{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,31]],"date-time":"2025-12-31T12:19:09Z","timestamp":1767183549652,"version":"3.37.3"},"reference-count":34,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"SPW Recherche Program of Wallonia, Belgium, through Win2Wal Project PrEDICT","award":["211012"],"award-info":[{"award-number":["211012"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/access.2022.3213080","type":"journal-article","created":{"date-parts":[[2022,10,10]],"date-time":"2022-10-10T20:08:36Z","timestamp":1665432516000},"page":"111171-111187","source":"Crossref","is-referenced-by-count":8,"title":["Exploiting the Temporal Behavior of State Transitions for Intrusion Detection in ICS\/SCADA"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4477-3238","authenticated-orcid":false,"given":"Gorby","family":"Kabasele Ndonda","sequence":"first","affiliation":[{"name":"Institute for Information and Communication Technologies, Electronics and Applied Mathematics (ICTEAM), Université Catholique de Louvain (UCLouvain), Ottignies-Louvain-la-Neuve, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7362-359X","authenticated-orcid":false,"given":"Ramin","family":"Sadre","sequence":"additional","affiliation":[{"name":"Institute for Information and Communication Technologies, Electronics and Applied Mathematics (ICTEAM), Université Catholique de Louvain (UCLouvain), Ottignies-Louvain-la-Neuve, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800.82"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/iThings\/CPSCom.2011.34"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.05.001"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664277"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-75462-8_6"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS47363.2019.00015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2016.2547742"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2019.8909721"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47560-8_2"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33630-5_7"},{"volume-title":"Modbus Messaging on TCP\/IP Implementation Guide V1.0b","year":"2006","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.03.001"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2019.0011"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ecrime.2010.5706699"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2016.02.004"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/QRS-C.2017.91"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm51999.2021.9632283"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2022.108571"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-74962-4_5"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2010.2099234"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99843-5_5"},{"key":"ref25","first-page":"73","article-title":"Timing patterns and correlations in spontaneous SCADA traffic for anomaly detection","volume-title":"Proc. 22nd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Lin"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/NAPS.2018.8600548"},{"key":"ref27","first-page":"333","article-title":"PLC-sleuth: Detecting and localizing PLC intrusions using control invariants","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Yang"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167305"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/34.400568"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/335191.335388"},{"key":"ref31","first-page":"186","article-title":"The data model concept in statistical mapping","volume":"7","author":"Jenks","year":"1967","journal-title":"International Yearbook of Cartography"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/b978-012370523-5\/50003-1"},{"volume-title":"A Full Modbus Protocol Written in Python","year":"2000","key":"ref33"},{"volume-title":"Secure Water Treatment (SWAT)","year":"2018","key":"ref34"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9668973\/09913986.pdf?arnumber=9913986","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,24]],"date-time":"2024-01-24T02:05:42Z","timestamp":1706061942000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9913986\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/access.2022.3213080","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2022]]}}}