{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,28]],"date-time":"2026-10-28T16:51:20Z","timestamp":1793206280624,"version":"4.5.0"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319475592","type":"print"},{"value":"9783319475608","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-47560-8_2","type":"book-chapter","created":{"date-parts":[[2016,10,7]],"date-time":"2016-10-07T20:59:42Z","timestamp":1475873982000},"page":"20-36","source":"Crossref","is-referenced-by-count":11,"title":["Detecting Process-Aware Attacks in Sequential Control Systems"],"prefix":"10.1007","author":[{"given":"Oualid","family":"Koucham","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"St\u00e9phane","family":"Mocanu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guillaume","family":"Hiet","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jean-Marc","family":"Thiriet","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fr\u00e9d\u00e9ric","family":"Majorczyk","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,10,9]]},"reference":[{"key":"2_CR1","unstructured":"Common cyber security vulnerabilities in ICS. Technical report, U.S DHS (2011)"},{"key":"2_CR2","unstructured":"Bauer, A.: Monitorability of omega-regular languages. CoRR abs\/1006.3638 (2010)"},{"key":"2_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"400","DOI":"10.1007\/978-3-540-27863-4_22","volume-title":"Integration of Software Specification Techniques for Applications in Engineering","author":"N Bauer","year":"2004","unstructured":"Bauer, N., Huuck, R., Lukoschus, B., Engell, S.: A unifying semantics for sequential function charts. In: Ehrig, H., Damm, W., Desel, J., Gro\u00dfe-Rhode, M., Reif, W., Schnieder, E., Westk\u00e4mper, E. (eds.) Integration of Software Specification Techniques for Applications in Engineering. LNCS, vol. 3147, pp. 400\u2013418. Springer, Heidelberg (2004). doi: 10.1007\/978-3-540-27863-4_22"},{"issue":"2","key":"2_CR4","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1109\/TII.2010.2099234","volume":"7","author":"A Carcano","year":"2011","unstructured":"Carcano, A., Coletta, A., et al.: A multidimensional critical state analysis for detecting intrusions in SCADA systems. IEEE Trans. Ind. Inf. 7(2), 179\u2013186 (2011)","journal-title":"IEEE Trans. Ind. Inf."},{"key":"2_CR5","unstructured":"C\u00e1rdenas, A., Amin, S., et al.: Challenges for securing cyber physical systems. In: Workshop on Future Directions in Cyber-physical Systems Security, July 2009"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"Caselli, M., Zambon, E., Kargl, F.: Sequence-aware intrusion detection in industrial control systems. In: Proceedings of the 1st ACM Workshop CPSS, pp. 13\u201324 (2015)","DOI":"10.1145\/2732198.2732200"},{"key":"2_CR7","unstructured":"Cheung, S., Skinner, K.: Using model-based intrusion detection for SCADA networks. In: Proceedings of SCADA Security Scientific Symposium, pp. 127\u2013134 (2007)"},{"key":"2_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"364","DOI":"10.1007\/11513988_36","volume-title":"Computer Aided Verification","author":"M d\u2019Amorim","year":"2005","unstructured":"d\u2019Amorim, M., Ro\u015fu, G.: Efficient monitoring of $${\\omega }$$ -languages. In: Etessami, K., Rajamani, S.K. (eds.) CAV 2005. LNCS, vol. 3576, pp. 364\u2013378. Springer, Heidelberg (2005). doi: 10.1007\/11513988_36"},{"key":"2_CR9","doi-asserted-by":"crossref","unstructured":"De Giacomo, G., Masellis, R.D., Montali, M.: Reasoning on LTL on finite traces: insensitivity to infiniteness. In: Proceedings of AAAI 2014, pp. 1027\u20131033 (2014)","DOI":"10.1609\/aaai.v28i1.8872"},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Dwyer, M.B., Avrunin, G.S., Corbett, J.C.: Patterns in property specifications for finite-state verification. In: Proceedings of ICSE (1999)","DOI":"10.1145\/302405.302672"},{"key":"2_CR11","doi-asserted-by":"crossref","first-page":"1152","DOI":"10.1109\/JPROC.2005.849714","volume":"93","author":"D Dzung","year":"2005","unstructured":"Dzung, D., Naedele, M., Von Hoff, T.P., Crevatin, M.: Security for industrial communication systems. Proc. IEEE 93, 1152\u20131177 (2005)","journal-title":"Proc. IEEE"},{"key":"2_CR12","unstructured":"Falliere, N., Murchu, L.O., et al.: W32.Stuxnet Dossier-Symantec security response. https:\/\/www.symantec.com\/content\/en\/us\/enterprise\/media\/security_response\/whitepapers\/w32_stuxnet_dossier.pdf . Accessed June 2016"},{"key":"2_CR13","volume-title":"Automatique pour les classes pr\u00e9paratoires","author":"C Foulard","year":"1997","unstructured":"Foulard, C., Flaus, J.M., Jacomino, M.: Automatique pour les classes pr\u00e9paratoires, 1st edn. Herm\u00e9s-Lavoisier, Paris (1997)","edition":"1"},{"key":"2_CR14","doi-asserted-by":"crossref","unstructured":"Hadziosmanovic, D., Sommer, R., et al.: Through the eye of the PLC: towards semantic security monitoring for industrial control systems. In: Proceedings of ACSAC (2014)","DOI":"10.1145\/2664243.2664277"},{"key":"2_CR15","unstructured":"ISO\/IEC 29192 - Information technology - Security techniques - Lightweight cryptography. Standard, ISO, Geneva, Switzerland (2012)"},{"key":"2_CR16","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-12015-2","volume-title":"IEC 61131\u20133: Programming Industrial Automation","author":"KH John","year":"2010","unstructured":"John, K.H., Tiegelkamp, M.: IEC 61131\u20133: Programming Industrial Automation, 2nd edn. Springer, Heidelberg (2010)","edition":"2"},{"key":"2_CR17","unstructured":"Larsen, J.: Breakage-Black Hat (2008). https:\/\/www.blackhat.com\/presentations\/bh-dc-08\/Larsen\/Presentation\/bh-dc-08-larsen.pdf . Accessed June 2016"},{"key":"2_CR18","doi-asserted-by":"crossref","unstructured":"Lemieux, C., Park, D., Beschastnikh, I.: General LTL specification mining. In: Proceedings fo ASE 2015, pp. 81\u201392 (2015)","DOI":"10.1109\/ASE.2015.71"},{"issue":"5","key":"2_CR19","doi-asserted-by":"crossref","first-page":"293","DOI":"10.1016\/j.jlap.2008.08.004","volume":"78","author":"M Leucker","year":"2009","unstructured":"Leucker, M., Schallhart, C.: A brief account of runtime verification. J. Logic Algebraic Program. 78(5), 293\u2013303 (2009)","journal-title":"J. Logic Algebraic Program."},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Li, W., Forin, A., Seshia, S.A.: Scalable specification mining for verification and diagnosis. In: 47th ACM\/IEEE DAC, pp. 755\u2013760 (2010)","DOI":"10.1145\/1837274.1837466"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Lin, H., Slagell, A., Di Martino, C., et al.: Adapting bro into SCADA: building a specification-based intrusion detection system for the DNP3 protocol. In: Proceedings of CSIIRW 2013, pp. 1\u20134 (2013)","DOI":"10.1145\/2459976.2459982"},{"issue":"1","key":"2_CR22","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1109\/TDSC.2014.2312327","volume":"12","author":"R Mitchell","year":"2014","unstructured":"Mitchell, R., Chen, I.R.: Behavior rule specification-based intrusion detection for safety critical medical cyber physical systems. IEEE Trans Depend. Sec. Comp. 12(1), 16\u201330 (2014)","journal-title":"IEEE Trans Depend. Sec. Comp."},{"key":"2_CR23","doi-asserted-by":"crossref","unstructured":"Pnueli, A.: The temporal logic of programs. In: Proceedings of SFCS 1977, pp. 46\u201357. IEEE Computer Society, Washington, DC (1977)","DOI":"10.1109\/SFCS.1977.32"},{"key":"2_CR24","first-page":"342","volume":"14","author":"DO Puaun","year":"2003","unstructured":"Puaun, D.O., Chechik, M.: On closure under stuttering. FAC 14, 342\u2013368 (2003)","journal-title":"FAC"},{"key":"2_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"233","DOI":"10.1007\/978-3-319-23820-3_15","volume-title":"Runtime Verification","author":"J Schumann","year":"2015","unstructured":"Schumann, J., Moosbrugger, P., Rozier, K.Y.: R2U2: monitoring and diagnosis of security threats for unmanned aerial systems. In: Bartocci, E., Majumdar, R. (eds.) RV 2015. LNCS, vol. 9333, pp. 233\u2013249. Springer, Heidelberg (2015). doi: 10.1007\/978-3-319-23820-3_15"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE S&P, pp. 305\u2013316 (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"Stouffer, K., Falco, J., Scarfone, K.: Spp. 800\u201382 Rev 2. Guide to Industrial Control Systems (ICS) Security. NIST (2015)","DOI":"10.6028\/NIST.SP.800-82r2"},{"key":"2_CR28","doi-asserted-by":"crossref","unstructured":"Vardi, M.Y.: An automata-theoretic approach to linear temporal logic. In: Banff Higher Order Workshop 1995 (1996)","DOI":"10.1007\/3-540-60915-6_6"},{"key":"2_CR29","doi-asserted-by":"crossref","unstructured":"Yoon, M.k., Ciocarlie, G.F.: Communication pattern monitoring: improving the utility of anomaly detection for industrial control systems. In: SENT (2014)","DOI":"10.14722\/sent.2014.23012"},{"key":"2_CR30","doi-asserted-by":"crossref","unstructured":"Zimmer, C., Bhat, B., et al.: Time-based intrusion detection in cyber-physical systems. In: Proceedings of First ACM\/IEEE International Conference on CPS, pp. 109\u2013118 (2010)","DOI":"10.1145\/1795194.1795210"}],"container-title":["Lecture Notes in Computer Science","Secure IT Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-47560-8_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,9]],"date-time":"2022-07-09T19:12:58Z","timestamp":1657393978000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-47560-8_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319475592","9783319475608"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-47560-8_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}