{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,3]],"date-time":"2026-10-03T17:27:09Z","timestamp":1791048429991,"version":"4.1.0"},"reference-count":29,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T00:00:00Z","timestamp":1725926400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T00:00:00Z","timestamp":1725926400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/501100006070","name":"Universidad de los Andes","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100006070","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Intell Syst"],"DOI":"10.1007\/s44196-024-00644-z","type":"journal-article","created":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T15:02:27Z","timestamp":1725980547000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":38,"title":["Enhancing Critical Infrastructure Security: Unsupervised Learning Approaches for Anomaly Detection"],"prefix":"10.1007","volume":"17","author":[{"given":"Andrea","family":"Pinto","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luis-Carlos","family":"Herrera","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yezid","family":"Donoso","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jairo A.","family":"Gutierrez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,9,10]]},"reference":[{"key":"644_CR1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2019.02.001","author":"LC Herrera","year":"2019","unstructured":"Herrera, L.C., Maennel, O.: A comprehensive instrument for identifying critical information infrastructure services. Int. J. Crit. Infrastruct. Protect. (2019). https:\/\/doi.org\/10.1016\/j.ijcip.2019.02.001","journal-title":"Int. J. Crit. Infrastruct. Protect."},{"issue":"2","key":"644_CR2","doi-asserted-by":"publisher","first-page":"83","DOI":"10.4018\/ijaiml.20210701.oa6","volume":"11","author":"S Nazir","year":"2021","unstructured":"Nazir, S., Patel, S., Patel, D.: Autoencoder based anomaly detection for SCADA networks. Int. J. Artif. Intell. Mach. Learning 11(2), 83\u201399 (2021). https:\/\/doi.org\/10.4018\/ijaiml.20210701.oa6","journal-title":"Int. J. Artif. Intell. Mach. Learning"},{"key":"644_CR3","doi-asserted-by":"publisher","first-page":"115179","DOI":"10.1109\/ACCESS.2022.3218624","volume":"10","author":"EA Boateng","year":"2022","unstructured":"Boateng, E.A., Bruce, J.W., Talbert, D.A.: Anomaly detection for a water treatment system based on one-class neural network. IEEE Access 10, 115179\u2013115191 (2022). https:\/\/doi.org\/10.1109\/ACCESS.2022.3218624","journal-title":"IEEE Access"},{"key":"644_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2020.100393","author":"MRG Raman","year":"2020","unstructured":"Raman, M.R.G., Somu, N., Mathur, A.P.: A multilayer perceptron model for anomaly detection in water treatment plants. Int J. Crit. Infrastruct. Protect. (2020). https:\/\/doi.org\/10.1016\/j.ijcip.2020.100393","journal-title":"Int J. Crit. Infrastruct. Protect."},{"key":"644_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102585","author":"D Nedeljkovic","year":"2022","unstructured":"Nedeljkovic, D., Jakovljevic, Z.: CNN based method for the development of cyber-attacks detection algorithms in industrial control systems. Comput. Secur. (2022). https:\/\/doi.org\/10.1016\/j.cose.2021.102585","journal-title":"Comput. Secur."},{"key":"644_CR6","doi-asserted-by":"publisher","first-page":"88348","DOI":"10.1109\/ACCESS.2020.2993335","volume":"8","author":"X Xie","year":"2020","unstructured":"Xie, X., Wang, B., Wan, T., Tang, W.: Multivariate abnormal detection for industrial control systems using 1D CNN and GRU. IEEE Access 8, 88348\u201388359 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.2993335","journal-title":"IEEE Access"},{"issue":"3","key":"644_CR7","doi-asserted-by":"publisher","first-page":"1310","DOI":"10.3390\/s23031310","volume":"23","author":"B Kim","year":"2023","unstructured":"Kim, B., Alawami, M.A., Kim, E., Oh, S., Park, J., Kim, H.: A comparative study of time series anomaly detection models for industrial control systems. Sensors 23(3), 1310 (2023). https:\/\/doi.org\/10.3390\/s23031310","journal-title":"Sensors"},{"issue":"1","key":"644_CR8","doi-asserted-by":"publisher","first-page":"257","DOI":"10.3390\/s23010257","volume":"23","author":"G Koutroulis","year":"2023","unstructured":"Koutroulis, G., Mutlu, B., Kern, R.: A causality-inspired approach for anomaly detection in a water treatment testbed. Sensors 23(1), 257 (2023). https:\/\/doi.org\/10.3390\/s23010257","journal-title":"Sensors"},{"key":"644_CR9","doi-asserted-by":"publisher","first-page":"102930","DOI":"10.1016\/j.adhoc.2022.102930","volume":"134","author":"IA Khan","year":"2022","unstructured":"Khan, I.A., Keshk, M., Pi, D., Khan, N., Hussain, Y., Soliman, H.: Enhancing IIoT networks protection: A robust security model for attack detection in Internet Industrial Control Systems. Ad Hoc Netw. 134, 102930 (2022). https:\/\/doi.org\/10.1016\/j.adhoc.2022.102930","journal-title":"Ad Hoc Netw."},{"issue":"10","key":"644_CR10","doi-asserted-by":"publisher","first-page":"8467","DOI":"10.1109\/JIOT.2022.3200048","volume":"10","author":"IA Khan","year":"2023","unstructured":"Khan, I.A., Pi, D., Abbas, M.Z., Zia, U., Hussain, Y., Soliman, H.: Federated-SRUs: A federated-simple-recurrent-units-based IDS for accurate detection of cyber attacks against IoT-augmented industrial control systems. IEEE Internet Things J. 10(10), 8467\u20138476 (2023). https:\/\/doi.org\/10.1109\/JIOT.2022.3200048","journal-title":"IEEE Internet Things J."},{"key":"644_CR11","doi-asserted-by":"publisher","first-page":"100516","DOI":"10.1016\/j.ijcip.2022.100516","volume":"38","author":"MA Umer","year":"2022","unstructured":"Umer, M.A., Junejo, K.N., Jilani, M.T., Mathur, A.P.: Machine learning for intrusion detection in industrial control systems: Applications, challenges, and recommendations. Int. J. Crit. Infrastruct. Protect. 38, 100516 (2022). https:\/\/doi.org\/10.1016\/j.ijcip.2022.100516","journal-title":"Int. J. Crit. Infrastruct. Protect."},{"key":"644_CR12","doi-asserted-by":"publisher","first-page":"106017","DOI":"10.1016\/j.asoc.2019.106017","volume":"88","author":"SJ Kim","year":"2020","unstructured":"Kim, S.J., Jo, W.Y., Shon, T.: APAD: Autoencoder-based payload anomaly detection for industrial IoE. Appl. Soft Comput. J. 88, 106017 (2020). https:\/\/doi.org\/10.1016\/j.asoc.2019.106017","journal-title":"Appl. Soft Comput. J."},{"key":"644_CR13","unstructured":"UK\u2019s National Cyber Security Centre: NCSC Annual Review 2023, London (2023)."},{"key":"644_CR14","doi-asserted-by":"publisher","DOI":"10.3390\/s23052415","author":"A Pinto","year":"2023","unstructured":"Pinto, A., Herrera, L.C., Donoso, Y., Gutierrez, J.A.: Survey on intrusion detection systems based on machine learning techniques for the protection of critical infrastructure. MDPI (2023). https:\/\/doi.org\/10.3390\/s23052415","journal-title":"MDPI"},{"issue":"3","key":"644_CR15","doi-asserted-by":"publisher","first-page":"45","DOI":"10.2753\/MIS0742-1222240302","volume":"24","author":"K Peffers","year":"2007","unstructured":"Peffers, K., Tuunanen, T., Rothenberger, M.A., Chatterjee, S.: A design science research methodology for information systems research. J. Manag. Inf. Syst. 24(3), 45\u201377 (2007). https:\/\/doi.org\/10.2753\/MIS0742-1222240302","journal-title":"J. Manag. Inf. Syst."},{"issue":"16","key":"644_CR16","doi-asserted-by":"publisher","first-page":"9227","DOI":"10.3390\/app13169227","volume":"13","author":"C Li","year":"2023","unstructured":"Li, C., Li, F., Zhang, L., Yang, A., Hu, Z., He, M.: Intrusion detection for industrial control systems based on improved contrastive learning SimCLR. Appl. Sci. 13(16), 9227 (2023). https:\/\/doi.org\/10.3390\/app13169227","journal-title":"Appl. Sci."},{"issue":"4","key":"644_CR17","doi-asserted-by":"publisher","first-page":"104","DOI":"10.3390\/a15040104","volume":"15","author":"E Novikova","year":"2022","unstructured":"Novikova, E., Doynikova, E., Golubev, S.: Federated learning for intrusion detection in the critical infrastructures: Vertically partitioned data use case. Algorithms 15(4), 104 (2022). https:\/\/doi.org\/10.3390\/a15040104","journal-title":"Algorithms"},{"issue":"8","key":"644_CR18","doi-asserted-by":"publisher","first-page":"2886","DOI":"10.3390\/s22082886","volume":"22","author":"D F\u00e4hrmann","year":"2022","unstructured":"F\u00e4hrmann, D., Damer, N., Kirchbuchner, F., Kuijper, A.: Lightweight long short-term memory variational auto-encoder for multivariate time series anomaly detection in industrial control systems. Sensors 22(8), 2886 (2022). https:\/\/doi.org\/10.3390\/s22082886","journal-title":"Sensors"},{"key":"644_CR19","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103570","author":"H Sun","year":"2024","unstructured":"Sun, H., Huang, Y., Han, L., Fu, C., Liu, H., Long, X.: MTS-DVGAN: Anomaly detection in cyber-physical systems using a dual variational generative adversarial network. Comput. Secur. (2024). https:\/\/doi.org\/10.1016\/j.cose.2023.103570","journal-title":"Comput. Secur."},{"key":"644_CR20","doi-asserted-by":"publisher","first-page":"185","DOI":"10.1016\/j.jnca.2017.03.018","volume":"87","author":"W Haider","year":"2017","unstructured":"Haider, W., Hu, J., Slay, J., Turnbull, B.P., Xie, Y.: Generating realistic intrusion detection system dataset based on fuzzy qualitative modeling. J. Netw. Comput. Appl. 87, 185\u2013192 (2017). https:\/\/doi.org\/10.1016\/j.jnca.2017.03.018","journal-title":"J. Netw. Comput. Appl."},{"key":"644_CR21","doi-asserted-by":"publisher","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","volume":"8","author":"A Alsaedi","year":"2020","unstructured":"Alsaedi, A., Moustafa, N., Tari, Z., Mahmood, A., Anwar, A.N.: TON-IoT telemetry dataset: A new generation dataset of IoT and IIoT for data-driven intrusion detection systems. IEEE Access 8, 165130\u2013165150 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.3022862","journal-title":"IEEE Access"},{"key":"644_CR22","doi-asserted-by":"crossref","unstructured":"Hindy, H., Bayne, E., Bures, M., Atkinson, R., Tachtatzis, C., Bellekens, X.: Machine learning based IoT intrusion detection system: An MQTT case study (MQTT-IoT-IDS2020 Dataset). Preprint at http:\/\/arxiv.org\/abs\/2006.15340 (2020)","DOI":"10.1007\/978-3-030-64758-2_6"},{"issue":"5","key":"644_CR23","doi-asserted-by":"publisher","first-page":"3962","DOI":"10.1109\/JIOT.2021.3102056","volume":"9","author":"M Al-Hawawreh","year":"2022","unstructured":"Al-Hawawreh, M., Sitnikova, E., Aboutorab, N.: X-IIoTID: A connectivity-agnostic and device-agnostic intrusion data set for industrial internet of things. IEEE Internet Things J. 9(5), 3962\u20133977 (2022). https:\/\/doi.org\/10.1109\/JIOT.2021.3102056","journal-title":"IEEE Internet Things J."},{"key":"644_CR24","doi-asserted-by":"publisher","first-page":"40281","DOI":"10.1109\/ACCESS.2022.3165809","volume":"10","author":"MA Ferrag","year":"2022","unstructured":"Ferrag, M.A., Friha, O., Hamouda, D., Maglaras, L., Janicke, H.: Edge-IIoTset: A new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning. IEEE Access. 10, 40281\u201340306 (2022). https:\/\/doi.org\/10.1109\/ACCESS.2022.3165809","journal-title":"IEEE Access."},{"issue":"1","key":"644_CR25","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","volume":"27","author":"M Sarhan","year":"2022","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a standard feature set for network intrusion detection system datasets. Mobile Netw. Appl. 27(1), 357\u2013370 (2022). https:\/\/doi.org\/10.1007\/s11036-021-01843-0","journal-title":"Mobile Netw. Appl."},{"key":"644_CR26","doi-asserted-by":"crossref","unstructured":"Guerra-Manzanares, A., Medina-Galindo, J., Bahsi, H., N\u00f5mm, S.: MedBIoT: Generation of an IoT botnet dataset in a medium-sized IoT network. In: ICISSP 2020 - Proceedings of the 6th International Conference on Information Systems Security and Privacy, pp. 207\u2013218 (2020).","DOI":"10.5220\/0009187802070218"},{"key":"644_CR27","unstructured":"Adepu, S., Junejo, K. N., Mathur, A., Goh, J.: A Dataset to Support Research in the Design of Secure Water Treatment Systems. https:\/\/www.researchgate.net\/publication\/305809559"},{"key":"644_CR28","unstructured":"Shin, H.-K., Lee, W., Yun, J.-H., Kim, H.: HAI 1.0: HIL-based Augmented ICS Security Dataset."},{"issue":"10","key":"644_CR29","doi-asserted-by":"publisher","first-page":"1583","DOI":"10.3390\/SYM12101583","volume":"12","author":"\u00c1LP G\u00f3mez","year":"2020","unstructured":"G\u00f3mez, \u00c1.L.P., Maim\u00f3, L.F., Celdr\u00e1n, A.H., Clemente, F.J.G.: MADICS: A methodology for anomaly detection in industrial control systems. Symmetry (Basel) 12(10), 1583 (2020). https:\/\/doi.org\/10.3390\/SYM12101583","journal-title":"Symmetry (Basel)"}],"container-title":["International Journal of Computational Intelligence Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44196-024-00644-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s44196-024-00644-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44196-024-00644-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T15:13:05Z","timestamp":1725981185000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s44196-024-00644-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,10]]},"references-count":29,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["644"],"URL":"https:\/\/doi.org\/10.1007\/s44196-024-00644-z","relation":{},"ISSN":["1875-6883"],"issn-type":[{"value":"1875-6883","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,9,10]]},"assertion":[{"value":"14 May 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 August 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 September 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no conflicts of interest to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"236"}}