi-asserted-by":"crossref","unstructured":"Goh, J., Adepu, S., Tan, M., Lee, Z.S.: Anomaly detection in cyber physical systems using recurrent neural networks. In: 2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE), pp. 140\u2013145. IEEE (2017)","DOI":"10.1109\/HASE.2017.36"},{"key":"25_CR15","doi-asserted-by":"crossref","unstructured":"Hautamaki, V., Karkkainen, I., Franti, P.: Outlier detection using k-nearest neighbour graph. In: Proceedings of the 17th International Conference on Pattern Recognition, 2004. ICPR 2004, vol. 3, pp. 430\u2013433. IEEE (2004)","DOI":"10.1109\/ICPR.2004.1334558"},{"issue":"9\u201310","key":"25_CR16","doi-asserted-by":"publisher","first-page":"1641","DOI":"10.1016\/S0167-8655(03)00003-5","volume":"24","author":"Z He","year":"2003","unstructured":"He, Z., Xu, X., Deng, S.: Discovering cluster-based local outliers. Pattern Recogn. Lett. 24(9\u201310), 1641\u20131650 (2003)","journal-title":"Pattern Recogn. Lett."},{"key":"25_CR17","doi-asserted-by":"crossref","unstructured":"Hwang, W.S., Yun, J.H., Kim, J., Kim, H.C.: Time-series aware precision and recall for anomaly detection: considering variety of detection result and addressing ambiguous labeling. In: Proceedings of the 28th ACM International Conference on Information and Knowledge Management, pp. 2241\u20132244. ACM (2019)","DOI":"10.1145\/3357384.3358118"},{"key":"25_CR18","doi-asserted-by":"crossref","unstructured":"Id\u00e9, T., Papadimitriou, S., Vlachos, M.: Computing correlation anomaly scores using stochastic nearest neighbors. In: Seventh IEEE International Conference on Data Mining (ICDM 2007), pp. 523\u2013528. IEEE (2007)","DOI":"10.1109\/ICDM.2007.12"},{"issue":"2","key":"25_CR19","doi-asserted-by":"publisher","first-page":"350","DOI":"10.1109\/JSYST.2014.2322503","volume":"9","author":"SK Khaitan","year":"2014","unstructured":"Khaitan, S.K., McCalley, J.D.: Design techniques and applications of cyberphysical systems: a survey. IEEE Syst. J. 9(2), 350\u2013365 (2014)","journal-title":"IEEE Syst. J."},{"key":"25_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-030-42048-2_1","volume-title":"Computer Security","author":"J Kim","year":"2020","unstructured":"Kim, J., Yun, J.-H., Kim, H.C.: Anomaly detection for industrial control systems using sequence-to-sequence neural networks. In: Katsikas, S., et al. (eds.) CyberICPS\/SECPRE\/SPOSE\/ADIoT -2019. LNCS, vol. 11980, pp. 3\u201318. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-42048-2_1"},{"issue":"1","key":"25_CR21","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1007\/BF00337288","volume":"43","author":"T Kohonen","year":"1982","unstructured":"Kohonen, T.: Self-organized formation of topologically correct feature maps. Biol. Cybern. 43(1), 59\u201369 (1982). https:\/\/doi.org\/10.1007\/BF00337288","journal-title":"Biol. Cybern."},{"issue":"1","key":"25_CR22","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1007\/BF01494395","volume":"15","author":"JW Lindeberg","year":"1922","unstructured":"Lindeberg, J.W.: Eine neue herleitung des exponentialgesetzes in der wahrscheinlichkeitsrechnung. Math. Z. 15(1), 211\u2013225 (1922)","journal-title":"Math. Z."},{"key":"25_CR23","unstructured":"Lunt, T.F., et al.: Ides: the enhanced prototype-a real-time intrusion-detection expert system. In: SRI International, 333 Ravenswood Avenue, Menlo Park. Citeseer (1988)"},{"key":"25_CR24","unstructured":"Lunt, T.F., Tamaru, A., Gillham, F.: A real-time intrusion-detection expert system (IDES). SRI International. Computer Science Laboratory (1992)"},{"key":"25_CR25","unstructured":"Malhotra, P., Ramakrishnan, A., Anand, G., Vig, L., Agarwal, P., Shroff, G.: LSTM-based encoder-decoder for multi-sensor anomaly detection. arXiv preprint arXiv:1607.00148 (2016)"},{"key":"25_CR26","unstructured":"Rolincik, M., Lauriente, M., Koons, H.C., Gorney, D.: An expert system for diagnosing environmentally induced spacecraft anomalies. In: Proceedings of 5th Annual Space Operations and Applications Research Symposium, pp. 36\u201344 (1992)"},{"issue":"6088","key":"25_CR27","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1038\/323533a0","volume":"323","author":"DE Rumelhart","year":"1986","unstructured":"Rumelhart, D.E., Hinton, G.E., Williams, R.J.: Learning representations by back-propagating errors. Nature 323(6088), 533\u2013536 (1986)","journal-title":"Nature"},{"key":"25_CR28","unstructured":"Sebring, M.M.: Expert systems in intrusion detection: a case study. In: Proceedings of the 11th National Computer Security Conference, Baltimore, Maryland, October 1988, pp. 74\u201381 (1988)"},{"key":"25_CR29","unstructured":"Shin, H.K., Lee, W., Yun, J.H., Kim, H.: HAI 1.0: Hil-based augmented ICS security dataset. In: 13th USENIX Workshop on Cyber Security Experimentation and Test (CSET 20). USENIX Association, August 2020. https:\/\/www.usenix.org\/conference\/cset20\/presentation\/shin"},{"key":"25_CR30","unstructured":"Tatbul, N., Lee, T.J., Zdonik, S., Alam, M., Gottschlich, J.: Precision and recall for time series. In: Proceedings of the 32nd International Conference on Neural Information Processing Systems. NIPS 2018, pp. 1924\u20131934. Curran Associates Inc., USA (2018). http:\/\/dl.acm.org\/citation.cfm?id=3326943.3327120"},{"key":"25_CR31","unstructured":"Zhai, S., Cheng, Y., Lu, W., Zhang, Z.: Deep structured energy based models for anomaly detection. arXiv preprint arXiv:1605.07717 (2016)"},{"key":"25_CR32","unstructured":"Zhang, C., et al.: A deep neural network for unsupervised anomaly detection and diagnosis in multivariate time series data. arXiv preprint arXiv:1811.08055 (2018)"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-78120-0_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,16]],"date-time":"2025-06-16T22:02:20Z","timestamp":1750111340000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-78120-0_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030781194","9783030781200"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-78120-0_25","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"15 June 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Oslo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Norway","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 June 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 June 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"36","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.ifipsec.org\/2021\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"112","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"28","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"25% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}