{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,26]],"date-time":"2025-06-26T12:49:37Z","timestamp":1750942177822,"version":"3.40.3"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031562488"},{"type":"electronic","value":"9783031562495"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-56249-5_1","type":"book-chapter","created":{"date-parts":[[2024,3,19]],"date-time":"2024-03-19T06:51:26Z","timestamp":1710831086000},"page":"3-31","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["From Power to\u00a0Water: Dissecting SCADA Networks Across Different Critical Infrastructures"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9008-7717","authenticated-orcid":false,"given":"Neil","family":"Ortiz","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Rosso","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8079-4087","authenticated-orcid":false,"given":"Emmanuele","family":"Zambon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-3846-9045","authenticated-orcid":false,"given":"Jerry","family":"den Hartog","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5142-9750","authenticated-orcid":false,"given":"Alvaro A.","family":"Cardenas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,20]]},"reference":[{"unstructured":"IEC 60870-5-104, June 2006. https:\/\/webstore.iec.ch\/publication\/3746","key":"1_CR1"},{"unstructured":"Modbus application protocol specification v1.1b3, April 2012. https:\/\/www.modbus.org","key":"1_CR2"},{"doi-asserted-by":"publisher","unstructured":"Babay, A., et al.: Deploying intrusion-tolerant SCADA for the power grid. In: 2019 49th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 328\u2013335 (2019). https:\/\/doi.org\/10.1109\/DSN.2019.00043","key":"1_CR3","DOI":"10.1109\/DSN.2019.00043"},{"doi-asserted-by":"publisher","unstructured":"Babay, A., Tantillo, T., Aron, T., Platania, M., Amir, Y.: Network-attack-resilient intrusion-tolerant SCADA for the power grid. In: 2018 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 255\u2013266 (2018). https:\/\/doi.org\/10.1109\/DSN.2018.00036","key":"1_CR4","DOI":"10.1109\/DSN.2018.00036"},{"key":"1_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"126","DOI":"10.1007\/978-3-642-28537-0_13","volume-title":"Passive and Active Measurement","author":"RRR Barbosa","year":"2012","unstructured":"Barbosa, R.R.R., Sadre, R., Pras, A.: Difficulties in modeling SCADA traffic: a comparative analysis. In: Taft, N., Ricciato, F. (eds.) PAM 2012. LNCS, vol. 7192, pp. 126\u2013135. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-28537-0_13"},{"doi-asserted-by":"publisher","unstructured":"Barbosa, R.R.R., Sadre, R., Pras, A.: Exploiting traffic periodicity in industrial control networks. Int. J. Crit. Infrastruct. Prot. 13, 52\u201362 (2016). https:\/\/doi.org\/10.1016\/j.ijcip.2016.02.004. https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1874548216300221","key":"1_CR6","DOI":"10.1016\/j.ijcip.2016.02.004"},{"unstructured":"Cheung, S., Dutertre, B., Fong, M., Lindqvist, U., Valdes, A., Skinner, K.: Using model-based intrusion detection for SCADA networks. In: Proceeding of the SCADA Security Scientific Symposium, p. 12 (2007)","key":"1_CR7"},{"doi-asserted-by":"crossref","unstructured":"Clarke, G., Reynders, D., Wright, E.: Practical Modern SCADA Protocols: DNP3, 60870.5 and Related Systems, January 2004","key":"1_CR8","DOI":"10.1016\/B978-075065799-0\/50019-X"},{"doi-asserted-by":"publisher","unstructured":"Formby, D., Walid, A., Beyah, R.: A case study in power substation network dynamics. Proc. ACM Meas. Anal. Comput. Syst. 1(1) (2017). https:\/\/doi.org\/10.1145\/3084456","key":"1_CR9","DOI":"10.1145\/3084456"},{"doi-asserted-by":"publisher","unstructured":"Had\u017eiosmanovi\u0107, D., Sommer, R., Zambon, E., Hartel, P.H.: Through the eye of the PLC: semantic security monitoring for industrial processes, pp. 126\u2013135 (2014). https:\/\/doi.org\/10.1145\/2664243.2664277","key":"1_CR10","DOI":"10.1145\/2664243.2664277"},{"doi-asserted-by":"publisher","unstructured":"Harsh, V., Jyothi, S.A., Godfrey, P.B.: Spineless data centers. In: HotNets 2020, New York, NY, USA, pp. 67\u201373. Association for Computing Machinery (2020). https:\/\/doi.org\/10.1145\/3422604.3425945","key":"1_CR11","DOI":"10.1145\/3422604.3425945"},{"doi-asserted-by":"publisher","unstructured":"Hodo, E., Grebeniuk, S., Ruotsalainen, H., Tavolato, P.: Anomaly detection for simulated IEC-60870-5-104 trafiic. In: Proceedings of the 12th International Conference on Availability, Reliability and Security, ARES 2017, New York, NY, USA. Association for Computing Machinery (2017). https:\/\/doi.org\/10.1145\/3098954.3103166","key":"1_CR12","DOI":"10.1145\/3098954.3103166"},{"doi-asserted-by":"crossref","unstructured":"Hoffman, A.J.: On the line graph of the complete bipartite graph. Ann. Math. Stat. 35(2), 883\u2013885 (1964). https:\/\/doi.org\/10.1214\/aoms\/1177703593","key":"1_CR13","DOI":"10.1214\/aoms\/1177703593"},{"doi-asserted-by":"publisher","unstructured":"Hoyos, J., Dehus, M., Brown, T.X.: Exploiting the goose protocol: a practical attack on cyber-infrastructure. In: 2012 IEEE Globecom Workshops, pp. 1508\u20131513 (2012). https:\/\/doi.org\/10.1109\/GLOCOMW.2012.6477809","key":"1_CR14","DOI":"10.1109\/GLOCOMW.2012.6477809"},{"doi-asserted-by":"publisher","unstructured":"Jung, S.S., Formby, D., Day, C., Beyah, R.: A first look at machine-to-machine power grid network traffic. In: 2014 IEEE International Conference on Smart Grid Communications (SmartGridComm), pp. 884\u2013889 (2014). https:\/\/doi.org\/10.1109\/SmartGridComm.2014.7007760","key":"1_CR15","DOI":"10.1109\/SmartGridComm.2014.7007760"},{"key":"1_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/978-3-030-69781-5_14","volume-title":"Cyber-Physical Security for Critical Infrastructures Protection","author":"C-Y Lin","year":"2021","unstructured":"Lin, C.-Y., Nadjm-Tehrani, S.: A comparative analysis of emulated and real IEC-104 spontaneous traffic in power system networks. In: Abie, H., et al. (eds.) CPS4CIP 2020. LNCS, vol. 12618, pp. 207\u2013223. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-69781-5_14"},{"key":"1_CR17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1007\/978-3-319-99843-5_5","volume-title":"Critical Information Infrastructures Security","author":"CY Lin","year":"2018","unstructured":"Lin, C.Y., Nadjm-Tehrani, S., Asplund, M.: Timing-based anomaly detection in SCADA networks. In: D\u2019Agostino, G., Scala, A. (eds.) Critical Information Infrastructures Security. LNCS, vol. 10707, pp. 48\u201359. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-99843-5_5"},{"doi-asserted-by":"publisher","unstructured":"Mai, K., Qin, X., Ortiz, N., Molina, J., Cardenas, A.A.: Uncharted networks: a first measurement study of the bulk power system. In: Proceedings of the ACM Internet Measurement Conference, Virtual Event USA, pp. 201\u2013213. ACM, October 2020. https:\/\/doi.org\/10.1145\/3419394.3423630","key":"1_CR18","DOI":"10.1145\/3419394.3423630"},{"doi-asserted-by":"publisher","unstructured":"Maynard, P., McLaughlin, K., Haberler, B.: Towards understanding man-in-the-middle attacks on IEC 60870-5-104 SCADA networks. In: 2nd International Symposium for ICS & SCADA Cyber Security Research 2014. BCS Learning & Development, September 2014. https:\/\/doi.org\/10.14236\/ewic\/ics-csr2014.5. https:\/\/ewic.bcs.org\/content\/ConWebDoc\/53228","key":"1_CR19","DOI":"10.14236\/ewic\/ics-csr2014.5"},{"key":"1_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"470","DOI":"10.1007\/978-3-030-98785-5_21","volume-title":"Passive and Active Measurement","author":"S Mehner","year":"2022","unstructured":"Mehner, S., Schuster, F., Hohlfeld, O.: Lights on\u00a0power plant control networks. In: Hohlfeld, O., Moura, G., Pelsser, C. (eds.) PAM 2022. LNCS, vol. 13210, pp. 470\u2013484. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-98785-5_21"},{"doi-asserted-by":"publisher","unstructured":"Qin, X., Rosso, M., Cardenas, A.A., Etalle, S., den Hartog, J., Zambon, E.: You can\u2019t protect what you don\u2019t understand: characterizing an operational gas SCADA network. In: 2022 IEEE Security and Privacy Workshops (SPW), San Francisco, CA, USA, pp. 243\u2013250. IEEE, May 2022. https:\/\/doi.org\/10.1109\/SPW54247.2022.9833864. https:\/\/ieeexplore.ieee.org\/document\/9833864\/","key":"1_CR21","DOI":"10.1109\/SPW54247.2022.9833864"},{"doi-asserted-by":"publisher","unstructured":"Roig, P.J., Alcaraz, S., Gilly, K., Juiz, C.: Modelling a leaf and spine topology for VM migration in fog computing. In: 2020 24th International Conference Electronics, pp. 1\u20136 (2020). https:\/\/doi.org\/10.1109\/IEEECONF49502.2020.9141611","key":"1_CR22","DOI":"10.1109\/IEEECONF49502.2020.9141611"},{"doi-asserted-by":"publisher","unstructured":"Wressnegger, C., Kellner, A., Rieck, K.: ZOE: content-based anomaly detection for industrial control systems. In: 2018 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 127\u2013138 (2018). https:\/\/doi.org\/10.1109\/DSN.2018.00025","key":"1_CR23","DOI":"10.1109\/DSN.2018.00025"},{"doi-asserted-by":"publisher","unstructured":"Yang, Y., McLaughlin, K., Littler, T., Sezer, S., Pranggono, B., Wang, H.F.: Intrusion detection system for IEC 60870\u20135-104 based SCADA networks. In: 2013 IEEE Power Energy Society General Meeting, pp. 1\u20135 (2013). https:\/\/doi.org\/10.1109\/PESMG.2013.6672100","key":"1_CR24","DOI":"10.1109\/PESMG.2013.6672100"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-56249-5_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,19]],"date-time":"2024-03-19T06:54:05Z","timestamp":1710831245000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-56249-5_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031562488","9783031562495"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-56249-5_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"20 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 March 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 March 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2024.cs.northwestern.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCRP","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"64","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"14","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"13","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"22% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.9","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.42","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}