{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T15:25:54Z","timestamp":1791386754034,"version":"4.3.3"},"reference-count":83,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T00:00:00Z","timestamp":1763942400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T00:00:00Z","timestamp":1763942400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1007\/s10207-025-01161-6","type":"journal-article","created":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T15:21:20Z","timestamp":1763997680000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["A new method for detecting beaconing attacks in IoT-based scada systems"],"prefix":"10.1007","volume":"24","author":[{"given":"Ferdi","family":"Do\u011fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Onur","family":"Polat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fahri","family":"Yardimci","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,11,24]]},"reference":[{"key":"1161_CR1","doi-asserted-by":"publisher","unstructured":"He, W., Baig, M.J.A., Iqbal, M.T.: An Internet of Things\u2014Supervisory Control and Data Acquisition (IoT-SCADA) Architecture for Photovoltaic System Monitoring, Control, and Inspection in Real Time, Electronics. 14(1), 42 (2024). https:\/\/doi.org\/10.3390\/electronics14010042","DOI":"10.3390\/electronics14010042"},{"key":"1161_CR2","doi-asserted-by":"publisher","unstructured":"Ferlito, S., Ippolito, S., Santagata, C., Schiattarella, P., Di Francia, G.: A Study on an IoT-Based SCADA System for Photovoltaic Utility Plants, Electronics. 13(11), 2024 (2065). https:\/\/doi.org\/10.3390\/electronics13112065","DOI":"10.3390\/electronics13112065"},{"issue":"03","key":"1161_CR3","doi-asserted-by":"publisher","first-page":"2232","DOI":"10.30574\/wjarr.2024.22.3.1485","volume":"22","author":"A Enemosah","year":"2024","unstructured":"Enemosah, A., Ifeanyi, O.G.: Cloud security frameworks for protecting IoT devices and SCADA systems in automated environments. World J. Adv. Res. Reviews. 22(03), 2232\u20132252 (2024). https:\/\/doi.org\/10.30574\/wjarr.2024.22.3.1485","journal-title":"World J. Adv. Res. Reviews"},{"key":"1161_CR4","doi-asserted-by":"publisher","unstructured":"Phuyal, S., Bista, D., Izykowski, J., Bista, R.: Design and implementation of cost efficient SCADA system for industrial automation, International Journal of Engineering and Manufacturing. 10(2), 15 (2020). https:\/\/doi.org\/10.5815\/ijem.2020.02.02","DOI":"10.5815\/ijem.2020.02.02"},{"key":"1161_CR5","doi-asserted-by":"publisher","unstructured":"Abu-Jassar, A.T., et al.: Electronic user authentication key for access to HMI\/SCADA via unsecured internet networks, Computational intelligence and neuroscience. 2022(1), 5866922 (2022). https:\/\/doi.org\/10.1155\/2022\/5866922","DOI":"10.1155\/2022\/5866922"},{"key":"1161_CR6","unstructured":"Smith, J., Brown, T.: IoT Integration in SCADA Systems: Challenges and Opportunities, in Proceedings of the International Conference on Industrial IoT. 45(3 ed.), 123\u2013134 (2023)"},{"key":"1161_CR7","unstructured":"Evans, P.C., Annunziata, M.: Industrial internet: Pushing the boundaries. Gen. Electr. Rep. pp. 488\u2013508, (2012)"},{"issue":"5","key":"1161_CR8","first-page":"3456","volume":"17","author":"B Miller","year":"2021","unstructured":"Miller, B., Rowe, D.: A survey on SCADA cybersecurity: Threats and countermeasures. IEEE Trans. Industr. Inf. 17(5), 3456\u20133465 (2021)","journal-title":"IEEE Trans. Industr. Inf."},{"key":"1161_CR9","unstructured":"Foundation, O.: OWASP Top 10: The Ten Most Critical Web Application Security Risks, 2021. [Online]. Available: https:\/\/owasp.org"},{"key":"1161_CR10","unstructured":"Ponemon, I.: Cost of Cybersecurity Breaches in Industrial Systems, 2023. [Online]. Available: https:\/\/ponemon.org"},{"issue":"2","key":"1161_CR11","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1007\/978-3-031-34843-3_5","volume":"12","author":"Y Zhang","year":"2023","unstructured":"Zhang, Y., Lee, J.: Trends in IoT and SCADA security research: A bibliometric analysis. J. Cybersecur. Res. 12(2), 89\u2013102 (2023)","journal-title":"J. Cybersecur. Res."},{"key":"1161_CR12","unstructured":"C\u00e1rdenas, A.A., Amin, S., Sastry, S.: Research challenges for the security of control systems, HotSec. 5(15), 1158 (2008)"},{"issue":"1","key":"1161_CR13","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1109\/JSYST.2023.3270620","volume":"18","author":"B Babayigit","year":"2023","unstructured":"Babayigit, B., Abubaker, M.: Industrial internet of things: A review of improvements over traditional scada systems for industrial automation. IEEE Syst. J. 18(1), 120\u2013133 (2023). https:\/\/doi.org\/10.1109\/JSYST.2023.3270620","journal-title":"IEEE Syst. J."},{"key":"1161_CR14","unstructured":"Hofbauer, J.: Malware beaconing detection with jupyter notebooks, Technische Hochschule Ingolstadt, (2023)"},{"issue":"8","key":"1161_CR15","doi-asserted-by":"publisher","first-page":"pp1","DOI":"10.1145\/3547331","volume":"55","author":"M Lyu","year":"2022","unstructured":"Lyu, M., Gharakheili, H.H., Sivaraman, V.: A survey on DNS encryption: Current development, malware misuse, and inference techniques. ACM Comput. Surveys. 55(8), pp1\u201328 (2022). https:\/\/doi.org\/10.1145\/3547331","journal-title":"ACM Comput. Surveys"},{"key":"1161_CR16","doi-asserted-by":"publisher","unstructured":"Mughaid, A., et al.: Enhancing cybersecurity in scada iot systems: A novel machine learning-based approach for man-in-the-middle attack detection, in., 3rd Intelligent Cybersecurity Conference (ICSC), 2023: IEEE, pp. 74\u201379, (2023). https:\/\/doi.org\/10.1109\/ICSC60084.2023.10349993","DOI":"10.1109\/ICSC60084.2023.10349993"},{"key":"1161_CR17","doi-asserted-by":"publisher","unstructured":"Le, V.-H., Zhang, H.: Log-based anomaly detection with deep learning: How far are we? in Proceedings of the 44th international conference on software engineering, pp. 1356\u20131367, (2022). https:\/\/doi.org\/10.1145\/3510003.3510155","DOI":"10.1145\/3510003.3510155"},{"key":"1161_CR18","doi-asserted-by":"publisher","unstructured":"Ongun, T. PORTFILER: port-level network profiling for self-propagating malware detection, in: IEEE Conference on Communications and Network Security (CNS), 2021: IEEE, pp. 182\u2013190, (2021). https:\/\/doi.org\/10.1109\/CNS53000.2021.9705045","DOI":"10.1109\/CNS53000.2021.9705045"},{"key":"1161_CR19","doi-asserted-by":"publisher","first-page":"126789","DOI":"10.1109\/ACCESS.2021.3111420","volume":"9","author":"AB Ajmal","year":"2021","unstructured":"Ajmal, A.B., Alam, M., Khaliq, A.A., Khan, S., Qadir, Z., Mahmud, M.P.: Last line of defense: Reliability through inducing cyber threat hunting with deception in scada networks. IEEE Access. 9, 126789\u2013126800 (2021). https:\/\/doi.org\/10.1109\/ACCESS.2021.3111420","journal-title":"IEEE Access."},{"issue":"1","key":"1161_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.29109\/http-gujsc-gazi-edu-tr.364411","volume":"6","author":"E Irmak","year":"2018","unstructured":"Irmak, E., Erkek, \u0130.: End\u00fcstriyel kontrol sistemleri ve scada uygulamalar\u0131n\u0131n siber g\u00fcvenli\u011fi: Modbus Tcp protokol\u00fc \u00f6rne\u011fi. Gazi Univ. J. Sci. Part. C: Des. Technol. 6(1), 1\u201316 (2018). https:\/\/doi.org\/10.29109\/http-gujsc-gazi-edu-tr.364411","journal-title":"Gazi Univ. J. Sci. Part. C: Des. Technol."},{"key":"1161_CR21","doi-asserted-by":"publisher","unstructured":"Gao, W., Morris, T.H.: On cyber attacks and signature based intrusion detection for Modbus based industrial control systems. J. Digit. Forensics Secur. Law. 9(1) (2014). https:\/\/doi.org\/10.15394\/jdfsl.2014.1162","DOI":"10.15394\/jdfsl.2014.1162"},{"issue":"1","key":"1161_CR22","doi-asserted-by":"publisher","first-page":"101784","DOI":"10.1016\/j.giq.2022.101784","volume":"40","author":"Z Irani","year":"2023","unstructured":"Irani, Z., Abril, R.M., Weerakkody, V., Omar, A., Sivarajah, U.: The impact of legacy systems on digital transformation in European public administration: Lesson learned from a multi case analysis. Government Inform. Q. 40(1), 101784 (2023). https:\/\/doi.org\/10.1016\/j.giq.2022.101784","journal-title":"Government Inform. Q."},{"key":"1161_CR23","doi-asserted-by":"publisher","unstructured":"Hurst, W., Shone, N.: Critical infrastructure security: Cyber-threats, legacy systems and weakening segmentation. In: Management and Engineering of Critical Infrastructures, pp. 265\u2013286. Elsevier (2024). https:\/\/doi.org\/10.1016\/B978-0-323-99330-2.00010-6","DOI":"10.1016\/B978-0-323-99330-2.00010-6"},{"key":"1161_CR24","doi-asserted-by":"publisher","unstructured":"Trnka, M., Abdelfattah, A.S., Shrestha, A., Coffey, M., Cerny, T.: Systematic review of authentication and authorization advancements for the Internet of Things, Sensors. 22(4), 1361 (2022). https:\/\/doi.org\/10.3390\/s22041361","DOI":"10.3390\/s22041361"},{"issue":"1","key":"1161_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.jdec.2022.07.001","volume":"1","author":"R Cao","year":"2022","unstructured":"Cao, R., Iansiti, M.: Digital transformation, data architecture, and legacy systems. J. Digit. Econ. 1(1), 1\u201319 (2022). https:\/\/doi.org\/10.1016\/j.jdec.2022.07.001","journal-title":"J. Digit. Econ."},{"issue":"5","key":"1161_CR26","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1109\/MAES.2017.160047","volume":"32","author":"L Fillatre","year":"2017","unstructured":"Fillatre, L., Nikiforov, I., Willett, P.: Security of SCADA systems against cyber\u2013physical attacks. IEEE Aerosp. Electron. Syst. Mag. 32(5), 28\u201345 (2017). https:\/\/doi.org\/10.1109\/MAES.2017.160047","journal-title":"IEEE Aerosp. Electron. Syst. Mag."},{"key":"1161_CR27","doi-asserted-by":"publisher","first-page":"100433","DOI":"10.1016\/j.ijcip.2021.100433","volume":"34","author":"G Yadav","year":"2021","unstructured":"Yadav, G., Paul, K.: Architecture and security of SCADA systems: A review. Int. J. Crit. Infrastruct. Prot. 34, 100433 (2021). https:\/\/doi.org\/10.1016\/j.ijcip.2021.100433","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"1161_CR28","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3447876","author":"N Yal\u00e7\u0131n","year":"2024","unstructured":"Yal\u00e7\u0131n, N., \u00c7ak\u0131r, S., \u00dcald\u0131, S.: Attack detection using artificial intelligence methods for SCADA security. IEEE Internet Things J. (2024). https:\/\/doi.org\/10.1109\/JIOT.2024.3447876","journal-title":"IEEE Internet Things J."},{"issue":"6","key":"1161_CR29","doi-asserted-by":"publisher","first-page":"e444","DOI":"10.1002\/spy2.444","volume":"7","author":"S Kumar","year":"2024","unstructured":"Kumar, S., Ahlawat, P., Sahni, J.: IOT malware detection using static and dynamic analysis techniques: A systematic literature review. Secur. Priv. 7(6), e444 (2024). https:\/\/doi.org\/10.1002\/spy2.444","journal-title":"Secur. Priv."},{"issue":"3","key":"1161_CR30","doi-asserted-by":"publisher","first-page":"1942","DOI":"10.1109\/COMST.2020.2987688","volume":"22","author":"D Pliatsios","year":"2020","unstructured":"Pliatsios, D., Sarigiannidis, P., Lagkas, T., Sarigiannidis, A.G.: A survey on SCADA systems: Secure protocols, incidents, threats and tactics. IEEE Commun. Surv. Tutorials. 22(3), 1942\u20131976 (2020). https:\/\/doi.org\/10.1109\/COMST.2020.2987688","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"20","key":"1161_CR31","doi-asserted-by":"publisher","first-page":"2498","DOI":"10.3923\/jas.2014.2498.2506","volume":"14","author":"A Shahzad","year":"2014","unstructured":"Shahzad, A., Musa, S., Irfan, M., Asadullah, S.: Key encryption method for SCADA security enhancement. J. Appl. Sci. 14(20), 2498\u20132506 (2014). https:\/\/doi.org\/10.3923\/jas.2014.2498.2506","journal-title":"J. Appl. Sci."},{"issue":"3","key":"1161_CR32","doi-asserted-by":"publisher","first-page":"312","DOI":"10.1080\/02564602.2023.2246426","volume":"41","author":"A Nechibvute","year":"2024","unstructured":"Nechibvute, A., Mafukidze, H.: Integration of scada and industrial iot: Opportunities and challenges. IETE Tech. Rev. 41(3), 312\u2013325 (2024). https:\/\/doi.org\/10.1080\/02564602.2023.2246426","journal-title":"IETE Tech. Rev."},{"key":"1161_CR33","doi-asserted-by":"publisher","first-page":"101645","DOI":"10.1016\/j.rineng.2023.101645","volume":"21","author":"AD Scaife","year":"2024","unstructured":"Scaife, A.D.: Improve predictive maintenance through the application of artificial intelligence: A systematic review. Results Eng. 21, 101645 (2024). https:\/\/doi.org\/10.1016\/j.rineng.2023.101645","journal-title":"Results Eng."},{"issue":"5","key":"1161_CR34","doi-asserted-by":"publisher","first-page":"499","DOI":"10.1080\/19393555.2021.1934196","volume":"31","author":"N Hossain","year":"2022","unstructured":"Hossain, N., Das, T., Islam, T., Alam Hossain, M.: Cyber security risk assessment method for SCADA system. Inform. Secur. Journal: Global Perspective. 31(5), 499\u2013510 (2022). https:\/\/doi.org\/10.1080\/19393555.2021.1934196","journal-title":"Inform. Secur. Journal: Global Perspective"},{"key":"1161_CR35","doi-asserted-by":"publisher","first-page":"103028","DOI":"10.1016\/j.cose.2022.103028","volume":"125","author":"M Alanazi","year":"2023","unstructured":"Alanazi, M., Mahmood, A., Chowdhury, M.J.M.: SCADA vulnerabilities and attacks: A review of the state-of\u2010the\u2010art and open issues. Computers Secur. 125, 103028 (2023). https:\/\/doi.org\/10.1016\/j.cose.2022.103028","journal-title":"Computers Secur."},{"key":"1161_CR36","unstructured":"Conway, T., Lee, R., Assante, M.: Analysis of the cyber attack on the Ukrainian power grid. Electricity Inform. Shar. Anal. Cent. (2016)"},{"key":"1161_CR37","doi-asserted-by":"publisher","first-page":"18","DOI":"10.13140\/RG.2.2.33191.56486","volume":"8","author":"F Basholli","year":"2023","unstructured":"Basholli, F., Mema, B., Hyka, D., Basholli, A., Daberdini, A.: Analysis of security challenges in SCADA systems, a technical review on automated real-time systems. Adv. Eng. Days (AED). 8, 18\u201322 (2023). https:\/\/doi.org\/10.13140\/RG.2.2.33191.56486","journal-title":"Adv. Eng. Days (AED)"},{"issue":"3","key":"1161_CR38","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1109\/MSP.2011.67","volume":"9","author":"R Langner","year":"2011","unstructured":"Langner, R.: Stuxnet: Dissecting a cyberwarfare weapon. IEEE Secur. Priv. 9(3), 49\u201351 (2011). https:\/\/doi.org\/10.1109\/MSP.2011.67","journal-title":"IEEE Secur. Priv."},{"key":"1161_CR39","doi-asserted-by":"publisher","unstructured":"Zhu, B., Joseph, A., Sastry, S.: A taxonomy of cyber attacks on SCADA systems, in International conference on internet of things and 4th international conference on cyber, physical and social computing, 2011: IEEE, pp. 380\u2013388, https:\/\/doi.org\/10.1109\/iThings\/CPSCom.2011.34. (2011)","DOI":"10.1109\/iThings\/CPSCom.2011.34"},{"key":"1161_CR40","doi-asserted-by":"publisher","first-page":"109489","DOI":"10.1016\/j.compeleceng.2024.109489","volume":"119","author":"MN Al-Mhiqani","year":"2024","unstructured":"Al-Mhiqani, M.N., Alsboui, T., Al-Shehari, T., hameed Abdulkareem, K., Ahmad, R., Mohammed, M.A.: Insider threat detection in cyber-physical systems: A systematic literature review. Comput. Electr. Eng. 119, 109489 (2024). https:\/\/doi.org\/10.1016\/j.compeleceng.2024.109489","journal-title":"Comput. Electr. Eng."},{"key":"1161_CR41","doi-asserted-by":"publisher","unstructured":"Chowhan, S., Saxena, A.K.: Advanced techniques in network traffic analysis: Utilizing wireshark for in-depth live data packet inspection and information capture, in International Conference on Communication, Security and Artificial Intelligence (ICCSAI), 2023: IEEE, pp. 843\u2013847, (2023). https:\/\/doi.org\/10.1109\/ICCSAI59793.2023.10421631","DOI":"10.1109\/ICCSAI59793.2023.10421631"},{"key":"1161_CR42","doi-asserted-by":"crossref","unstructured":"Anilkumar, A., Shibu, A., Varghese, M.A., Sajan, P.P., Sreedeep, A.: Detecting and Analysing Network Logs Using Machine Learning Techniques, Revista geintec-gestao inovacao E tecnologias. 11(3), 271\u2013286, (2021)","DOI":"10.47059\/revistageintec.v11i3.1937"},{"key":"1161_CR43","doi-asserted-by":"publisher","unstructured":"Tiwari, A., Saraswat, S., Dixit, U., Pandey, S., Refinements in Zeek intrusion detection system, in: 8th International Conference on Advanced Computing and Communication Systems (ICACCS), 2022, 1: IEEE, pp. 974\u2013979, (2022). https:\/\/doi.org\/10.1109\/ICACCS54159.2022.9785047","DOI":"10.1109\/ICACCS54159.2022.9785047"},{"key":"1161_CR44","doi-asserted-by":"publisher","unstructured":"Maasaoui, Z., Merzouki, M., Bekri, A., Abane, A., Battou, A., Lbath, A.: Design and Implementation of an Automated Network Traffic Analysis System using Elastic Stack, in 20th ACS\/IEEE International Conference on Computer Systems and Applications (AICCSA), 2023: IEEE, pp. 1\u20136, (2023). https:\/\/doi.org\/10.1109\/AICCSA59173.2023.10479347","DOI":"10.1109\/AICCSA59173.2023.10479347"},{"issue":"6","key":"1161_CR45","first-page":"1","volume":"5","author":"R Mala","year":"2023","unstructured":"Mala, R., Brij, S.A., Sharma, A.: Exploring wireshark for network traffic analysis. Int. J. Multidiscip Res. 5(6), 1\u201312 (2023)","journal-title":"Int. J. Multidiscip Res."},{"key":"1161_CR46","doi-asserted-by":"publisher","unstructured":"Gingade, S.S., Nagashree, B., Mohan, R.: Real Time Network Traffic Analysis and Visualization using Wireshark and Google Maps, in 3rd International Conference on Innovative Mechanisms for Industry Applications (ICIMIA), 2023: IEEE, pp. 1289\u20131295, (2023). https:\/\/doi.org\/10.1109\/ICIMIA60377.2023.10426152","DOI":"10.1109\/ICIMIA60377.2023.10426152"},{"issue":"4","key":"1161_CR47","doi-asserted-by":"publisher","first-page":"616","DOI":"10.12720\/jait.14.4.616-624","volume":"14","author":"N Alsharabi","year":"2023","unstructured":"Alsharabi, N., Alqunun, M., Murshed, B.A.H.: Detecting unusual activities in local network using snort and wireshark tools. J. Adv. Inform. Technol. 14(4), 616\u2013624 (2023). https:\/\/doi.org\/10.12720\/jait.14.4.616-624","journal-title":"J. Adv. Inform. Technol."},{"key":"1161_CR48","doi-asserted-by":"publisher","unstructured":"Jain, G.: Application of snort and wireshark in network traffic analysis, in IOP Conference Series: Materials Science and Engineering. 1119(1: IOP Publishing), 012007 (2021). https:\/\/doi.org\/10.1088\/1757-899X\/1119\/1\/012007","DOI":"10.1088\/1757-899X\/1119\/1\/012007"},{"key":"1161_CR49","doi-asserted-by":"publisher","unstructured":"Dhakad, A., Singh, S., Moharir, M., AR, A.K.: Real time network traffic analysis using artificial intelligence, machine learning and deep learning: A review of methods, tools and applications, in International Conference on Self Sustainable Artificial Intelligence Systems (ICSSAS), 2023: IEEE, pp. 372\u2013378, (2023). https:\/\/doi.org\/10.1109\/ICSSAS57918.2023.10331855","DOI":"10.1109\/ICSSAS57918.2023.10331855"},{"key":"1161_CR50","doi-asserted-by":"publisher","unstructured":"Chaturvedi, A., Lakhani, B., Agarwal, T., Moharir, M., AR, A.K.: A Comprehensive Vulnerability Tools Analysis for Security and Control in IT Environment and Organizations, in 5th International Conference on Electronics and Sustainable Communication Systems (ICESC), 2024: IEEE, pp. 612\u2013618, (2024). https:\/\/doi.org\/10.1109\/ICESC60852.2024.10689860","DOI":"10.1109\/ICESC60852.2024.10689860"},{"key":"1161_CR51","doi-asserted-by":"publisher","unstructured":"Sommer, R., Paxson, V.: Enhancing byte-level network intrusion detection signatures with context, in Proceedings of the 10th ACM conference on Computer and communications security, pp. 262\u2013271, (2003). https:\/\/doi.org\/10.1109\/SP.2010.25","DOI":"10.1109\/SP.2010.25"},{"key":"1161_CR52","doi-asserted-by":"publisher","unstructured":"Wilkens, F., Haas, S., Amann, J., Fischer, M.: Passive, transparent, and selective TLS decryption for network security monitoring, in IFIP International Conference on ICT Systems Security and Privacy Protection. Springer, pp. 87\u2013105, (2022). https:\/\/doi.org\/10.1007\/978-3-031-06975-8_6","DOI":"10.1007\/978-3-031-06975-8_6"},{"key":"1161_CR53","doi-asserted-by":"publisher","unstructured":"Haas, S., Sommer, R., Fischer, M.: Zeek-osquery: Host-network correlation for advanced monitoring and intrusion detection, in IFIP International Conference on ICT Systems Security and Privacy Protection. Springer, pp. 248\u2013262, (2020). https:\/\/doi.org\/10.1007\/978-3-030-58201-2_17","DOI":"10.1007\/978-3-030-58201-2_17"},{"key":"1161_CR54","doi-asserted-by":"publisher","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: On using machine learning for network intrusion detection, in 2010 IEEE symposium on security and privacy, IEEE, pp. 305\u2013316, (2010). https:\/\/doi.org\/10.1109\/SP.2010.25","DOI":"10.1109\/SP.2010.25"},{"key":"1161_CR55","doi-asserted-by":"publisher","unstructured":"Yin, C., Zhu, Y., Fei, J., He, X.: A deep learning approach for intrusion detection using recurrent neural networks, Ieee Access. 5, 21954\u201321961 (2017). https:\/\/doi.org\/10.1109\/ACCESS.2017.2762418.","DOI":"10.1109\/ACCESS.2017.2762418"},{"key":"1161_CR56","doi-asserted-by":"publisher","first-page":"e3163","DOI":"10.7717\/peerj-cs.3163","volume":"11","author":"F Do\u011fan","year":"2025","unstructured":"Do\u011fan, F., Oyucu, S., Bicer, E., Aksoz, A.: Deep learning models for damage type detection in wind turbines. PeerJ Comput. Sci. 11, e3163 (2025). https:\/\/doi.org\/10.7717\/peerj-cs.3163","journal-title":"PeerJ Comput. Sci."},{"key":"1161_CR57","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","volume":"86","author":"M Ring","year":"2019","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Computers Secur. 86, 147\u2013167 (2019). https:\/\/doi.org\/10.1016\/j.cose.2019.06.005","journal-title":"Computers Secur."},{"key":"1161_CR58","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","volume":"45","author":"S Garcia","year":"2014","unstructured":"Garcia, S., Grill, M., Stiborek, J., Zunino, A.: An empirical comparison of botnet detection methods. Computers Secur. 45, 100\u2013123 (2014). https:\/\/doi.org\/10.1016\/j.cose.2014.05.011","journal-title":"Computers Secur."},{"key":"1161_CR59","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-025-01096-5","author":"V Monemizadeh","year":"2025","unstructured":"Monemizadeh, V., Kiani, K.: Detecting anomalies using rotated isolation forest. ArXiv Preprint arXiv:2501 17787. (2025). https:\/\/doi.org\/10.1007\/s10618-025-01096-5","journal-title":"ArXiv Preprint arXiv:2501 17787"},{"key":"1161_CR60","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3577761","author":"O Polat","year":"2025","unstructured":"Polat, O., Ahmad, A.A., Oyucu, S., Alg\u00fcl, E., Do\u011fan, F., Aks\u00f6z, A.: Temporal-Spatial feature extraction in IoT-based SCADA system security: Hybrid CNN-LSTM and Attention-Based architectures for malware classification and attack detection. IEEE Access. (2025). https:\/\/doi.org\/10.1109\/ACCESS.2025.3577761","journal-title":"IEEE Access."},{"key":"1161_CR61","doi-asserted-by":"publisher","unstructured":"Mohammad, N., Shahjahan, M.: Design and Development of IoT based Supervisory Control and Data Acquisition System, in 5th International Conference on Advances in Electrical Engineering (ICAEE), 2019: IEEE, pp. 306\u2013311, (2019). https:\/\/doi.org\/10.1109\/ICAEE48663.2019.8975695","DOI":"10.1109\/ICAEE48663.2019.8975695"},{"issue":"01","key":"1161_CR62","doi-asserted-by":"publisher","first-page":"3417","DOI":"10.30574\/ijsra.2024.13.1.1975","volume":"13","author":"A Enemosah","year":"2024","unstructured":"Enemosah, A., Ifeanyi, O.G.: SCADA in the era of iot: automation, cloud-driven security, and machine learning applications. Int. J. Sci. Res. Archive. 13(01), 3417\u20133435 (2024). https:\/\/doi.org\/10.30574\/ijsra.2024.13.1.1975","journal-title":"Int. J. Sci. Res. Archive"},{"issue":"20","key":"1161_CR63","doi-asserted-by":"publisher","first-page":"4554","DOI":"10.1049\/gtd2.12951","volume":"17","author":"MA Sheba","year":"2023","unstructured":"Sheba, M.A., Mansour, D.E.A., Abbasy, N.H.: A new low-cost and low\u2010power industrial internet of things infrastructure for effective integration of distributed and isolated systems with smart grids. IET Generation Transmission Distribution. 17(20), 4554\u20134573 (2023). https:\/\/doi.org\/10.1049\/gtd2.12951","journal-title":"IET Generation Transmission Distribution"},{"issue":"1","key":"1161_CR64","doi-asserted-by":"publisher","first-page":"57","DOI":"10.3934\/ElectrEng.2020.1.57","volume":"4","author":"LO Aghenta","year":"2019","unstructured":"Aghenta, L.O., Iqbal, T.: Design and implementation of a low-cost, open source IoT-based SCADA system using ESP32 with OLED, thingsboard and MQTT protocol. AIMS Electron. Electr. Eng. 4(1), 57\u201386 (2019). https:\/\/doi.org\/10.3934\/ElectrEng.2020.1.57","journal-title":"AIMS Electron. Electr. Eng."},{"issue":"10","key":"1161_CR65","doi-asserted-by":"publisher","first-page":"14637","DOI":"10.1007\/s11042-020-10371-0","volume":"80","author":"SA Khowaja","year":"2021","unstructured":"Khowaja, S.A., Khuwaja, P.: Q-learning and LSTM based deep active learning strategy for malware defense in industrial IoT applications. Multimedia Tools Appl. 80(10), 14637\u201314663 (2021). https:\/\/doi.org\/10.1007\/s11042-020-10371-0","journal-title":"Multimedia Tools Appl."},{"key":"1161_CR66","doi-asserted-by":"publisher","unstructured":"Tom, R.J., Sankaranarayanan, S.: IoT based SCADA integrated with Fog for power distribution automation, in 12th Iberian Conference on Information Systems and Technologies (CISTI), 2017: IEEE, pp. 1\u20134, https:\/\/doi.org\/10.23919\/CISTI.2017.7975732. (2017)","DOI":"10.23919\/CISTI.2017.7975732"},{"issue":"7","key":"1161_CR67","doi-asserted-by":"publisher","first-page":"9989","DOI":"10.1007\/s11042-022-12130-9","volume":"81","author":"FA Osman","year":"2022","unstructured":"Osman, F.A., Hashem, M.Y., Eltokhy, M.A.: Secured cloud SCADA system implementation for industrial applications. Multimedia Tools Appl. 81(7), 9989\u201310005 (2022). https:\/\/doi.org\/10.1007\/s11042-022-12130-9","journal-title":"Multimedia Tools Appl."},{"key":"1161_CR68","doi-asserted-by":"publisher","unstructured":"Ahmed, M.S., et al.: Pilot Deployment of IIoT-SCADA by Leveraging Low Power Communication Technologies, Sensors, and Legacy Scada Controllers, in Abu Dhabi International Petroleum Exhibition and Conference. SPE, p. D021S074R003, (2023). https:\/\/doi.org\/10.2118\/216298-MS","DOI":"10.2118\/216298-MS"},{"key":"1161_CR69","doi-asserted-by":"publisher","unstructured":"K Aikins, S.: Managing cybersecurity risks of SCADA networks of critical infrastructures in the IoT environment. Secur. Priv. Trust IoT Environ. 3\u201323 (2019). https:\/\/doi.org\/10.1007\/978-3-030-18075-1_1","DOI":"10.1007\/978-3-030-18075-1_1"},{"key":"1161_CR70","doi-asserted-by":"publisher","first-page":"1375","DOI":"10.1109\/ACCESS.2016.2549047","volume":"4","author":"A Sajid","year":"2016","unstructured":"Sajid, A., Abbas, H., Saleem, K.: Cloud-assisted IoT-based SCADA systems security: A review of the state of the Art and future challenges. Ieee Access. 4, 1375\u20131384 (2016). https:\/\/doi.org\/10.1109\/ACCESS.2016.2549047","journal-title":"Ieee Access."},{"key":"1161_CR71","doi-asserted-by":"publisher","unstructured":"Adame, T., Bel, A., Bellalta, B.: Increasing LPWAN scalability by means of concurrent multiband IoT technologies: an industry 4.0 use case, 2019. https:\/\/doi.org\/10.1109\/ACCESS.2019.2909408","DOI":"10.1109\/ACCESS.2019.2909408"},{"key":"1161_CR72","doi-asserted-by":"publisher","unstructured":"Susto, G.A., Schirru, A., Pampuri, S., McLoone, S., Beghi, A.: Machine learning for predictive maintenance: A multiple classifier approach, IEEE transactions on industrial informatics. 11(3), 812\u2013820 (2014). https:\/\/doi.org\/10.1109\/TII.2014.2349359.","DOI":"10.1109\/TII.2014.2349359"},{"issue":"1","key":"1161_CR73","doi-asserted-by":"publisher","first-page":"1030","DOI":"10.1109\/TII.2022.3190352","volume":"19","author":"F Khan","year":"2022","unstructured":"Khan, F., Alturki, R., Rahman, M.A., Mastorakis, S., Razzak, I., Shah, S.T.: Trustworthy and reliable deep-learning-based cyberattack detection in industrial IoT. IEEE Trans. Industr. Inf. 19(1), 1030\u20131038 (2022). https:\/\/doi.org\/10.1109\/TII.2022.3190352","journal-title":"IEEE Trans. Industr. Inf."},{"key":"1161_CR74","doi-asserted-by":"publisher","unstructured":"Lauridsen, M., Krigslund, R., Rohr, M., Madueno, G.: An empirical NB-IoT power consumption model for battery lifetime estimation, in IEEE 87th Vehicular Technology Conference (VTC Spring), 2018: IEEE, pp. 1\u20135, (2018). https:\/\/doi.org\/10.1109\/VTCSpring.2018.8417653","DOI":"10.1109\/VTCSpring.2018.8417653"},{"key":"1161_CR75","doi-asserted-by":"publisher","unstructured":"Liu, F.T., Ting, K.M., Zhou, Z.-H.: Isolation forest, in eighth ieee international conference on data mining, 2008: IEEE, pp. 413\u2013422, (2008). https:\/\/doi.org\/10.1109\/ICDM.2008.17","DOI":"10.1109\/ICDM.2008.17"},{"key":"1161_CR76","doi-asserted-by":"publisher","first-page":"109","DOI":"10.1016\/j.patrec.2021.05.022","volume":"149","author":"J Lesouple","year":"2021","unstructured":"Lesouple, J., Baudoin, C., Spigai, M., Tourneret, J.-Y.: Generalized isolation forest for anomaly detection. Pattern Recognit. Lett. 149, 109\u2013119 (2021). https:\/\/doi.org\/10.1016\/j.patrec.2021.05.022","journal-title":"Pattern Recognit. Lett."},{"issue":"4","key":"1161_CR77","doi-asserted-by":"publisher","first-page":"1479","DOI":"10.1109\/TKDE.2019.2947676","volume":"33","author":"S Hariri","year":"2019","unstructured":"Hariri, S., Kind, M.C., Brunner, R.J.: Extended isolation forest. IEEE Trans. Knowl. Data Eng. 33(4), 1479\u20131489 (2019). https:\/\/doi.org\/10.1109\/TKDE.2019.2947676","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"1161_CR78","doi-asserted-by":"publisher","unstructured":"Xu, D., Wang, Y., Meng, Y., Zhang, Z.: An improved data anomaly detection method based on isolation forest, in 10th international symposium on computational intelligence and design (ISCID), 2017, 2: IEEE, pp. 287\u2013291, (2017). https:\/\/doi.org\/10.1109\/ISCID.2017.202","DOI":"10.1109\/ISCID.2017.202"},{"key":"1161_CR79","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2007.11117","author":"M Carletti","year":"2020","unstructured":"Carletti, M., Terzi, M., Susto, G.A.: Interpretable anomaly detection with diffi: Depth-based isolation forest feature importance. ArXiv Preprint arXiv:2007 11117. (2020). https:\/\/doi.org\/10.48550\/arXiv.2007.11117","journal-title":"ArXiv Preprint arXiv:2007 11117"},{"issue":"2","key":"1161_CR80","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/s41060-020-00238-w","volume":"13","author":"S Buschj\u00e4ger","year":"2022","unstructured":"Buschj\u00e4ger, S., Honysz, P.-J., Morik, K.: Randomized outlier detection with trees. Int. J. Data Sci. Analytics. 13(2), 91\u2013104 (2022). https:\/\/doi.org\/10.1007\/s41060-020-00238-w","journal-title":"Int. J. Data Sci. Analytics"},{"issue":"2","key":"1161_CR81","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3439950","volume":"54","author":"G Pang","year":"2021","unstructured":"Pang, G., Shen, C., Cao, L., Hengel, A.V.D.: Deep learning for anomaly detection: A review. ACM Comput. Surv. (CSUR). 54(2), 1\u201338 (2021). https:\/\/doi.org\/10.1145\/3439950","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"1161_CR82","doi-asserted-by":"publisher","unstructured":"Thing, V.L.: IEEE 802.11 network anomaly detection and attack classification: A deep learning approach, in IEEE wireless communications and networking conference (WCNC), 2017: IEEE, pp. 1\u20136, (2017). https:\/\/doi.org\/10.1109\/WCNC.2017.7925567","DOI":"10.1109\/WCNC.2017.7925567"},{"issue":"2","key":"1161_CR83","doi-asserted-by":"publisher","first-page":"30","DOI":"10.9734\/ajrcos\/2021\/v9i230218","volume":"9","author":"SH Haji","year":"2021","unstructured":"Haji, S.H., Ameen, S.Y.: Attack and anomaly detection in Iot networks using machine learning techniques: A review. Asian J. Res. Comput. Sci. 9(2), 30\u201346 (2021). https:\/\/doi.org\/10.9734\/ajrcos\/2021\/v9i230218","journal-title":"Asian J. Res. Comput. Sci."}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01161-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01161-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01161-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T06:56:27Z","timestamp":1764572187000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01161-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,24]]},"references-count":83,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["1161"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01161-6","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,24]]},"assertion":[{"value":"13 October 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 November 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 November 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"244"}}