{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T13:18:16Z","timestamp":1783084696652,"version":"3.54.6"},"reference-count":50,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100011311","name":"State Key Laboratory of Industrial Control Technology","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100011311","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006407","name":"Natural Science Foundation of Henan Province","doi-asserted-by":"publisher","award":["252300420988"],"award-info":[{"award-number":["252300420988"]}],"id":[{"id":"10.13039\/501100006407","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Fusion"],"published-print":{"date-parts":[[2026,11]]},"DOI":"10.1016\/j.inffus.2026.104468","type":"journal-article","created":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T15:17:48Z","timestamp":1778339868000},"page":"104468","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Reverse engineering for industrial control proprietary protocols based on multi-source knowledge fusion and LLM inference"],"prefix":"10.1016","volume":"135","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-1210-8904","authenticated-orcid":false,"given":"Yahui","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7639-3686","authenticated-orcid":false,"given":"Yangyang","family":"Geng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mufeng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7207-6691","authenticated-orcid":false,"given":"Qiang","family":"Wei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.inffus.2026.104468_bib0001","doi-asserted-by":"crossref","first-page":"581","DOI":"10.1109\/TIFS.2022.3226868","article-title":"SPMA: stealthy physics-manipulated attack and countermeasures in cyber-physical smart grid","volume":"18","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.inffus.2026.104468_bib0002","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103174","article-title":"CASI: context-aware automatic semantic inference by fusing video and network traffic information in industrial control systems","volume":"122","author":"Hetu","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104468_bib0003","series-title":"Proceedings of the 20th ACM Conference on Embedded Networked Sensor Systems","first-page":"548","article-title":"Reverse engineering physical semantics of PLC program variables using control invariants","author":"Yang","year":"2022"},{"issue":"2","key":"10.1016\/j.inffus.2026.104468_bib0004","doi-asserted-by":"crossref","first-page":"1400","DOI":"10.1109\/TDSC.2024.3434622","article-title":"Unveiling Physical Semantics of PLC Variables Using Control Invariants","volume":"22","author":"Yang","year":"2025","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"3","key":"10.1016\/j.inffus.2026.104468_bib0005","doi-asserted-by":"crossref","first-page":"4653","DOI":"10.1109\/JIOT.2025.3639897","article-title":"AIAF: an automated ICP-based attack framework for industrial control systems","volume":"13","author":"Meng","year":"2026","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.inffus.2026.104468_bib0006","series-title":"Proceedings of the 39th Annual Computer Security Applications Conference","first-page":"310","article-title":"SePanner: analyzing semantics of controller variables in industrial control systems based on network traffic","author":"Meng","year":"2023"},{"key":"10.1016\/j.inffus.2026.104468_bib0007","first-page":"1","article-title":"An Automated Semantic Analysis Framework for Controller Variables based on Network Traffic","author":"Meng","year":"2026","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"10","key":"10.1016\/j.inffus.2026.104468_bib0008","doi-asserted-by":"crossref","first-page":"8331","DOI":"10.1109\/JIOT.2022.3200127","article-title":"Defending cyber\u2013physical systems through reverse-engineering-based memory sanity check","volume":"10","author":"Geng","year":"2022","journal-title":"IEEE Internet Things J."},{"issue":"6","key":"10.1016\/j.inffus.2026.104468_bib0009","first-page":"1095","article-title":"Network protocol analysis using bioinformatics algorithms","volume":"26","author":"Beddoe","year":"2004","journal-title":"Toorcon"},{"key":"10.1016\/j.inffus.2026.104468_bib0010","series-title":"Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security","first-page":"51","article-title":"Towards automated protocol reverse engineering using semantic information","author":"Bossert","year":"2014"},{"key":"10.1016\/j.inffus.2026.104468_bib0011","series-title":"USENIX Security Symposium","first-page":"1","article-title":"Discoverer: automatic protocol reverse engineering from network traces","author":"Cui","year":"2007"},{"key":"10.1016\/j.inffus.2026.104468_bib0012","series-title":"Proceedings of the 14th ACM Conference on Computer and Communications Security","first-page":"317","article-title":"Polyglot: automatic extraction of protocol message format using dynamic binary analysis","author":"Caballero","year":"2007"},{"key":"10.1016\/j.inffus.2026.104468_bib0013","series-title":"NDSS","first-page":"1","article-title":"Automatic protocol format reverse engineering through context-aware monitored execution","volume":"8","author":"Lin","year":"2008"},{"key":"10.1016\/j.inffus.2026.104468_bib0014","series-title":"Proceedings of the 15th ACM Conference on Computer and Communications Security","first-page":"391","article-title":"Tupni: automatic reverse engineering of input formats","author":"Cui","year":"2008"},{"issue":"5","key":"10.1016\/j.inffus.2026.104468_bib0015","article-title":"An unknown protocol syntax analysis method based on convolutional neural network","volume":"32","author":"Wang","year":"2021","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"10.1016\/j.inffus.2026.104468_bib0016","series-title":"Proceedings of the 2020 International Conference on Aviation Safety and Information Technology","first-page":"330","article-title":"Analysis of private industrial control protocol format based on LSTM-FCN model","author":"Zhao","year":"2020"},{"key":"10.1016\/j.inffus.2026.104468_bib0017","doi-asserted-by":"crossref","first-page":"764","DOI":"10.1109\/TIFS.2023.3326666","article-title":"Toward automated field semantics inference for binary protocol reverse engineering","volume":"19","author":"Zhan","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.inffus.2026.104468_bib0018","series-title":"Proceedings of the 18th Conference of the European Chapter of the Association for Computational Linguistics: System Demonstrations","first-page":"150","article-title":"Ragas: automated evaluation of retrieval augmented generation","author":"Es","year":"2024"},{"issue":"8","key":"10.1016\/j.inffus.2026.104468_bib0019","doi-asserted-by":"crossref","first-page":"1930","DOI":"10.1038\/s41591-023-02448-8","article-title":"Large language models in medicine","volume":"29","author":"Thirunavukarasu","year":"2023","journal-title":"Nat. Med."},{"key":"10.1016\/j.inffus.2026.104468_bib0020","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1016\/j.comcom.2016.02.015","article-title":"Towards automatic protocol field inference","volume":"84","author":"Bermudez","year":"2016","journal-title":"Comput. Commun."},{"key":"10.1016\/j.inffus.2026.104468_bib0021","series-title":"NDSS","article-title":"BinaryInferno: a semantic-driven approach to field inference for binary message formats","author":"Chandler","year":"2023"},{"key":"10.1016\/j.inffus.2026.104468_bib0022","series-title":"NDSS","article-title":"NetPlier: probabilistic network protocol reverse engineering from message traces","author":"Ye","year":"2021"},{"key":"10.1016\/j.inffus.2026.104468_bib0023","unstructured":"jtpereyda, A fork and successor of the Sulley fuzzing framework, 2025, Accessed on 10-2025, https:\/\/github.com\/jtpereyda\/boofuzz."},{"issue":"5","key":"10.1016\/j.inffus.2026.104468_bib0024","doi-asserted-by":"crossref","first-page":"3523","DOI":"10.1109\/TII.2020.3007764","article-title":"Programmable logic controllers in the context of industry 4.0","volume":"17","author":"Sehr","year":"2020","journal-title":"IEEE Trans. Ind. Inf."},{"issue":"3","key":"10.1016\/j.inffus.2026.104468_bib0025","doi-asserted-by":"crossref","first-page":"1070","DOI":"10.1016\/j.jnca.2013.01.013","article-title":"Position-based automatic reverse engineering of network protocols","volume":"36","author":"Luo","year":"2013","journal-title":"J. Netw. Comput. Appl."},{"key":"10.1016\/j.inffus.2026.104468_bib0026","series-title":"Proceedings of the 1st International Conference on Information Science and Systems","first-page":"53","article-title":"Protocol keywords extraction method based on frequent item-sets mining","author":"Li","year":"2018"},{"key":"10.1016\/j.inffus.2026.104468_bib0027","series-title":"2018 IEEE 4th International Conference on Computer and Communications (ICCC)","first-page":"1139","article-title":"Automatic reverse engineering of unknown security protocols from network traces","author":"Fan","year":"2018"},{"issue":"1","key":"10.1016\/j.inffus.2026.104468_bib0028","article-title":"A practical format and semantic reverse analysis approach for industrial control protocols","volume":"2021","author":"Wang","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"10.1016\/j.inffus.2026.104468_bib0029","series-title":"IEEE INFOCOM 2024-IEEE Conference on Computer Communications","first-page":"2408","article-title":"Reverse engineering industrial protocols driven by control fields","author":"Qin","year":"2024"},{"key":"10.1016\/j.inffus.2026.104468_bib0030","series-title":"Proc. NDSS","first-page":"1","article-title":"DynPRE: protocol reverse engineering via dynamic inference","author":"Luo","year":"2024"},{"key":"10.1016\/j.inffus.2026.104468_bib0031","series-title":"European Symposium on Research in Computer Security","first-page":"200","article-title":"ReFormat: automatic reverse engineering of encrypted messages","author":"Wang","year":"2009"},{"key":"10.1016\/j.inffus.2026.104468_bib0032","series-title":"Proceedings of the 16th ACM Conference on Computer and Communications Security","first-page":"621","article-title":"Dispatcher: enabling active botnet infiltration using automatic protocol reverse-engineering","author":"Caballero","year":"2009"},{"issue":"ISSTA","key":"10.1016\/j.inffus.2026.104468_bib0033","doi-asserted-by":"crossref","DOI":"10.1145\/3728982","article-title":"ICEPRE: ICS Protocol reverse engineering via data-driven concolic execution","volume":"2","author":"Qu","year":"2025","journal-title":"Proc. ACM Softw. Eng."},{"issue":"6","key":"10.1016\/j.inffus.2026.104468_bib0034","doi-asserted-by":"crossref","first-page":"4502","DOI":"10.1109\/TDSC.2022.3228076","article-title":"Spenny: extensive ics protocol reverse analysis via field guided symbolic execution","volume":"20","author":"Sun","year":"2022","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"4","key":"10.1016\/j.inffus.2026.104468_bib0035","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1007\/s10462-024-10721-6","article-title":"A review of convolutional neural networks in computer vision","volume":"57","author":"Zhao","year":"2024","journal-title":"Artif. Intell. Rev."},{"issue":"5","key":"10.1016\/j.inffus.2026.104468_bib0036","doi-asserted-by":"crossref","first-page":"2786","DOI":"10.1109\/TSMC.2024.3350200","article-title":"Novel long short-term memory model based on the attention mechanism for the leakage detection of water supply processes","volume":"54","author":"Han","year":"2024","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"issue":"9","key":"10.1016\/j.inffus.2026.104468_bib0037","doi-asserted-by":"crossref","first-page":"517","DOI":"10.3390\/info15090517","article-title":"Recurrent neural networks: a comprehensive review of architectures, variants, and applications","volume":"15","author":"Mienye","year":"2024","journal-title":"Information"},{"key":"10.1016\/j.inffus.2026.104468_bib0038","doi-asserted-by":"crossref","first-page":"5478","DOI":"10.1109\/TIFS.2025.3569129","article-title":"Patty: pattern series-based semantics analysis for agnostic industrial control protocols","volume":"20","author":"Yang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"1","key":"10.1016\/j.inffus.2026.104468_bib0039","article-title":"IMCSA: providing better sequence alignment space for industrial control protocol reverse engineering","volume":"2022","author":"Ji","year":"2022","journal-title":"Secur. Commun. Netw."},{"issue":"3","key":"10.1016\/j.inffus.2026.104468_bib0040","doi-asserted-by":"crossref","first-page":"351","DOI":"10.1631\/FITEE.2000709","article-title":"Automatic protocol reverse engineering for industrial control systems with dynamic taint analysis","volume":"23","author":"Ma","year":"2022","journal-title":"Front. Inf. Technol. Electron. Eng."},{"issue":"6","key":"10.1016\/j.inffus.2026.104468_bib0041","doi-asserted-by":"crossref","DOI":"10.1002\/nem.2126","article-title":"Clustering method in protocol reverse engineering for industrial protocols","volume":"30","author":"Shim","year":"2020","journal-title":"Int. J. Netw. Manage."},{"key":"10.1016\/j.inffus.2026.104468_bib0042","unstructured":"hi zer, Industrial protocols dataset, 2025, Accessed on 08-2025, https:\/\/github.com\/hi-zer\/Industrial-protocols-dataset."},{"key":"10.1016\/j.inffus.2026.104468_bib0043","unstructured":"Tshark, Tshark - home, 2025, Accessed on 05-2025, https:\/\/tshark.dev\/."},{"key":"10.1016\/j.inffus.2026.104468_bib0044","unstructured":"Wireshark, Wireshark, 2025, Accessed on 05-2025, https:\/\/www.wireshark.org\/."},{"key":"10.1016\/j.inffus.2026.104468_bib0045","unstructured":"LangChain, LangChain, 2025, Accessed on 06-2025, https:\/\/www.langchain.com\/."},{"key":"10.1016\/j.inffus.2026.104468_bib0046","unstructured":"maidalun1020, bce-embedding-base_v1, 2025, Accessed on 06-2025, https:\/\/hf-mirror.com\/maidalun1020\/bce-embedding-base_v1."},{"key":"10.1016\/j.inffus.2026.104468_bib0047","unstructured":"Chroma, Chroma, 2025, Accessed on 06-2025, https:\/\/www.trychroma.com\/."},{"key":"10.1016\/j.inffus.2026.104468_bib0048","unstructured":"maidalun1020, bce-reranker-base_v1, 2025, Accessed on 06-2025, https:\/\/hf-mirror.com\/maidalun1020\/bce-reranker-base_v1."},{"key":"10.1016\/j.inffus.2026.104468_bib0049","unstructured":"deepseek AI, DeepSeek-R1-0528, 2025, Accessed on 06-2025, https:\/\/huggingface.co\/deepseek-ai\/DeepSeek-R1-0528."},{"key":"10.1016\/j.inffus.2026.104468_bib0050","doi-asserted-by":"crossref","first-page":"24824","DOI":"10.52202\/068431-1800","article-title":"Chain-of-thought prompting elicits reasoning in large language models","volume":"35","author":"Wei","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."}],"container-title":["Information Fusion"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526003477?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526003477?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T12:20:49Z","timestamp":1783081249000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1566253526003477"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,11]]},"references-count":50,"alternative-id":["S1566253526003477"],"URL":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104468","relation":{},"ISSN":["1566-2535"],"issn-type":[{"value":"1566-2535","type":"print"}],"subject":[],"published":{"date-parts":[[2026,11]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Reverse engineering for industrial control proprietary protocols based on multi-source knowledge fusion and LLM inference","name":"articletitle","label":"Article Title"},{"value":"Information Fusion","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104468","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104468"}}