{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:06:38Z","timestamp":1780052798749,"version":"3.54.0"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2021,4,9]],"date-time":"2021-04-09T00:00:00Z","timestamp":1617926400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,4,9]],"date-time":"2021-04-09T00:00:00Z","timestamp":1617926400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Sign Process Syst"],"published-print":{"date-parts":[[2021,7]]},"DOI":"10.1007\/s11265-021-01656-0","type":"journal-article","created":{"date-parts":[[2021,4,9]],"date-time":"2021-04-09T05:02:58Z","timestamp":1617944578000},"page":"779-794","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Fingerprinting IIoT Devices Through Machine Learning Techniques"],"prefix":"10.1007","volume":"93","author":[{"given":"Feng","family":"Zhou","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hua","family":"Qu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hailong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bo","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,4,9]]},"reference":[{"key":"1656_CR1","doi-asserted-by":"crossref","unstructured":"Bai, L., Yao, L., Kanhere, S.S., Wang, X., & Yang, Z. (2018). Automatic device classification from network traffic streams of internet of things. arXiv:1812.09882.","DOI":"10.1109\/LCN.2018.8638232"},{"key":"1656_CR2","doi-asserted-by":"crossref","unstructured":"Bates, A.M., Leonard, R., Pruse, H., & Lowd, D. (2014). Leveraging usb to establish host identity using commodity devices. In NDSS.","DOI":"10.14722\/ndss.2014.23238"},{"key":"1656_CR3","doi-asserted-by":"crossref","unstructured":"Bezawada, B., Bachani, M., Peterson, J., Shirazi, H., Ray, I., & Ray, I. (2018). Iotsense: behavioral fingerprinting of IoT devices. arXiv:1804.03852.","DOI":"10.1145\/3266444.3266452"},{"key":"1656_CR4","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1016\/j.ijcip.2014.03.001","volume":"7","author":"R Bodenheim","year":"2014","unstructured":"Bodenheim, R., Butts, J., Dunlap, S., & Mullins, B. (2014). Evaluation of the ability of the shodan search engine to identify internet-facing industrial control devices. International Journal of Critical Infrastructure Protection, 7, 114\u2013123.","journal-title":"International Journal of Critical Infrastructure Protection"},{"key":"1656_CR5","doi-asserted-by":"crossref","unstructured":"Caselli, M., Had\u017eiosmanovi\u0107, D., Zambon, E., & Kargl, F. (2013). On the feasibility of device fingerprinting in industrial control systems. Springer International Publishing.","DOI":"10.1007\/978-3-319-03964-0_14"},{"key":"1656_CR6","doi-asserted-by":"crossref","unstructured":"Chen, T., & Guestrin, C. (2016). Xgboost: a scalable tree boosting system. In Proceedings of the 22nd ACM sigkdd international conference on knowledge discovery and data mining (pp. 785\u2013794): ACM.","DOI":"10.1145\/2939672.2939785"},{"key":"1656_CR7","doi-asserted-by":"crossref","unstructured":"Endi, M., Elhalwagy, Y., & et al. (2010). Three-layer plc\/scada system architecture in process automation and data monitoring. In 2010 the 2nd international conference on computer and automation engineering (ICCAE) (pp. 774\u2013779): IEEE.","DOI":"10.1109\/ICCAE.2010.5451799"},{"key":"1656_CR8","doi-asserted-by":"publisher","first-page":"4486","DOI":"10.1109\/JIOT.2018.2822842","volume":"5","author":"G Falco","year":"2018","unstructured":"Falco, G., Caldera, C., & Shrobe, H. (2018). IIOT cybersecurity risk modeling for scada systems. IEEE Internet of Things Journal, 5, 4486\u20134495.","journal-title":"IEEE Internet of Things Journal"},{"key":"1656_CR9","doi-asserted-by":"crossref","unstructured":"Formby, D., Srinivasan, P., Leonard, A., Rogers, J., & Beyah, R.A. (2016). Who\u2019s in control of your control system? device fingerprinting for cyber-physical systems. In NDSS.","DOI":"10.14722\/ndss.2016.23142"},{"key":"1656_CR10","unstructured":"Gao, K., Corbett, C., & Beyah, R. (2010). A passive approach to wireless device fingerprinting. In 2010 IEEE\/IFIP international conference on dependable systems & networks (DSN) (pp. 383\u2013392): IEEE."},{"issue":"9","key":"1656_CR11","doi-asserted-by":"publisher","first-page":"1263","DOI":"10.1109\/TKDE.2008.239","volume":"21","author":"H He","year":"2009","unstructured":"He, H., & Garcia, E.A. (2009). Learning from imbalanced data. IEEE Transactions on Knowledge and Data Engineering, 21(9), 1263\u20131284.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"1656_CR12","doi-asserted-by":"crossref","unstructured":"Helms, J., Salazar, B., Scheibel, P., Engels, M., & Reiger, C. (2017). Safe active scanning for energy delivery systems final report. Technical Report Lawrence Livermore National Lab. (LLNL), Livermore, CA, USA.","DOI":"10.2172\/1409972"},{"key":"1656_CR13","unstructured":"Jeon, S., Yun, J.H., Choi, S., & Kim, W.N. (2016). Passive fingerprinting of scada in critical infrastructure network without deep packet inspection. arXiv:1608.07679."},{"key":"1656_CR14","doi-asserted-by":"crossref","unstructured":"Keliris, A., & Maniatakos, M. (2016). Remote field device fingerprinting using device-specific modbus information. In 2016 IEEE 59th international midwest symposium on circuits and systems (MWSCAS) (pp. 1\u20134): IEEE.","DOI":"10.1109\/MWSCAS.2016.7870006"},{"key":"1656_CR15","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1109\/TDSC.2005.26","volume":"2","author":"T Kohno","year":"2005","unstructured":"Kohno, T., Broido, A., & Claffy, K.C. (2005). Remote physical device fingerprinting. IEEE Transactions on Dependable and Secure Computing, 2, 93\u2013108.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"1656_CR16","doi-asserted-by":"publisher","first-page":"2178","DOI":"10.1109\/JIOT.2018.2826558","volume":"5","author":"Q Li","year":"2018","unstructured":"Li, Q., Feng, X., Wang, H., & Sun, L. (2018). Understanding the usage of industrial control system devices on the internet. IEEE Internet of Things Journal, 5, 2178\u20132189.","journal-title":"IEEE Internet of Things Journal"},{"key":"1656_CR17","unstructured":"Lippmann, R., Fried, D., Piwowarski, K., & Streilein, W. (2003). Passive operating system identification from tcp\/ip packet headers. In Workshop on data mining for computer security, Citeseer (p. 40)."},{"key":"1656_CR18","doi-asserted-by":"crossref","unstructured":"Lontorfos, G., Fairbanks, K.D., Watkins, L., & Robinson, W.H. (2015). Remotely inferring device manipulation of industrial control systems via network behavior. In Local computer networks conference workshops (LCN Workshops), 2015 IEEE 40th (pp. 603\u2013610): IEEE.","DOI":"10.1109\/LCNW.2015.7365904"},{"key":"1656_CR19","unstructured":"Lyon, G.F. (2009). Nmap network scanning: the official Nmap project guide to network discovery and security scanning. Insecure."},{"key":"1656_CR20","unstructured":"Mason, L., Baxter, J., Bartlett, P.L., & Frean, M.R. (2000). Boosting algorithms as gradient descent. In Advances in neural information processing systems (pp. 512\u2013518)."},{"key":"1656_CR21","unstructured":"Mavrakis, C. (2015). Passive asset discovery and operating system fingerprinting in industrial control system networks."},{"key":"1656_CR22","doi-asserted-by":"crossref","unstructured":"Miettinen, M., Marchal, S., Hafeez, I., Asokan, N., Sadeghi, A.R., & Tarkoma, S. (2017). IoT sentinel: automated device-type identification for security enforcement in IoT. In 2017 IEEE 37th international conference on distributed computing systems, ICDCS (pp. 2177\u20132184): IEEE.","DOI":"10.1109\/ICDCS.2017.283"},{"key":"1656_CR23","doi-asserted-by":"crossref","unstructured":"Milinkovi\u0107, S.A., & Lazi\u0107, L.R. (2012). Industrial plc security issues. In Telecommunications Forum (TELFOR), 2012 20th (pp. 1536\u20131539): IEEE.","DOI":"10.1109\/TELFOR.2012.6419513"},{"key":"1656_CR24","doi-asserted-by":"crossref","unstructured":"Oser, P., Kargl, F., & L\u00fcders, S. (2018). Identifying devices of the internet of things using machine learning on clock characteristics. In International conference on security, privacy and anonymity in computation, communication and storage (pp. 417\u2013427): Springer.","DOI":"10.1007\/978-3-030-05345-1_36"},{"key":"1656_CR25","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., Varoquaux, G., Gramfort, A., Michel, V., Thirion, B., Grisel, O., Blondel, M., Prettenhofer, P., Weiss, R., Dubourg, V., & et al. (2011). Scikit-learn: machine learning in python. Journal of Machine Learning Research, 12, 2825\u20132830.","journal-title":"Journal of Machine Learning Research"},{"key":"1656_CR26","doi-asserted-by":"publisher","first-page":"349","DOI":"10.1109\/JIOT.2018.2838071","volume":"6","author":"L Peng","year":"2019","unstructured":"Peng, L., Hu, A., Zhang, J., Jiang, Y., Yu, J., & Yan, Y. (2019). Design of a hybrid rf fingerprint extraction and device classification scheme. IEEE Internet of Things Journal, 6, 349\u2013360.","journal-title":"IEEE Internet of Things Journal"},{"key":"1656_CR27","doi-asserted-by":"publisher","first-page":"519","DOI":"10.1109\/TDSC.2014.2369033","volume":"12","author":"SV Radhakrishnan","year":"2015","unstructured":"Radhakrishnan, S.V., Uluagac, A.S., & Beyah, R. (2015). Gtid: a technique for physical device and device type fingerprinting. IEEE Transactions on Dependable and Secure Computing, 12, 519\u2013532.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"1656_CR28","doi-asserted-by":"crossref","unstructured":"Rodofile, N.R., Radke, K., & Foo, E. (2016). Dnp3 network scanning and reconnaissance for critical infrastructure. In Proceedings of the Australasian computer science week multiconference (p. 39): ACM.","DOI":"10.1145\/2843043.2843350"},{"key":"1656_CR29","doi-asserted-by":"crossref","unstructured":"Shahid, M.R., Blanc, G., Zhang, Z., & Debar, H. (2018). Iot devices recognition through network traffic analysis. In 2018 IEEE international conference on big data (Big Data) (pp. 5187\u20135192): IEEE.","DOI":"10.1109\/BigData.2018.8622243"},{"key":"1656_CR30","doi-asserted-by":"crossref","unstructured":"Thangavelu, V., Divakaran, D.M., Sairam, R., Bhunia, S.S., & Gurusamy, M. (2018). Deft: a distributed IoT fingerprinting technique. IEEE Internet of Things Journal.","DOI":"10.1109\/JIOT.2018.2865604"},{"key":"1656_CR31","unstructured":"Wiberg, K.C. (2006). Identifying supervisory control and data acquisition (SCADA) systems on a network via remote reconnaissance. Technical Report. NAVAL POSTGRADUATE SCHOOL MONTEREY CA."},{"key":"1656_CR32","unstructured":"Zalewski, M. (2014). p0f v3 (version 3.08 b)."}],"container-title":["Journal of Signal Processing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11265-021-01656-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11265-021-01656-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11265-021-01656-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,6,14]],"date-time":"2021-06-14T17:11:40Z","timestamp":1623690700000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11265-021-01656-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,9]]},"references-count":32,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2021,7]]}},"alternative-id":["1656"],"URL":"https:\/\/doi.org\/10.1007\/s11265-021-01656-0","relation":{},"ISSN":["1939-8018","1939-8115"],"issn-type":[{"value":"1939-8018","type":"print"},{"value":"1939-8115","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,9]]},"assertion":[{"value":"2 January 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 February 2021","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 March 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 April 2021","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}