{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T09:12:27Z","timestamp":1780045947479,"version":"3.53.1"},"reference-count":254,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Internet of Things"],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1016\/j.iot.2026.101938","type":"journal-article","created":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T16:02:42Z","timestamp":1775145762000},"page":"101938","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Cyber-physical systems security: A comprehensive review of anomaly detection techniques"],"prefix":"10.1016","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-4238-3701","authenticated-orcid":false,"given":"Danial","family":"Abshari","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Meera","family":"Sridhar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.iot.2026.101938_bib0001","series-title":"Cyber-physical systems and internet of things","author":"Greer","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0002","series-title":"Digitising the Industry-Internet of Things Connecting the Physical, Digital and Virtual Worlds","author":"Friess","year":"2016"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0003","article-title":"Autonomous vehicles and intelligent automation: applications, challenges, and opportunities","volume":"2022","author":"Bathla","year":"2022","journal-title":"Mob. Inf. Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0004","doi-asserted-by":"crossref","first-page":"449","DOI":"10.1016\/j.future.2015.06.006","article-title":"Robust cyber\u2013physical systems: concept, models, and implementation","volume":"56","author":"Hu","year":"2016","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0005","series-title":"Journal of Physics: Conference Series","first-page":"012029","article-title":"A review cyber of industry 4.0 (cyber-physical systems (CPS), the internet of things (IoT) and the internet of services (IoS)): components, and security challenges","volume":"1424","author":"Al-Salman","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0006","doi-asserted-by":"crossref","first-page":"78238","DOI":"10.1109\/ACCESS.2018.2884906","article-title":"A survey on industrial internet of things: a cyber-physical systems perspective","volume":"6","author":"Xu","year":"2018","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0007","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1016\/j.jmsy.2018.04.007","article-title":"Security of smart manufacturing systems","volume":"47","author":"Tuptuk","year":"2018","journal-title":"J. Manuf. Syst."},{"issue":"82","key":"10.1016\/j.iot.2026.101938_bib0008","first-page":"16","article-title":"Guide to industrial control systems (ICS) security","volume":"800","author":"Stouffer","year":"2011","journal-title":"NIST Spec. Publ."},{"key":"10.1016\/j.iot.2026.101938_bib0009","series-title":"Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems","author":"Knapp","year":"2024"},{"key":"10.1016\/j.iot.2026.101938_bib0010","unstructured":"D. Abshari, C. Fu, M. Sridhar, Llm-assisted physical invariant extraction for cyber-physical systems anomaly detection, arXiv preprint arXiv: 2411.10918 1 (2024)."},{"key":"10.1016\/j.iot.2026.101938_bib0011","unstructured":"A. Albasir, Detection of anomalous behavior of IoT\/CPS devices using their power signals, 2020, Unpublished manuscript \/ report."},{"key":"10.1016\/j.iot.2026.101938_bib0012","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103705","article-title":"Anomaly detection for space information networks: a survey of challenges, techniques, and future directions","volume":"139","author":"Diro","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0013","doi-asserted-by":"crossref","first-page":"447","DOI":"10.1007\/s11235-018-0475-8","article-title":"A comprehensive survey on network anomaly detection","volume":"70","author":"Fernandes","year":"2019","journal-title":"Telecommun. Syst."},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0014","doi-asserted-by":"crossref","first-page":"3448","DOI":"10.1016\/j.comnet.2007.02.001","article-title":"An overview of anomaly detection techniques: existing solutions and latest technological trends","volume":"51","author":"Patcha","year":"2007","journal-title":"Comput. Netw."},{"key":"10.1016\/j.iot.2026.101938_bib0015","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2020.100162","article-title":"Identifying the attack surface for IoT network","volume":"9","author":"Rizvi","year":"2020","journal-title":"Internet Things"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0016","doi-asserted-by":"crossref","first-page":"1052","DOI":"10.1109\/JSYST.2013.2257594","article-title":"Intrusion detection in cyber-physical systems: techniques and challenges","volume":"8","author":"Han","year":"2014","journal-title":"IEEE Syst. J."},{"issue":"18","key":"10.1016\/j.iot.2026.101938_bib0017","doi-asserted-by":"crossref","first-page":"12319","DOI":"10.1007\/s00500-021-05926-8","article-title":"Cyber-attack detection in healthcare using cyber-physical system and machine learning techniques","volume":"25","author":"AlZubi","year":"2021","journal-title":"Soft Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0018","first-page":"28125","article-title":"Normal-only anomaly detection in environmental sensors in CPS: a comprehensive review","volume":"12","author":"Acquaah","year":"2024","journal-title":"IEEE Access"},{"issue":"9","key":"10.1016\/j.iot.2026.101938_bib0019","doi-asserted-by":"crossref","first-page":"3751","DOI":"10.3390\/app11093751","article-title":"A survey on recent advanced research of CPS security","volume":"11","author":"Wang","year":"2021","journal-title":"Appl. Sci."},{"issue":"1-2","key":"10.1016\/j.iot.2026.101938_bib0020","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1016\/j.cose.2008.08.003","article-title":"Anomaly-based network intrusion detection: techniques, systems and challenges","volume":"28","author":"Garcia-Teodoro","year":"2009","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0021","doi-asserted-by":"crossref","first-page":"38571","DOI":"10.1109\/ACCESS.2021.3063229","article-title":"CPS attacks mitigation approaches on power electronic systems with security challenges for smart grid applications: a review","volume":"9","author":"Amin","year":"2021","journal-title":"IEEE Access"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0022","doi-asserted-by":"crossref","DOI":"10.1061\/(ASCE)WR.1943-5452.0001023","article-title":"Real-time identification of cyber-physical attacks on water distribution systems via machine learning\u2013based anomaly detection techniques","volume":"145","author":"Abokifa","year":"2019","journal-title":"J. Water Resour. Plann. Manage."},{"key":"10.1016\/j.iot.2026.101938_bib0023","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1016\/j.compind.2016.05.006","article-title":"Design, modelling, simulation and integration of cyber physical systems: methods and applications","volume":"82","author":"Hehenberger","year":"2016","journal-title":"Comput. Ind."},{"key":"10.1016\/j.iot.2026.101938_bib0024","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1016\/j.inffus.2020.10.001","article-title":"Smart anomaly detection in sensor systems: a multi-perspective review","volume":"67","author":"Erhan","year":"2021","journal-title":"Inf. Fusion"},{"issue":"7","key":"10.1016\/j.iot.2026.101938_bib0025","doi-asserted-by":"crossref","first-page":"644","DOI":"10.3390\/aerospace10070644","article-title":"Physics-guided neural network model for aeroengine control system sensor fault diagnosis under dynamic conditions","volume":"10","author":"Li","year":"2023","journal-title":"Aerospace"},{"key":"10.1016\/j.iot.2026.101938_bib0026","article-title":"Research and application of machine learning for additive manufacturing","volume":"52","author":"Qin","year":"2022","journal-title":"Addit. Manuf."},{"key":"10.1016\/j.iot.2026.101938_bib0027","series-title":"Fault-Diagnosis Applications: Model-Based Condition Monitoring: Actuators, Drives, Machinery, Plants, Sensors, and Fault-Tolerant Systems","author":"Isermann","year":"2011"},{"issue":"9","key":"10.1016\/j.iot.2026.101938_bib0028","doi-asserted-by":"crossref","first-page":"1565","DOI":"10.1080\/0143116031000101675","article-title":"Review articledigital change detection methods in ecosystem monitoring: a review","volume":"25","author":"Coppin","year":"2004","journal-title":"Int. J. Remote Sens."},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0029","doi-asserted-by":"crossref","first-page":"8764","DOI":"10.3390\/s150408764","article-title":"Sensor anomaly detection in wireless sensor networks for healthcare","volume":"15","author":"Haque","year":"2015","journal-title":"Sensors"},{"issue":"5","key":"10.1016\/j.iot.2026.101938_bib0030","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3453155","article-title":"Deep learning-based anomaly detection in cyber-physical systems: progress and opportunities","volume":"54","author":"Luo","year":"2021","journal-title":"ACM Comput. Surv."},{"issue":"15","key":"10.1016\/j.iot.2026.101938_bib0031","doi-asserted-by":"crossref","first-page":"3283","DOI":"10.3390\/electronics12153283","article-title":"A review of anomaly detection strategies to detect threats to cyber-physical systems","volume":"12","author":"Jeffrey","year":"2023","journal-title":"Electronics"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0032","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1109\/TSUSC.2019.2906657","article-title":"An integrated framework for privacy-preserving based anomaly detection for cyber-physical systems","volume":"6","author":"Keshk","year":"2019","journal-title":"IEEE Trans. Sustainable Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0033","series-title":"2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE)","first-page":"140","article-title":"Anomaly detection in cyber physical systems using recurrent neural networks","author":"Goh","year":"2017"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0034","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3203245","article-title":"A survey of physics-based attack detection in cyber-physical systems","volume":"51","author":"Giraldo","year":"2018","journal-title":"ACM Comput. Surv."},{"issue":"24","key":"10.1016\/j.iot.2026.101938_bib0035","doi-asserted-by":"crossref","first-page":"21670","DOI":"10.1109\/JIOT.2023.3289625","article-title":"A survey on cyber\u2013physical systems security","volume":"10","author":"Yu","year":"2023","journal-title":"IEEE Internet Things J."},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0036","doi-asserted-by":"crossref","first-page":"1802","DOI":"10.1109\/JIOT.2017.2703172","article-title":"Cyber-physical systems security-A survey","volume":"4","author":"Humayed","year":"2017","journal-title":"IEEE Internet Things J."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0037","doi-asserted-by":"crossref","first-page":"85","DOI":"10.3390\/a16020085","article-title":"Detection of cyberattacks and anomalies in cyber-physical systems: approaches, data sources, evaluation","volume":"16","author":"Tushkanova","year":"2023","journal-title":"Algorithms"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0038","doi-asserted-by":"crossref","first-page":"2248","DOI":"10.1109\/COMST.2021.3094360","article-title":"A survey on industrial control system testbeds and datasets for security research","volume":"23","author":"Conti","year":"2021","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0039","doi-asserted-by":"crossref","first-page":"389","DOI":"10.1109\/COMST.2019.2959013","article-title":"Cyber-physical-social systems: a state-of-the-art survey, challenges and opportunities","volume":"22","author":"Zhou","year":"2019","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0040","first-page":"4242","article-title":"A survey on concepts, applications, and challenges in cyber-physical systems","volume":"8","author":"Gunes","year":"2014","journal-title":"KSII Trans. Internet Inf. Syst.)"},{"issue":"11s","key":"10.1016\/j.iot.2026.101938_bib0041","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3510410","article-title":"Cybersecurity of industrial cyber-physical systems: a review","volume":"54","author":"Kayan","year":"2022","journal-title":"ACM Comput. Surv."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0042","doi-asserted-by":"crossref","first-page":"1534","DOI":"10.1109\/COMST.2022.3187531","article-title":"A survey on network security for cyber\u2013physical systems: from threats to resilient design","volume":"24","author":"Kim","year":"2022","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"10.1016\/j.iot.2026.101938_bib0043","doi-asserted-by":"crossref","unstructured":"P. Moriano, S.C. Hespeler, M. Li, M. Mahbub, Adaptive anomaly detection for identifying attacks in cyber-physical systems: a systematic literature review, arXiv preprint arXiv: 2411.14278(2024).","DOI":"10.1007\/s10462-025-11292-w"},{"key":"10.1016\/j.iot.2026.101938_bib0044","doi-asserted-by":"crossref","first-page":"118509","DOI":"10.1109\/ACCESS.2024.3495519","article-title":"Anomaly detection for aviation cyber-physical system: opportunities and challenges","volume":"12","author":"Ain","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0045","doi-asserted-by":"crossref","first-page":"23597","DOI":"10.1109\/ACCESS.2025.3537410","article-title":"Artificial intelligence and physics-based anomaly detection in the smart grid: a survey","volume":"13","author":"Gaggero","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0046","doi-asserted-by":"crossref","first-page":"81664","DOI":"10.1109\/ACCESS.2019.2921912","article-title":"Anomaly detection, analysis and prediction techniques in iot environment: a systematic literature review","volume":"7","author":"Fahim","year":"2019","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0047","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1016\/j.future.2022.04.005","article-title":"A systematic literature review of IoT time series anomaly detection solutions","volume":"134","author":"Sgueglia","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"issue":"7","key":"10.1016\/j.iot.2026.101938_bib0048","doi-asserted-by":"crossref","first-page":"6481","DOI":"10.1109\/JIOT.2019.2958185","article-title":"Anomaly detection for IoT time-series data: a survey","volume":"7","author":"Cook","year":"2019","journal-title":"IEEE Internet Things J."},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0049","doi-asserted-by":"crossref","first-page":"5320","DOI":"10.3390\/app11125320","article-title":"A review of machine learning and deep learning techniques for anomaly detection in IoT data","volume":"11","author":"Al-amri","year":"2021","journal-title":"Appl. Sci."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0050","doi-asserted-by":"crossref","first-page":"621","DOI":"10.1016\/j.cirp.2016.06.005","article-title":"Cyber-physical systems in manufacturing","volume":"65","author":"Monostori","year":"2016","journal-title":"CIRP Ann."},{"key":"10.1016\/j.iot.2026.101938_bib0051","series-title":"Introduction to Embedded Systems: A Cyber-Physical Systems Approach","author":"Lee","year":"2017"},{"key":"10.1016\/j.iot.2026.101938_bib0052","series-title":"2011 International Conference on Wireless Communications and Signal Processing (WCSP)","first-page":"1","article-title":"A survey of cyber-physical systems","author":"Shi","year":"2011"},{"key":"10.1016\/j.iot.2026.101938_bib0053","series-title":"2008 11th IEEE International Symposium on Object and Component-oriented Real-time Distributed Computing (ISORC)","first-page":"363","article-title":"Cyber physical systems: design challenges","author":"Lee","year":"2008"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0054","doi-asserted-by":"crossref","first-page":"716","DOI":"10.1109\/TII.2022.3199481","article-title":"Advancements in industrial cyber-physical systems: an overview and perspectives","volume":"19","author":"Zhang","year":"2022","journal-title":"IEEE Trans. Ind. Inf."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0055","first-page":"161","article-title":"Cyber-physical systems","volume":"12","author":"Baheti","year":"2011","journal-title":"Impact Control Technol."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0056","doi-asserted-by":"crossref","first-page":"4837","DOI":"10.3390\/s150304837","article-title":"The past, present and future of cyber-physical systems: a focus on models","volume":"15","author":"Lee","year":"2015","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0057","doi-asserted-by":"crossref","unstructured":"N. Rashvand, S.S. Hosseini, M. Azarbayjani, H. Tabkhi, Real-time bus arrival prediction: a deep learning approach for enhanced urban mobility, arXiv preprint arXiv: 2303.15495(2023).","DOI":"10.5220\/0012365500003639"},{"issue":"21","key":"10.1016\/j.iot.2026.101938_bib0058","doi-asserted-by":"crossref","first-page":"8840","DOI":"10.3390\/s23218840","article-title":"Securing industrial control systems: components, cyber threats, and machine learning-driven defense strategies","volume":"23","author":"Nankya","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0059","series-title":"Protecting Industrial Control Systems from Electronic Threats","author":"Weiss","year":"2010"},{"key":"10.1016\/j.iot.2026.101938_bib0060","doi-asserted-by":"crossref","first-page":"1185","DOI":"10.1016\/j.rser.2016.01.025","article-title":"A review on the applications of programmable logic controllers (PLCs)","volume":"60","author":"Alphonsus","year":"2016","journal-title":"Renewable Sustainable Energy Rev."},{"key":"10.1016\/j.iot.2026.101938_bib0061","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2019.101666","article-title":"SCADA (Supervisory control and data acquisition) systems: vulnerability assessment and security recommendations","volume":"89","author":"Upadhyay","year":"2020","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0062","doi-asserted-by":"crossref","first-page":"1518","DOI":"10.1016\/j.egyr.2024.07.041","article-title":"Critical review of SCADA and PLC in smart buildings and energy sector","volume":"12","author":"OV","year":"2024","journal-title":"Energy Rep."},{"key":"10.1016\/j.iot.2026.101938_bib0063","series-title":"Smart Energy Grid Engineering","first-page":"481","article-title":"SCADA And smart energy grid control automation","author":"Sayed","year":"2017"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0064","doi-asserted-by":"crossref","first-page":"37","DOI":"10.21467\/ajgr.2.1.37-45","article-title":"Programmable logic controller (PLC) in automation","volume":"2","author":"Hudedmani","year":"2017","journal-title":"Adv. J. Grad. Res."},{"key":"10.1016\/j.iot.2026.101938_bib0065","unstructured":"A. Zibaeirad, F. Koleini, S. Bi, T. Hou, T. Wang, A comprehensive survey on the security of smart grid: challenges, mitigations, and future research opportunities, arXiv preprint arXiv: 2407.07966(2024)."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0066","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1080\/23742917.2016.1252211","article-title":"Review of cybersecurity issues in industrial critical infrastructure: manufacturing in perspective","volume":"1","author":"Ani","year":"2017","journal-title":"J. Cyber Secur. Technol."},{"key":"10.1016\/j.iot.2026.101938_bib0067","doi-asserted-by":"crossref","first-page":"66958","DOI":"10.1109\/ACCESS.2024.3394848","article-title":"Scrutinizing security in industrial control systems: an architectural vulnerabilities and communication network perspective","volume":"12","author":"Aslam","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0068","series-title":"Advanced Industrial Control Technology","author":"Zhang","year":"2010"},{"key":"10.1016\/j.iot.2026.101938_bib0069","series-title":"2023 10th International Conference on Computing for Sustainable Global Development (INDIACom)","first-page":"355","article-title":"Cybersecurity in industrial control systems: a review of the current trends and challenges","author":"Sangkhro","year":"2023"},{"key":"10.1016\/j.iot.2026.101938_bib0070","series-title":"Proceedings of the 1st ACM Workshop on Cyber-Physical System Security","first-page":"13","article-title":"Sequence-aware intrusion detection in industrial control systems","author":"Caselli","year":"2015"},{"key":"10.1016\/j.iot.2026.101938_bib0071","doi-asserted-by":"crossref","DOI":"10.1016\/j.compind.2023.103906","article-title":"ICSSIM a framework for building industrial control systems security testbeds","volume":"148","author":"Dehlaghi-Ghadim","year":"2023","journal-title":"Comput. Ind."},{"key":"10.1016\/j.iot.2026.101938_bib0072","series-title":"Industrial Cybersecurity: Efficiently Monitor the Cybersecurity Posture of Your ICS Environment","author":"Ackerman","year":"2021"},{"key":"10.1016\/j.iot.2026.101938_bib0073","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.ijcip.2015.02.002","article-title":"A survey of cyber security management in industrial control systems","volume":"9","author":"Knowles","year":"2015","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"issue":"5","key":"10.1016\/j.iot.2026.101938_bib0074","doi-asserted-by":"crossref","first-page":"1039","DOI":"10.1109\/JPROC.2015.2512235","article-title":"The cybersecurity landscape in industrial control systems","volume":"104","author":"McLaughlin","year":"2016","journal-title":"Proc. IEEE"},{"key":"10.1016\/j.iot.2026.101938_bib0075","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2019.106946","article-title":"Cybersecurity in industrial control systems: issues, technologies, and challenges","volume":"165","author":"Asghar","year":"2019","journal-title":"Comput. Netw."},{"key":"10.1016\/j.iot.2026.101938_bib0076","doi-asserted-by":"crossref","DOI":"10.1016\/j.infsof.2020.106368","article-title":"Large-scale machine learning systems in real-world industrial settings: a review of challenges and solutions","volume":"127","author":"Lwakatare","year":"2020","journal-title":"Inf. Softw. Technol."},{"key":"10.1016\/j.iot.2026.101938_bib0077","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2019.101677","article-title":"Cybersecurity for industrial control systems: a survey","volume":"89","author":"Bhamare","year":"2020","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0078","series-title":"Design Automation Conference","first-page":"731","article-title":"Cyber-physical systems: the next computing revolution","author":"Rajkumar","year":"2010"},{"key":"10.1016\/j.iot.2026.101938_bib0079","series-title":"Proceedings of the USENIX Workshop on Hot Topics in Security (HotSec)","article-title":"Research challenges for the security of control systems","author":"C\u00e1rdenas","year":"2008"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0080","first-page":"52","article-title":"Resilient cyberphysical systems","volume":"33","author":"Amin","year":"2013","journal-title":"IEEE Control Syst. Mag."},{"key":"10.1016\/j.iot.2026.101938_bib0081","doi-asserted-by":"crossref","first-page":"1361","DOI":"10.1109\/LCSYS.2024.3516073","article-title":"Traffic density control for heterogeneous highway systems with input constraints","volume":"8","author":"Rahmanidehkordi","year":"2024","journal-title":"IEEE Control Syst. Lett."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0082","doi-asserted-by":"crossref","first-page":"302","DOI":"10.1109\/TII.2011.2174248","article-title":"Model-based validation of industrial control systems","volume":"8","author":"Est\u00e9vez","year":"2011","journal-title":"IEEE Trans. Ind. Inf."},{"key":"10.1016\/j.iot.2026.101938_bib0083","series-title":"International Conference on Telecommunication, Power Analysis and Computing Techniques (ICTPACT-2017)","article-title":"A survey on mqtt: a protocol of internet of things (iot)","volume":"20","author":"Soni","year":"2017"},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0084","doi-asserted-by":"crossref","first-page":"62","DOI":"10.1109\/MIC.2012.29","article-title":"Coap: an application protocol for billions of tiny internet nodes","volume":"16","author":"Bormann","year":"2012","journal-title":"IEEE Internet Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0085","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1016\/j.psep.2023.03.012","article-title":"Analysis of safety and security challenges and opportunities related to cyber-physical systems","volume":"173","author":"El-Kady","year":"2023","journal-title":"Process Saf. Environ. Prot."},{"key":"10.1016\/j.iot.2026.101938_bib0086","series-title":"2024 IEEE 14th Annual Computing and Communication Workshop and Conference (CCWC)","first-page":"0682","article-title":"Enhancing security and privacy in cyber-physical systems: challenges and solutions","author":"Sharma","year":"2024"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0087","article-title":"Security in cyber physical systems: transformation and challenges","volume":"7","author":"Bindra","year":"2024","journal-title":"J. Auton. Intell."},{"key":"10.1016\/j.iot.2026.101938_bib0088","doi-asserted-by":"crossref","DOI":"10.1016\/j.cie.2024.109891","article-title":"Cyber-physical systems security: a systematic review","volume":"188","author":"Harkat","year":"2024","journal-title":"Comput. Ind. Eng."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0089","doi-asserted-by":"crossref","first-page":"176","DOI":"10.37934\/araset.40.2.176202","article-title":"Security and safety in cyber-Physical system (CPS): an inclusive threat model","volume":"40","author":"Noor","year":"2024","journal-title":"J. Adv. Res. Appl. Sci. Eng. Technol."},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0090","doi-asserted-by":"crossref","first-page":"3453","DOI":"10.1109\/COMST.2018.2855563","article-title":"A survey of IoT-enabled cyberattacks: assessing attack paths to critical infrastructures and services","volume":"20","author":"Stellios","year":"2018","journal-title":"IEEE Commun. Surv. Tutorials"},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0091","doi-asserted-by":"crossref","first-page":"790","DOI":"10.3390\/app13020790","article-title":"An overview of cyber threats, attacks and countermeasures on the primary domains of smart cities","volume":"13","author":"Demertzi","year":"2023","journal-title":"Appl. Sci."},{"key":"10.1016\/j.iot.2026.101938_bib0092","doi-asserted-by":"crossref","first-page":"16350","DOI":"10.1109\/ACCESS.2022.3147323","article-title":"Cyber-physical systems enabled transport networks in smart cities: challenges and enabling technologies of the new mobility era","volume":"10","author":"Pundir","year":"2022","journal-title":"IEEE Access"},{"issue":"03","key":"10.1016\/j.iot.2026.101938_bib0093","doi-asserted-by":"crossref","first-page":"1651","DOI":"10.30574\/wjarr.2024.22.3.1921","article-title":"Innovative solutions for critical infrastructure resilience against cyber-physical attacks","volume":"22","author":"Ojo","year":"2024","journal-title":"World J. Adv. Res. Rev."},{"key":"10.1016\/j.iot.2026.101938_bib0094","unstructured":"D. Medcalfe, Critical infrastructure in the face of global cyber threats, 2024, Online resource."},{"key":"10.1016\/j.iot.2026.101938_bib0095","doi-asserted-by":"crossref","DOI":"10.1016\/j.scs.2019.101660","article-title":"A survey on cybersecurity, data privacy, and policy issues in cyber-physical system deployments in smart cities","volume":"50","author":"Habibzadeh","year":"2019","journal-title":"Sustainable Cities Soc."},{"issue":"10","key":"10.1016\/j.iot.2026.101938_bib0096","doi-asserted-by":"crossref","first-page":"4580","DOI":"10.3390\/app11104580","article-title":"Internet of things meet internet of threats: new concern cyber security issues of critical cyber infrastructure","volume":"11","author":"Djenna","year":"2021","journal-title":"Appl. Sci."},{"key":"10.1016\/j.iot.2026.101938_bib0097","series-title":"Cyber Security: Critical Infrastructure Protection","first-page":"3","article-title":"Cyber-attacks against critical infrastructure","author":"Lehto","year":"2022"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0098","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1007\/s12530-020-09335-4","article-title":"Handling of advanced persistent threats and complex incidents in healthcare, transportation and energy ICT infrastructures","volume":"12","author":"Papastergiou","year":"2021","journal-title":"Evol. Syst."},{"issue":"18","key":"10.1016\/j.iot.2026.101938_bib0099","doi-asserted-by":"crossref","first-page":"9241","DOI":"10.3390\/app12189241","article-title":"A cyber-physical risk assessment approach for internet of things enabled transportation infrastructure","volume":"12","author":"Ntafloukas","year":"2022","journal-title":"Appl. Sci."},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0100","doi-asserted-by":"crossref","first-page":"1802","DOI":"10.1109\/JIOT.2017.2703172","article-title":"Cyber physical systems security a survey","volume":"4","author":"Humayed","year":"2017","journal-title":"IEEE Internet Things J."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0101","doi-asserted-by":"crossref","first-page":"277","DOI":"10.1109\/TII.2012.2198666","article-title":"Review of security issues in industrial networks","volume":"9","author":"Cheminod","year":"2012","journal-title":"IEEE Trans. Ind. Inf."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0102","doi-asserted-by":"crossref","first-page":"337","DOI":"10.1108\/IntR-07-2014-0173","article-title":"The internet of things: a security point of view","volume":"26","author":"Li","year":"2016","journal-title":"Internet Res."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0103","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3453176","article-title":"A survey on security and privacy issues in modern healthcare systems: attacks and defenses","volume":"2","author":"Newaz","year":"2021","journal-title":"ACM Trans. Comput. Healthc."},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0104","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3571156","article-title":"A comprehensive review of the state-of-the-art on security and privacy issues in healthcare","volume":"55","author":"L\u00f3pez Mart\u00ednez","year":"2023","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0105","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1007\/s10207-023-00732-9","article-title":"Cybersecurity challenges in IoT-based smart renewable energy","volume":"23","author":"Rekeraho","year":"2024","journal-title":"Int. J. Inf. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0106","series-title":"Workshop on Future Directions in Cyber-physical Systems Security","first-page":"7","article-title":"Challenges for securing cyber physical systems","volume":"5","author":"Cardenas","year":"2009"},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0107","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/MSEC.2020.3002851","article-title":"Challenges and opportunities in cyberphysical systems security: a physics-based perspective","volume":"18","author":"Ahmed","year":"2020","journal-title":"IEEE Security & Privacy"},{"key":"10.1016\/j.iot.2026.101938_bib0108","doi-asserted-by":"crossref","first-page":"212","DOI":"10.1016\/j.compind.2018.04.017","article-title":"Cyber-physical systems and their security issues","volume":"100","author":"Alguliyev","year":"2018","journal-title":"Comput. Ind."},{"issue":"9","key":"10.1016\/j.iot.2026.101938_bib0109","doi-asserted-by":"crossref","first-page":"1421","DOI":"10.1109\/TCAD.2016.2633961","article-title":"Design automation of cyber-physical systems: challenges, advances, and opportunities","volume":"36","author":"Seshia","year":"2016","journal-title":"IEEE Trans. Comput. Aided Des. Integr. Circuits Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0110","series-title":"Signal Processing, Sensor\/Information Fusion, and Target Recognition XXXIII","first-page":"345","article-title":"Distributed learning for automatic modulation recognition in bandwidth-limited networks","volume":"13057","author":"Rashvand","year":"2024"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0111","first-page":"285","article-title":"Security and privacy challenges in cyber-physical systems","volume":"8","author":"AlDosari","year":"2017","journal-title":"J. Inf. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0112","series-title":"Software Quality: Methods and Tools for Better Software and Systems: 10th International Conference, SWQD 2018, Vienna, Austria, January 16\u201319, 2018, Proceedings 10","first-page":"3","article-title":"Security challenges in cyber-physical production systems","author":"Kieseberg","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0113","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1016\/j.cose.2017.04.005","article-title":"Cyber physical systems security: analysis, challenges and solutions","volume":"68","author":"Ashibani","year":"2017","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0114","doi-asserted-by":"crossref","DOI":"10.1016\/j.micpro.2020.103201","article-title":"Cyber-physical systems security: limitations, issues and future trends","volume":"77","author":"Yaacoub","year":"2020","journal-title":"Microprocess. Microsyst."},{"key":"10.1016\/j.iot.2026.101938_bib0115","series-title":"Leveraging Applications of Formal Methods, Verification and Validation. Industrial Practice: 8th International Symposium, ISoLA 2018, Limassol, Cyprus, November 5-9, 2018, Proceedings, Part IV 8","first-page":"9","article-title":"Opportunities and challenges in monitoring cyber-physical systems security","author":"Bonakdarpour","year":"2018"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0116","doi-asserted-by":"crossref","DOI":"10.3390\/fi17010008","article-title":"GenSQLi: a generative artificial intelligence framework for automatically securing web application firewalls against structured query language injection attacks","volume":"17","author":"Babaey","year":"2025","journal-title":"Future Internet"},{"key":"10.1016\/j.iot.2026.101938_bib0117","unstructured":"A. Zibaeirad, M. Vieira, VulnLLMEval: a framework for evaluating large language models in software vulnerability detection and patching, arXiv preprint arXiv: 2409.10756(2024)."},{"key":"10.1016\/j.iot.2026.101938_bib0118","series-title":"2017 International Conference on Selected Topics in Mobile and Wireless Networking (MoWNeT)","first-page":"1","article-title":"Security challenges and methods for protecting critical infrastructure cyber-physical systems","author":"Taylor","year":"2017"},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0119","first-page":"74","article-title":"Cyber-physical security challenges in manufacturing systems","volume":"2","author":"Wells","year":"2014","journal-title":"Manuf. Lett."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0120","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.comcom.2012.09.006","article-title":"Cyber-physical systems: milestones and research challenges","volume":"36","author":"Park","year":"2012","journal-title":"Comput. Commun."},{"key":"10.1016\/j.iot.2026.101938_bib0121","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1016\/j.iotcps.2021.12.002","article-title":"Cyber physical systems: analyses, challenges and possible solutions","volume":"1","author":"Tyagi","year":"2021","journal-title":"Internet Things Cyber Phys. Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0122","doi-asserted-by":"crossref","first-page":"394","DOI":"10.1016\/j.arcontrol.2019.04.011","article-title":"A systems and control perspective of CPS security","volume":"47","author":"Dibaji","year":"2019","journal-title":"Annu. Rev. Control"},{"key":"10.1016\/j.iot.2026.101938_bib0123","doi-asserted-by":"crossref","DOI":"10.1016\/j.micpro.2020.103201","article-title":"Cyber-physical systems security: limitations, issues and future trends","volume":"77","author":"Yaacoub","year":"2020","journal-title":"Microprocess. Microsyst."},{"key":"10.1016\/j.iot.2026.101938_bib0124","series-title":"A comprehensive framework for enhancing large-scale event security","author":"Alteri","year":"2024"},{"key":"10.1016\/j.iot.2026.101938_bib0125","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2024.109489","article-title":"Insider threat detection in cyber-physical systems: a systematic literature review","volume":"119","author":"Al-Mhiqani","year":"2024","journal-title":"Comput. Electr. Eng."},{"key":"10.1016\/j.iot.2026.101938_bib0126","series-title":"Digital Resilience: Navigating Disruption and Safeguarding Data Privacy","first-page":"459","article-title":"Advancing security and resilience","author":"Shandilya","year":"2024"},{"key":"10.1016\/j.iot.2026.101938_bib0127","series-title":"Proceedings of the 2018 Workshop on Cyber-Physical Systems Security and Privacy","first-page":"1","article-title":"High-performance unsupervised anomaly detection for cyber-physical system networks","author":"Schneider","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0128","series-title":"Proceedings of the 12th International Conference on Availability, Reliability and Security","first-page":"1","article-title":"Anomaly-based detection and classification of attacks in cyber-physical systems","author":"Kreimel","year":"2017"},{"key":"10.1016\/j.iot.2026.101938_bib0129","series-title":"53rd IEEE Conference on Decision and Control","first-page":"848","article-title":"Anomaly detection in cyber-physical systems: a formal methods approach","author":"Jones","year":"2014"},{"issue":"5","key":"10.1016\/j.iot.2026.101938_bib0130","first-page":"1","article-title":"Machine learning approaches for anomaly detection in cyber-physical systems: a case study in critical infrastructure protection","volume":"5","author":"Vegesna","year":"2024","journal-title":"Int. J. Mach. Learn. Artif. Intell."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0131","doi-asserted-by":"crossref","first-page":"30","DOI":"10.9734\/ajrcos\/2021\/v9i230218","article-title":"Attack and anomaly detection in iot networks using machine learning techniques: a review","volume":"9","author":"Haji","year":"2021","journal-title":"Asian J. Res. Comput. Sci"},{"key":"10.1016\/j.iot.2026.101938_bib0132","series-title":"Proceedings of the 2Nd ACM International Workshop on Cyber-Physical System Security","first-page":"34","article-title":"Behaviour-based attack detection and classification in cyber physical systems using machine learning","author":"Junejo","year":"2016"},{"key":"10.1016\/j.iot.2026.101938_bib0133","series-title":"2020 4th International Conference on Trends in Electronics and Informatics (ICOEI)(48184)","first-page":"787","article-title":"Machine learning based anomaly detection for IoT network:(anomaly detection in IoT network)","author":"Sahu","year":"2020"},{"key":"10.1016\/j.iot.2026.101938_bib0134","series-title":"2019 IEEE Texas Power and Energy Conference (TPEC)","first-page":"1","article-title":"Anomaly detection in cyber-physical system using logistic regression analysis","author":"Noureen","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0135","article-title":"Fuzzy controller-empowered autoencoder framework for anomaly detection in cyber physical systems","volume":"108","author":"Gupta","year":"2023","journal-title":"Comput. Electr. Eng."},{"key":"10.1016\/j.iot.2026.101938_bib0136","article-title":"Causality-guided counterfactual debiasing for anomaly detection of cyber-physical systems","author":"Tang","year":"2023","journal-title":"IEEE Trans. Ind. Inf."},{"key":"10.1016\/j.iot.2026.101938_bib0137","series-title":"2019 IEEE 9th Annual Computing and Communication Workshop and Conference (CCWC)","first-page":"0305","article-title":"Ad-IoT: anomaly detection of iot cyberattacks in smart city using machine learning","author":"Alrashdi","year":"2019"},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0138","doi-asserted-by":"crossref","first-page":"1111","DOI":"10.1007\/s10845-017-1315-5","article-title":"Detecting cyber-physical attacks in cybermanufacturing systems with machine learning methods","volume":"30","author":"Wu","year":"2019","journal-title":"J. Intell. Manuf."},{"key":"10.1016\/j.iot.2026.101938_bib0139","series-title":"2022 52nd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W)","first-page":"44","article-title":"Robustness testing of data and knowledge driven anomaly detection in cyber-physical systems","author":"Zhou","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0140","unstructured":"B. Eiteneuer, O. Niggemann, Lstm for model-based anomaly detection in cyber-physical systems, arXiv preprint arXiv: 2010.15680. (2020)."},{"key":"10.1016\/j.iot.2026.101938_bib0141","series-title":"2022 IEEE 16th International Conference on Application of Information and Communication Technologies (AICT)","first-page":"1","article-title":"Anomaly detection in cyber-physical systems based on biGRU-VAE","author":"Alguliyev","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0142","article-title":"MTS-DVGAN: Anomaly detection in cyber-physical systems using a dual variational generative adversarial network","volume":"139","author":"Sun","year":"2024","journal-title":"Comput. Sec."},{"key":"10.1016\/j.iot.2026.101938_bib0143","series-title":"2022 4th International Conference on Industrial Artificial Intelligence (IAI)","first-page":"1","article-title":"Reconstruction-based multi-scale anomaly detection for cyber-physical systems","author":"Dong","year":"2022"},{"issue":"9","key":"10.1016\/j.iot.2026.101938_bib0144","doi-asserted-by":"crossref","first-page":"4207","DOI":"10.3390\/s23094207","article-title":"Decentralized real-time anomaly detection in cyber-physical production systems under industry constraints","volume":"23","author":"Goetz","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0145","doi-asserted-by":"crossref","first-page":"103906","DOI":"10.1109\/ACCESS.2021.3094024","article-title":"Design and development of a deep learning-based model for anomaly detection in IoT networks","volume":"9","author":"Ullah","year":"2021","journal-title":"IEEE Access"},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0146","doi-asserted-by":"crossref","first-page":"9214","DOI":"10.1109\/JIOT.2021.3094295","article-title":"Graph neural networks for anomaly detection in industrial internet of things","volume":"9","author":"Wu","year":"2021","journal-title":"IEEE Internet Things J."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0147","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1007\/s12243-022-00922-x","article-title":"Multipath neural networks for anomaly detection in cyber-physical systems","volume":"78","author":"Larsen","year":"2023","journal-title":"Ann. Telecommun."},{"issue":"15","key":"10.1016\/j.iot.2026.101938_bib0148","doi-asserted-by":"crossref","first-page":"7050","DOI":"10.3390\/app11157050","article-title":"Anomaly detection using deep neural network for IoT architecture","volume":"11","author":"Ahmad","year":"2021","journal-title":"Appl. Sci."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0149","doi-asserted-by":"crossref","first-page":"1673","DOI":"10.1109\/TDSC.2020.3034331","article-title":"Abate: automatic behavioral abstraction technique to detect anomalies in smart cyber-physical systems","volume":"19","author":"Narayanan","year":"2020","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"5","key":"10.1016\/j.iot.2026.101938_bib0150","doi-asserted-by":"crossref","first-page":"4257","DOI":"10.1109\/TIE.2017.2772190","article-title":"Anomaly detection based on zone partition for security protection of industrial cyber-physical systems","volume":"65","author":"Yang","year":"2017","journal-title":"IEEE Trans. Ind. Electron."},{"key":"10.1016\/j.iot.2026.101938_bib0151","series-title":"2021 14th IEEE Conference on Software Testing, Verification and Validation (ICST)","first-page":"205","article-title":"Digital twin-based anomaly detection in cyber-physical systems","author":"Xu","year":"2021"},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0152","first-page":"4573","article-title":"Adaptive-correlation-aware unsupervised deep learning for anomaly detection in cyber-physical systems","volume":"20","author":"Xi","year":"2023","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0153","doi-asserted-by":"crossref","first-page":"5790","DOI":"10.1109\/TII.2020.3047675","article-title":"Siamese neural network based few-shot learning for anomaly detection in industrial cyber-physical systems","volume":"17","author":"Zhou","year":"2020","journal-title":"IEEE Trans. Ind. Inf."},{"key":"10.1016\/j.iot.2026.101938_bib0154","article-title":"CPS-GUARD: Intrusion detection for cyber-physical systems and IoT devices using outlier-aware deep autoencoders","volume":"129","author":"Catillo","year":"2023","journal-title":"Compu. Sec."},{"key":"10.1016\/j.iot.2026.101938_bib0155","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1016\/j.comcom.2022.02.022","article-title":"IADF-CPS: intelligent anomaly detection framework towards cyber physical systems","volume":"188","author":"Nagarajan","year":"2022","journal-title":"Comput. Commun."},{"key":"10.1016\/j.iot.2026.101938_bib0156","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2019.100059","article-title":"Attack and anomaly detection in IoT sensors in IoT sites using machine learning approaches","volume":"7","author":"Hasan","year":"2019","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101938_bib0157","series-title":"2022 International Conference on Computer Communications and Networks (ICCCN)","first-page":"1","article-title":"Security of machine learning-based anomaly detection in cyber physical systems","author":"Jadidi","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0158","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2023.127068","article-title":"A hybrid methodology for anomaly detection in cyber\u2013physical systems","volume":"568","author":"Jeffrey","year":"2024","journal-title":"Neurocomputing"},{"issue":"7","key":"10.1016\/j.iot.2026.101938_bib0159","doi-asserted-by":"crossref","first-page":"1391","DOI":"10.3390\/electronics13071391","article-title":"Using ensemble learning for anomaly detection in cyber\u2013Physical systems","volume":"13","author":"Jeffrey","year":"2024","journal-title":"Electronics"},{"key":"10.1016\/j.iot.2026.101938_bib0160","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2022.100568","article-title":"IoT anomaly detection methods and applications: a survey","volume":"19","author":"Chatterjee","year":"2022","journal-title":"Internet Things"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0161","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1109\/TASE.2021.3073396","article-title":"Hybrid statistical-machine learning for real-time anomaly detection in industrial cyber\u2013physical systems","volume":"20","author":"Hao","year":"2021","journal-title":"IEEE Trans. Autom. Sci. Eng."},{"issue":"12","key":"10.1016\/j.iot.2026.101938_bib0162","doi-asserted-by":"crossref","first-page":"9179","DOI":"10.1109\/JIOT.2021.3100509","article-title":"Learning graph structures with transformer for multivariate time-series anomaly detection in IoT","volume":"9","author":"Chen","year":"2021","journal-title":"IEEE Internet Things J."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0163","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3066167","article-title":"Illiad: intelligent invariant and anomaly detection in cyber-physical systems","volume":"9","author":"Muralidhar","year":"2018","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"10.1016\/j.iot.2026.101938_bib0164","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2023.108988","article-title":"A hybrid behavior-and bayesian network-based framework for cyber\u2013physical anomaly detection","volume":"112","author":"Faramondi","year":"2023","journal-title":"Comput. Electr. Eng."},{"key":"10.1016\/j.iot.2026.101938_bib0165","series-title":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining","first-page":"2858","article-title":"Time series anomaly detection for cyber-physical systems via neural system identification and bayesian filtering","author":"Feng","year":"2021"},{"key":"10.1016\/j.iot.2026.101938_bib0166","series-title":"2023 53rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","first-page":"494","article-title":"IoT anomaly detection via device interaction graph","author":"Wang","year":"2023"},{"issue":"16","key":"10.1016\/j.iot.2026.101938_bib0167","doi-asserted-by":"crossref","first-page":"6112","DOI":"10.3390\/s22166112","article-title":"Bayesian estimation of oscillator parameters: toward anomaly detection and cyber-physical system security","volume":"22","author":"Lukens","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0168","series-title":"Dynamic Systems and Control Conference","article-title":"Scalable anomaly detection and isolation in cyber-physical systems using Bayesian networks","volume":"46193","author":"Krishnamurthy","year":"2014"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0169","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1049\/iet-cps.2019.0031","article-title":"Relaxation-based anomaly detection in cyber-physical systems using ensemble kalman filter","volume":"5","author":"Karimipour","year":"2020","journal-title":"IET Cyber-Phys. Syst.: Theor. Appl."},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0170","doi-asserted-by":"crossref","first-page":"1487","DOI":"10.1109\/TCSII.2019.2939276","article-title":"Fusion-based FDI attack detection in cyber-physical systems","volume":"67","author":"Gao","year":"2019","journal-title":"IEEE Trans. Circuits Syst. Express Briefs"},{"key":"10.1016\/j.iot.2026.101938_bib0171","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1016\/j.future.2014.10.002","article-title":"Abnormal traffic-indexed state estimation: a cyber\u2013physical fusion approach for smart grid attack detection","volume":"49","author":"Liu","year":"2015","journal-title":"Future Gener. Comput. Syst."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0172","doi-asserted-by":"crossref","first-page":"386","DOI":"10.1109\/TAC.2017.2714646","article-title":"Causality countermeasures for anomaly detection in cyber-physical systems","volume":"63","author":"Shi","year":"2017","journal-title":"IEEE Trans. Automat. Contr."},{"key":"10.1016\/j.iot.2026.101938_bib0173","series-title":"DX","first-page":"217","article-title":"On the learning of timing behavior for anomaly detection in cyber-physical production systems","author":"Maier","year":"2015"},{"key":"10.1016\/j.iot.2026.101938_bib0174","series-title":"Proceedings of the ACM\/IEEE 12th International Conference on Cyber-Physical Systems","first-page":"44","article-title":"An anomaly detection framework for digital twin driven cyber-physical systems","author":"Gao","year":"2021"},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0175","doi-asserted-by":"crossref","first-page":"825","DOI":"10.1109\/TDSC.2019.2906161","article-title":"Checking is believing: event-aware program anomaly detection in cyber-physical systems","volume":"18","author":"Cheng","year":"2019","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0176","series-title":"NDSS","first-page":"1","article-title":"A systematic framework to generate invariants for anomaly detection in industrial control systems","author":"Feng","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0177","series-title":"2017 IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C)","first-page":"533","article-title":"From design to invariants: detecting attacks on cyber physical systems","author":"Adepu","year":"2017"},{"key":"10.1016\/j.iot.2026.101938_bib0178","series-title":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","first-page":"349","article-title":"ARTINALI: dynamic invariant detection for cyber-physical system security","author":"Aliabadi","year":"2017"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0179","doi-asserted-by":"crossref","first-page":"112","DOI":"10.1109\/TSG.2013.2283171","article-title":"Unified invariants for cyber-physical switched system stability","volume":"5","author":"Paul","year":"2013","journal-title":"IEEE Trans. Smart Grid"},{"key":"10.1016\/j.iot.2026.101938_bib0180","series-title":"2011 IEEE International Conference on Service-Oriented Computing and Applications (SOCA)","first-page":"1","article-title":"Invariants as a unified knowledge model for cyber-physical systems","author":"Paul","year":"2011"},{"key":"10.1016\/j.iot.2026.101938_bib0181","series-title":"FM 2016: Formal Methods: 21st International Symposium, Limassol, Cyprus, November 9-11, 2016, Proceedings 21","first-page":"155","article-title":"Towards learning and verifying invariants of cyber-physical systems by code mutation","author":"Chen","year":"2016"},{"key":"10.1016\/j.iot.2026.101938_bib0182","series-title":"2017IEEE 18th International Symposium on High Assurance Systems Engineering (HASE)","first-page":"124","article-title":"Effectiveness of association rules mining for invariants generation in cyber-physical systems","author":"Pal","year":"2017"},{"key":"10.1016\/j.iot.2026.101938_bib0183","series-title":"2018 IEEE Symposium on Security and Privacy (SP)","first-page":"648","article-title":"Learning from mutants: using code mutation to learn and monitor invariants of a cyber-physical system","author":"Chen","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0184","series-title":"2022 IEEE 4th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)","first-page":"276","article-title":"Dynamic defenses and the transferability of adversarial examples","author":"Thomas","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0185","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.124678","article-title":"Physics-informed machine learning: a comprehensive review on applications in anomaly detection and condition monitoring","volume":"255","author":"Wu","year":"2024","journal-title":"Expert Syst.Appl."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0186","doi-asserted-by":"crossref","first-page":"1534","DOI":"10.3390\/ai5030074","article-title":"Understanding physics-informed neural networks: techniques, applications, trends, and challenges","volume":"5","author":"Farea","year":"2024","journal-title":"AI"},{"key":"10.1016\/j.iot.2026.101938_bib0187","unstructured":"Y. Wu, B. Sicard, S.A. Gadsden, A review of physics-informed machine learning methods with applications to condition monitoring and anomaly detection, arXiv preprint arXiv: 2401.11860(2024)."},{"key":"10.1016\/j.iot.2026.101938_bib0188","article-title":"Multivariate physics-informed convolutional autoencoder for anomaly detection in power distribution systems with widespread deployment of distributed energy resources","volume":"43","author":"Zideh","year":"2025","journal-title":"Sustainable Energy Grids Netw."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0189","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1186\/s42400-022-00114-z","article-title":"Enabling data-driven anomaly detection by design in cyber-physical production systems","volume":"5","author":"Pinto","year":"2022","journal-title":"Cybersecurity"},{"key":"10.1016\/j.iot.2026.101938_bib0190","series-title":"2018IEEE Industrial Cyber-Physical Systems (ICPS)","first-page":"173","article-title":"Protecting cyber physical production systems using anomaly detection to enable self-adaptation","author":"Settanni","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0191","series-title":"On the Move to Meaningful Internet Systems. OTM 2017 Conferences: Confederated International Conferences: CoopIS, C&TC, and ODBASE 2017, Rhodes, Greece, October 23-27, 2017, Proceedings, Part I","first-page":"429","article-title":"Big data summarisation and relevance evaluation for anomaly detection in cyber physical systems","author":"Bagozi","year":"2017"},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0192","doi-asserted-by":"crossref","first-page":"40","DOI":"10.3390\/electronics5030040","article-title":"Cyber-physical system security of a power grid: state-of-the-art","volume":"5","author":"Sun","year":"2016","journal-title":"Electron."},{"issue":"7","key":"10.1016\/j.iot.2026.101938_bib0193","first-page":"5656","article-title":"To assess the potential and capabilities of large language models (LLMs) trained on in-domain ophthalmology data","volume":"65","author":"Alam","year":"2024","journal-title":"Invest. Ophthalmol. Visual Sci."},{"key":"10.1016\/j.iot.2026.101938_bib0194","series-title":"2016 International Workshop on Cyber-physical Systems for Smart Water Networks (CySWater)","first-page":"31","article-title":"SWaT: a water treatment testbed for research and training on ICS security","author":"Mathur","year":"2016"},{"key":"10.1016\/j.iot.2026.101938_bib0195","series-title":"Proceedings of the 3rd International Workshop on Cyber-Physical Systems for Smart Water Networks","first-page":"25","article-title":"WADI: a water distribution testbed for research in the design of secure cyber physical systems","author":"Ahmed","year":"2017"},{"key":"10.1016\/j.iot.2026.101938_bib0196","series-title":"13th USENIX Workshop on Cyber Security Experimentation and Test (CSET 20)","article-title":"{HAI} 1.0:{HIL-based} Augmented {ICS} security dataset","author":"Shin","year":"2020"},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0197","doi-asserted-by":"crossref","DOI":"10.1061\/(ASCE)WR.1943-5452.0000969","article-title":"Battle of the attack detection algorithms: disclosing cyber attacks on water distribution networks","volume":"144","author":"Taormina","year":"2018","journal-title":"J. Water Resour. Plann. Manage."},{"key":"10.1016\/j.iot.2026.101938_bib0198","unstructured":"T.H. Morris, Industrial Control System (ICS) Cyber Attack Datasets, 2014, (https:\/\/sites.google.com\/a\/uah.edu\/tommy-morris-uah\/ics-data-sets). Accessed: 2025-05-30."},{"key":"10.1016\/j.iot.2026.101938_bib0199","unstructured":"M. Zolanvari, M.A. Teixeira, L. Gupta, K.M. Khan, R. Jain, WUSTL-IIoT-2021 Dataset for IIoT Cybersecurity Research, 2021, (https:\/\/www.cse.wustl.edu\/~jain\/iiot2\/index.html). Accessed: 2025-05-30."},{"key":"10.1016\/j.iot.2026.101938_bib0200","series-title":"2015 Military Communications and Information Systems Conference (MilCIS)","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0201","first-page":"446","article-title":"A study on NSL-KDD dataset for intrusion detection system based on classification algorithms","volume":"4","author":"Dhanabal","year":"2015","journal-title":"Int. J. Adv. Res. Comput. Commun. Eng."},{"issue":"3.24","key":"10.1016\/j.iot.2026.101938_bib0202","first-page":"479","article-title":"A detailed analysis of CICIDS2017 dataset for designing intrusion detection systems","volume":"7","author":"Panigrahi","year":"2018","journal-title":"Int. J. Eng. Technol."},{"key":"10.1016\/j.iot.2026.101938_bib0203","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s40537-020-00382-x","article-title":"A survey and analysis of intrusion detection models based on cse-cic-ids2018 big data","volume":"7","author":"Leevy","year":"2020","journal-title":"J. Big. Data"},{"key":"10.1016\/j.iot.2026.101938_bib0204","doi-asserted-by":"crossref","first-page":"40281","DOI":"10.1109\/ACCESS.2022.3165809","article-title":"Edge-IIoTset: a new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning","volume":"10","author":"Ferrag","year":"2022","journal-title":"IEEe Access"},{"issue":"13","key":"10.1016\/j.iot.2026.101938_bib0205","doi-asserted-by":"crossref","first-page":"5941","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: a real-time dataset and benchmark for large-scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0206","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-IoT dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0207","series-title":"2018IEEE 17th International Symposium on Network Computing and Applications (NCA)","first-page":"1","article-title":"Monitoring IoT networks for botnet activity","author":"Chawathe","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0208","unstructured":"H.A. Guvenir, B. Acar, H. Muderrisoglu, R. Quinlan, Arrhythmia Dataset, 1997, (https:\/\/archive.ics.uci.edu\/dataset\/5\/arrhythmia). Accessed: 2025-05-30."},{"key":"10.1016\/j.iot.2026.101938_bib0209","unstructured":"C.f. R. i. C. S. iTrust, EPIC: Electric Power and Intelligent Control Testbed, 2025, (https:\/\/itrust.sutd.edu.sg\/itrust-labs-home\/itrust-labs_epic\/). Accessed: 2025-05-30."},{"key":"10.1016\/j.iot.2026.101938_bib0210","doi-asserted-by":"crossref","first-page":"122385","DOI":"10.1109\/ACCESS.2021.3109465","article-title":"A hardware-in-the-loop water distribution testbed dataset for cyber-physical security testing","volume":"9","author":"Faramondi","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0211","unstructured":"Y. LeCun, C. Cortes, C. Burges, et al., MNIST handwritten digit database, 2010, Available at: http:\/\/yann.lecun.com\/exdb\/mnist\/."},{"key":"10.1016\/j.iot.2026.101938_bib0212","series-title":"2008 Eighth IEEE International Conference on Data Mining","first-page":"413","article-title":"Isolation forest","author":"Liu","year":"2008"},{"issue":"2011","key":"10.1016\/j.iot.2026.101938_bib0213","first-page":"1","article-title":"Sparse autoencoder","volume":"72","author":"Ng","year":"2011","journal-title":"CS294A Lect. Not."},{"key":"10.1016\/j.iot.2026.101938_bib0214","unstructured":"P. Malhotra, A. Ramakrishnan, G. Anand, L. Vig, P. Agarwal, G. Shroff, LSTM-based encoder-decoder for multi-sensor anomaly detection, arXiv preprint arXiv: 1607.00148(2016)."},{"key":"10.1016\/j.iot.2026.101938_bib0215","series-title":"International Conference on Learning Representations","article-title":"Deep autoencoding gaussian mixture model for unsupervised anomaly detection","author":"Zong","year":"2018"},{"key":"10.1016\/j.iot.2026.101938_bib0216","series-title":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","first-page":"2828","article-title":"Robust anomaly detection for multivariate time series through stochastic recurrent neural network","author":"Su","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0217","series-title":"Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","first-page":"3395","article-title":"Usad: unsupervised anomaly detection on multivariate time series","author":"Audibert","year":"2020"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0218","doi-asserted-by":"crossref","first-page":"2179","DOI":"10.1109\/TDSC.2021.3050101","article-title":"Efficient cyber attack detection in industrial control systems using lightweight neural networks and pca","volume":"19","author":"Kravchik","year":"2021","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0219","series-title":"ICASSP 2022-2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","first-page":"3568","article-title":"Stgat-mad: spatial-temporal graph attention network for multivariate time series anomaly detection","author":"Zhan","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0220","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"4027","article-title":"Graph neural network-based anomaly detection in multivariate time series","volume":"35","author":"Deng","year":"2021"},{"issue":"5","key":"10.1016\/j.iot.2026.101938_bib0221","doi-asserted-by":"crossref","first-page":"7278","DOI":"10.1109\/TII.2022.3231923","article-title":"A novel anomaly detection method for digital twin data using deconvolution operation with attention mechanism","volume":"19","author":"Li","year":"2022","journal-title":"IEEE Trans. Ind. Inf."},{"key":"10.1016\/j.iot.2026.101938_bib0222","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103825","article-title":"ADT: Time series anomaly detection for cyber-physical systems via deep reinforcement learning","volume":"141","author":"Yang","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101938_bib0223","series-title":"2023 IEEE 29th International Conference on Parallel and Distributed Systems (ICPADS)","first-page":"314","article-title":"Anomaly detection with graph attention network for multimodal iot data monitoring","author":"Li","year":"2023"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0224","doi-asserted-by":"crossref","first-page":"724","DOI":"10.1109\/TDSC.2022.3143493","article-title":"USMD: Unsupervised misbehaviour detection for multi-sensor data","volume":"20","author":"Alsaedi","year":"2022","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101938_bib0225","series-title":"International Conference on Artificial Neural Networks","first-page":"703","article-title":"MAD-GAN: Multivariate anomaly detection for time series data with generative adversarial networks","author":"Li","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0226","doi-asserted-by":"crossref","DOI":"10.1016\/j.conengprac.2024.106164","article-title":"Anomaly detection using invariant rules in industrial control systems","volume":"154","author":"Zhu","year":"2025","journal-title":"Control Eng. Pract."},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0227","doi-asserted-by":"crossref","first-page":"4400","DOI":"10.1038\/s41598-023-31193-8","article-title":"Anomaly detection using spatial and temporal information in multivariate time series","volume":"13","author":"Tian","year":"2023","journal-title":"Sci. Rep."},{"key":"10.1016\/j.iot.2026.101938_bib0228","doi-asserted-by":"crossref","DOI":"10.1016\/j.ins.2024.121062","article-title":"Edge conditional node update graph neural network for multivariate time series anomaly detection","volume":"679","author":"Jo","year":"2024","journal-title":"Inf. Sci."},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0229","first-page":"1","article-title":"GNN-Based advanced feature integration for ICS anomaly detection","volume":"14","author":"Shuaiyi","year":"2023","journal-title":"ACM Trans. Intell. Syst. Technol."},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0230","doi-asserted-by":"crossref","first-page":"2886","DOI":"10.3390\/s22082886","article-title":"Lightweight long short-term memory variational auto-encoder for multivariate time series anomaly detection in industrial control systems","volume":"22","author":"F\u00e4hrmann","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101938_bib0231","series-title":"USENIX Security","article-title":"Gecos replacing experts: generalizable and comprehensible industrial intrusion detection","author":"Wolsing","year":"2025"},{"key":"10.1016\/j.iot.2026.101938_bib0232","series-title":"Proceedings of the 2018 on Asia Conference on Computer and Communications Security","first-page":"525","article-title":"TABOR: A graphical model-based approach for anomaly detection in industrial control systems","author":"Lin","year":"2018"},{"issue":"1","key":"10.1016\/j.iot.2026.101938_bib0233","doi-asserted-by":"crossref","first-page":"96","DOI":"10.1186\/s42162-024-00401-8","article-title":"Enhancing resilience in complex energy systems through real-time anomaly detection: a systematic literature review","volume":"7","author":"Aghazadeh Ardebili","year":"2024","journal-title":"Energy Inf."},{"key":"10.1016\/j.iot.2026.101938_bib0234","series-title":"AIP Conference Proceedings","doi-asserted-by":"crossref","DOI":"10.1063\/5.0234148","article-title":"Model based anomaly detection in cyber physical power systems","volume":"3207","author":"Awad","year":"2024"},{"key":"10.1016\/j.iot.2026.101938_bib0235","first-page":"1","article-title":"Anomaly detection in cyber-physical systems using actuator state transition model","author":"Pandey","year":"2024","journal-title":"Int. J. Inf. Technol."},{"issue":"10","key":"10.1016\/j.iot.2026.101938_bib0236","doi-asserted-by":"crossref","DOI":"10.1016\/j.jksuci.2023.101860","article-title":"Anomaly detection method based on penalty least squares algorithm and time window entropy for cyber\u2013Physical systems","volume":"35","author":"Zhang","year":"2023","journal-title":"J. King Saud Univ. Comput. Inf. Sci."},{"key":"10.1016\/j.iot.2026.101938_bib0237","unstructured":"P. Krishnamurthy, A. Rasteh, R. Karri, F. Khorrami, Tracking real-time anomalies in cyber-physical systems through dynamic behavioral analysis, arXiv preprint arXiv: 2406.12438(2024)."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0238","first-page":"265","article-title":"Possibility of protection against unauthorized interference in telecommunication systems","volume":"2","author":"Basholli","year":"2023","journal-title":"Eng. Appl."},{"key":"10.1016\/j.iot.2026.101938_bib0239","series-title":"2023 International Conference on Inventive Computation Technologies (ICICT)","first-page":"1223","article-title":"Integrating AI with cyber security for smart industry 4.0 application","author":"Goyal","year":"2023"},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0240","doi-asserted-by":"crossref","first-page":"1411","DOI":"10.1109\/TITS.2020.2970295","article-title":"Real-time sensor anomaly detection and recovery in connected automated vehicle sensors","volume":"22","author":"Wang","year":"2020","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"3","key":"10.1016\/j.iot.2026.101938_bib0241","doi-asserted-by":"crossref","first-page":"1264","DOI":"10.1109\/TITS.2019.2906038","article-title":"Real-time sensor anomaly detection and identification in automated vehicles","volume":"21","author":"Van Wyk","year":"2019","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"2","key":"10.1016\/j.iot.2026.101938_bib0242","doi-asserted-by":"crossref","first-page":"2336","DOI":"10.1109\/JSYST.2024.3402978","article-title":"Toward a human-cyber-physical system for real-time anomaly detection","volume":"18","author":"Bajic","year":"2024","journal-title":"IEEE Syst. J."},{"key":"10.1016\/j.iot.2026.101938_bib0243","series-title":"2019 International Conference on Robotics and Automation (ICRA)","first-page":"5679","article-title":"Automatic real-time anomaly detection for autonomous aerial vehicles","author":"Keipour","year":"2019"},{"key":"10.1016\/j.iot.2026.101938_bib0244","doi-asserted-by":"crossref","first-page":"52455","DOI":"10.1109\/ACCESS.2019.2911979","article-title":"Implementation of a large-scale platform for cyber-physical system real-time monitoring","volume":"7","author":"Canizo","year":"2019","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101938_bib0245","doi-asserted-by":"crossref","unstructured":"A. Erba, R. Taormina, S. Galelli, M. Pogliani, M. Carminati, S. Zanero, N.O. Tippenhauer, Real-time evasion attacks with physical constraints on deep learning-based anomaly detectors in industrial control systems, arXiv preprint arXiv: 1907.07487(2019).","DOI":"10.1145\/3427228.3427660"},{"key":"10.1016\/j.iot.2026.101938_bib0246","series-title":"International Conference on Learning Representations (ICLR)","article-title":"Anomaly transformer: time series anomaly detection with association discrepancy","author":"Xu","year":"2022"},{"issue":"6","key":"10.1016\/j.iot.2026.101938_bib0247","doi-asserted-by":"crossref","first-page":"1201","DOI":"10.14778\/3514061.3514067","article-title":"TranAD: deep transformer networks for anomaly detection in multivariate time series data","volume":"15","author":"Tuli","year":"2022","journal-title":"Proc. VLDB Endow."},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0248","article-title":"Ensemble learning: a survey","volume":"8","author":"Sagi","year":"2021","journal-title":"WIREs Data Min. Knowl. Discovery"},{"issue":"4","key":"10.1016\/j.iot.2026.101938_bib0249","doi-asserted-by":"crossref","first-page":"1479","DOI":"10.1109\/TKDE.2019.2947676","article-title":"Extended isolation forest","volume":"33","author":"Hariri","year":"2021","journal-title":"IEEE Trans. Knowl. Data Eng."},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0250","doi-asserted-by":"crossref","first-page":"7457","DOI":"10.1109\/JIOT.2020.2984887","article-title":"Edge intelligence: the confluence of edge computing and artificial intelligence","volume":"7","author":"Deng","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101938_bib0251","series-title":"Low Power Computer Vision","first-page":"291","article-title":"A survey of quantization methods for efficient neural network inference","author":"Gholami","year":"2022"},{"key":"10.1016\/j.iot.2026.101938_bib0252","first-page":"129","article-title":"What is the state of neural network pruning?","volume":"2","author":"Blalock","year":"2020","journal-title":"Proc. Mach. Learn. Syst."},{"key":"10.1016\/j.iot.2026.101938_bib0253","doi-asserted-by":"crossref","first-page":"1789","DOI":"10.1007\/s11263-021-01453-z","article-title":"Knowledge distillation: a survey","volume":"129","author":"Gou","year":"2021","journal-title":"Int J Comput Vis"},{"issue":"8","key":"10.1016\/j.iot.2026.101938_bib0254","doi-asserted-by":"crossref","first-page":"1738","DOI":"10.1109\/JPROC.2019.2918951","article-title":"Edge intelligence: paving the last mile of artificial intelligence with edge computing","volume":"107","author":"Zhou","year":"2021","journal-title":"Proc. IEEE"}],"container-title":["Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000685?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000685?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T08:31:52Z","timestamp":1780043512000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2542660526000685"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":254,"alternative-id":["S2542660526000685"],"URL":"https:\/\/doi.org\/10.1016\/j.iot.2026.101938","relation":{},"ISSN":["2542-6605"],"issn-type":[{"value":"2542-6605","type":"print"}],"subject":[],"published":{"date-parts":[[2026,5]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Cyber-physical systems security: A comprehensive review of anomaly detection techniques","name":"articletitle","label":"Article Title"},{"value":"Internet of Things","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.iot.2026.101938","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"101938"}}