{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T10:33:02Z","timestamp":1743071582871,"version":"3.40.3"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031541285"},{"type":"electronic","value":"9783031541292"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-54129-2_3","type":"book-chapter","created":{"date-parts":[[2024,3,11]],"date-time":"2024-03-11T22:03:15Z","timestamp":1710194595000},"page":"42-58","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["IM-DISCO: Invariant Mining for\u00a0Detecting IntrusionS in\u00a0Critical Operations"],"prefix":"10.1007","author":[{"given":"Guilherme","family":"Saraiva","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2067-3232","authenticated-orcid":false,"given":"Filipe","family":"Apolin\u00e1rio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2872-7300","authenticated-orcid":false,"given":"Miguel L.","family":"Pardal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,12]]},"reference":[{"key":"3_CR1","doi-asserted-by":"crossref","unstructured":"Adepu, S., Mathur, A.: From design to invariants: detecting attacks on cyber physical systems. In: 2017 IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C), pp. 533\u2013540. IEEE (2017)","DOI":"10.1109\/QRS-C.2017.91"},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Agrawal, R., Imieli\u0144ski, T., Swami, A.: Mining association rules between sets of items in large databases. In: Proceedings of the 1993 ACM SIGMOD International Conference on Management of Data, pp. 207\u2013216 (1993)","DOI":"10.1145\/170035.170072"},{"key":"3_CR3","doi-asserted-by":"crossref","unstructured":"Ahmed, C.M., et al.: NoisePrint: attack detection using sensor and process noise fingerprint in cyber physical systems. In: Proceedings of the 2018 on Asia Conference on Computer and Communications Security, pp. 483\u2013497. ACM, Incheon ROK (2018)","DOI":"10.1145\/3196494.3196532"},{"key":"3_CR4","doi-asserted-by":"crossref","unstructured":"Ahmed, C.M., Zhou, J., Mathur, A.P.: Noise matters: using sensor and process noise fingerprint to detect stealthy cyber attacks and authenticate sensors in CPS. In: Proceedings of the 34th Annual Computer Security Applications Conference, pp. 566\u2013581. ACM, San Juan PR USA (2018)","DOI":"10.1145\/3274694.3274748"},{"key":"3_CR5","doi-asserted-by":"crossref","unstructured":"Aliabadi, M.R., Kamath, A.A., Gascon-Samson, J., Pattabiraman, K.: Artinali: dynamic invariant detection for cyber-physical system security. In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering (2017)","DOI":"10.1145\/3106237.3106282"},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Apolin\u00e1rio, F., Escravana, N., Herv\u00e9, \u00c9., Pardal, M.L., Correia, M.: Fingerci: generating specifications for critical infrastructures. In: Proceedings of the 37th ACM\/SIGAPP Symposium on Applied Computing, pp. 183\u2013186 (2022)","DOI":"10.1145\/3477314.3507323"},{"key":"3_CR7","doi-asserted-by":"publisher","unstructured":"Apolin\u00e1rio, F., et al.: COMSEC: secure communications for baggage handling systems. In: Katsikas, S., et al. Computer Security. ESORICS 2022 International Workshops. ESORICS 2022. Lecture Notes in Computer Science, vol. 13785, pp. 329\u2013345. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-25460-4_19","DOI":"10.1007\/978-3-031-25460-4_19"},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"Brin, S., Motwani, R., Ullman, J.D., Tsur, S.: Dynamic itemset counting and implication rules for market basket data. In: Proceedings of the 1997 ACM SIGMOD international conference on Management of data, pp. 255\u2013264 (1997)","DOI":"10.1145\/253262.253325"},{"key":"3_CR9","doi-asserted-by":"crossref","unstructured":"Carvalho, O., Apolin\u00e1rio, F., Escravana, N., Ribeiro, C.: CIIA: critical infrastructure impact assessment. In: Proceedings of the 37th ACM\/SIGAPP Symposium on Applied Computing, pp. 124\u2013132 (2022)","DOI":"10.1145\/3477314.3507313"},{"key":"3_CR10","doi-asserted-by":"publisher","unstructured":"Ceccato, M., Driouich, Y., Lucchese, M., Lanotte, R., Merro, M.: Towards reverse engineering of industrial physical processes. In: Katsikas, S., et al. Computer Security. ESORICS 2022 International Workshops. ESORICS 2022. Lecture Notes in Computer Science, vol. 13785. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-25460-4_15","DOI":"10.1007\/978-3-031-25460-4_15"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Feng, C., Palleti, V., Mathur, A., Chana, D.: A systematic framework to generate invariants for anomaly detection in industrial control systems. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23265"},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"Feng, C., Tian, P.: Time series anomaly detection for cyber-physical systems via neural system identification and bayesian filtering. In: Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining. KDD 2021, Association for Computing Machinery, New York, NY, USA (2021)","DOI":"10.1145\/3447548.3467137"},{"key":"3_CR13","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1007\/978-3-031-17143-7_24","volume-title":"Computer Security - ESORICS 2022","author":"C Fung","year":"2022","unstructured":"Fung, C., Srinarasi, S., Lucas, K., Phee, H.B., Bauer, L.: Perspectives from a comprehensive evaluation of reconstruction-based anomaly detection in industrial control systems. In: Atluri, V., Di Pietro, R., Jensen, C.D., Meng, W. (eds.) Computer Security - ESORICS 2022, pp. 493\u2013513. Springer Nature Switzerland, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-17143-7_24"},{"key":"3_CR14","unstructured":"Grandini, M., Bagli, E., Visani, G.: Metrics for multi-class classification: an overview. arXiv preprint arXiv:2008.05756 (2020)"},{"issue":"4","key":"3_CR15","doi-asserted-by":"publisher","first-page":"e4240","DOI":"10.1002\/ett.4240","volume":"32","author":"S Hajj","year":"2021","unstructured":"Hajj, S., El Sibai, R., Bou Abdo, J., Demerjian, J., Makhoul, A., Guyeux, C.: Anomaly-based intrusion detection systems: the requirements, methods, measurements, and datasets. Trans. Emerg. Telecommun. Technol. 32(4), e4240 (2021)","journal-title":"Trans. Emerg. Telecommun. Technol."},{"issue":"3","key":"3_CR16","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1016\/j.ijcip.2009.06.001","volume":"2","author":"YL Huang","year":"2009","unstructured":"Huang, Y.L., C\u00e1rdenas, A.A., Amin, S., Lin, Z.S., Tsai, H.Y., Sastry, S.: Understanding the physical and economic consequences of attacks on control systems. Int. J. Crit. Infrastruct. Prot. 2(3), 73\u201383 (2009)","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"3_CR17","doi-asserted-by":"crossref","unstructured":"Kaouk, M., Flaus, J.M., Potet, M.L., Groz, R.: A review of intrusion detection systems for industrial control systems. In: 2019 6th International Conference on Control, Decision and Information Technologies (CoDIT), pp. 1699\u20131704 (2019)","DOI":"10.1109\/CoDIT.2019.8820602"},{"key":"3_CR18","doi-asserted-by":"crossref","unstructured":"Kiran, R.U., Reddy, P.K.: Novel techniques to reduce search space in multiple minimum supports-based frequent pattern mining algorithms. In: Proceedings of the 14th International Conference on Extending Database Technology (2011)","DOI":"10.1145\/1951365.1951370"},{"key":"3_CR19","first-page":"927","volume":"5","author":"TA Kumbhare","year":"2014","unstructured":"Kumbhare, T.A., Chobe, S.V.: An overview of association rule mining algorithms. Int. J. Comput. Sci. Inf. Technol. 5, 927\u2013930 (2014)","journal-title":"Int. J. Comput. Sci. Inf. Technol."},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"Lee, E.A.: Cyber physical systems: design challenges. In: 2008 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC), pp. 363\u2013369 (2008)","DOI":"10.1109\/ISORC.2008.25"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Lima, J., Apolin\u00e1rio, F., Escravana, N., Ribeiro, C.: BP-IDS: using business process specification to leverage intrusion detection in critical infrastructures. In: 2020 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 7\u201312. IEEE (2020)","DOI":"10.1109\/ISSREW51248.2020.00029"},{"key":"3_CR22","doi-asserted-by":"crossref","unstructured":"Liu, B., Hsu, W., Ma, Y.: Mining association rules with multiple minimum supports. In: Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 337\u2013341 (1999)","DOI":"10.1145\/312129.312274"},{"key":"3_CR23","doi-asserted-by":"crossref","unstructured":"Pal, K., Adepu, S., Goh, J.: Effectiveness of association rules mining for invariants generation in cyber-physical systems. In: 2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE), pp. 124\u2013127. IEEE (2017)","DOI":"10.1109\/HASE.2017.21"},{"issue":"24","key":"3_CR24","doi-asserted-by":"publisher","first-page":"638","DOI":"10.21105\/joss.00638","volume":"3","author":"S Raschka","year":"2018","unstructured":"Raschka, S.: MLxtend: providing machine learning and data science utilities and extensions to python\u2019s scientific computing stack. J. Open Source Softw. 3(24), 638 (2018)","journal-title":"J. Open Source Softw."},{"key":"3_CR25","doi-asserted-by":"crossref","unstructured":"Rubio, J.E., Alcaraz, C., Roman, R., Lopez, J.: Analysis of intrusion detection systems in industrial ecosystems. In: SECRYPT, pp. 116\u2013128 (2017)","DOI":"10.5220\/0006426301160128"},{"key":"3_CR26","doi-asserted-by":"publisher","first-page":"100341","DOI":"10.1016\/j.ijcip.2020.100341","volume":"28","author":"MA Umer","year":"2020","unstructured":"Umer, M.A., Mathur, A., Junejo, K.N., Adepu, S.: Generating invariants using design and data-centric approaches for distributed attack detection. Int. J. Crit. Infrastruct. Prot. 28, 100341 (2020)","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"3_CR27","doi-asserted-by":"publisher","unstructured":"Wolsing, K., Thiemt, L., Sloun, C.v., Wagner, E., Wehrle, K., Henze, M.: Can industrial intrusion detection be simple? In: Atluri, V., Di Pietro, R., Jensen, C.D., Meng, W. (eds.) Computer Security - ESORICS 2022, vol. 13556, pp. 574\u2013594. Springer Nature Switzerland, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-17143-7_28","DOI":"10.1007\/978-3-031-17143-7_28"},{"issue":"1","key":"3_CR28","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s42400-021-00069-7","volume":"4","author":"CH Yoong","year":"2021","unstructured":"Yoong, C.H., Palleti, V.R., Maiti, R.R., Silva, A., Poskitt, C.M.: Deriving invariant checkers for critical infrastructure using axiomatic design principles. Cybersecurity 4(1), 1\u201324 (2021)","journal-title":"Cybersecurity"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2023 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-54129-2_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,14]],"date-time":"2024-11-14T03:47:34Z","timestamp":1731556054000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-54129-2_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031541285","9783031541292"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-54129-2_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"12 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Hague","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2023.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"478","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"93","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3-4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}